Application Security Engineer

AbbVie

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$84,500–$162,000 / yr
Posted
9 days ago
Freshness
Confirmed live yesterday
Closes
Sep 1, 2126

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $177k
This role $123k
$69k most similar roles pay here $231k

This role pays less than 91% of similar roles. Most pay $145,700–$208,800 — the shaded band above. At the midpoint, this role pays about $123k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About AbbVie

AbbVie is a global biopharmaceutical company focused on discovering and delivering innovative medicines and solutions in immunology, oncology, neuroscience, and eye care. Its products include Humira, Skyrizi, and Rinvoq.

AbbVie currently has 297 open roles on FindRole.

Listed pay typically runs $109,500–$208,500 across 271 roles with salary data.

Most-posted roles

View all roles at AbbVie

At a glance

TL;DR · Application Security Engineer

As a Junior Application Security Engineer within the Information Security team, you will support and enhance inline code testing and reporting processes. You will be responsible for implementing and maintaining Application Security Testing tools including SAST, DAST, IAST, and SCA to identify vulnerabilities during the software development lifecycle. Your daily work involves managing Application Security Posture Management tools to centralize findings, integrating security tooling into CI/CD pipelines, and providing first-line support to developers by resolving false positives and guiding remediation efforts. You will utilize skills in Java, Node.js, Python, and scripting to automate workflows. The role requires expertise in secure coding practices, OWASP Top 10, and CWE mitigations across containerized and cloud environments. You will also communicate risks to stakeholders and advocate for secure development practices across various business units.

What you'll do

  • Implement and maintain Application Security Testing tools like SAST, DAST, IAST, and SCA to identify vulnerabilities.
  • Manage Application Security Posture Management (ASPM) tools to centralize and deduplicate security findings.
  • Integrate security tooling into Continuous Integration and Continuous Deployment (CI/CD) pipelines.
  • Act as the first line of support for developers to resolve false positives and provide remediation guidance.
  • Triage security risks at scale across various application development environments and business units.
  • Develop detailed reports on security findings and ongoing remediation efforts.
  • Communicate security risks and advocate for secure development practices to engineering teams and management.

What we're looking for

  • A Bachelor’s degree and 5 years of experience or a Master's degree and 4 years of experience are required.
  • Experience in application security and software development is required.
  • Experience implementing, administering, and supporting application security tools such as SAST, DAST, IAST, and SCA is required.
  • Knowledge of secure coding practices across multiple programming languages, especially Java and Node.js, is required.
  • Experience integrating security testing into CI/CD pipelines is required.
  • Knowledge of application security principles and common vulnerabilities like OWASP Top 10 and CWE is required.
  • Ability to communicate technical findings to both technical and non-technical stakeholders in English is required.
  • Experience coaching and supporting the development of junior engineers is required.

More like this

Similar roles

Junior Application Security Engineer

AbbVie

Chicago, IL 9 days ago $84,500$162,000
Application Security SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python Snyk Endor Labs CSPM OWASP Top 10 CWE Containerization
5+ yrs exp

Senior Application Security Engineer

AbbVie

Irvine, CA 42 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation CSPM Snyk Endor Labs OWASP Top 10 CWE
7+ yrs exp

Senior Application Security Engineer

AbbVie

Chicago, IL 42 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation OWASP Top 10 CWE CSPM Snyk Endor Labs
7+ yrs exp

Senior Application Security Engineer

LPL Financial

Fort Mill, NC +5 32 days ago $100,631$167,787
Application Security OWASP Top 10 DevSecOps CI/CD IAST Burpsuite Postman Synopsys BlackDuck J-Frog PrismaCloud C# Java HTML CSS React Angular
5+ yrs exp Hybrid

Senior Application Security Engineer

Upstart

Remote (Canada) 7 days ago $166,900$230,900
Application Security Threat Modeling SAST DAST SCA CI/CD Python Java Go Ruby API Security Microservices GraphQL REST GenAI Secrets Management Cloud-Native AWS CISSP CSSLP CCSP
5+ yrs exp Remote

Application Security Engineer

State Street

Quincy, MA +4 14 days ago $120,000$202,500
AppSec DevSecOps SAST DAST SCA CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC API Security Container Scanning
6+ yrs exp