Senior Application Security Engineer

AbbVie

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$109,500–$208,500 / yr
Posted
42 days ago
Freshness
Confirmed live yesterday
Closes
Jul 31, 2126

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $179k
This role $159k
$97k most similar roles pay here $225k

This role pays less than 65% of similar roles. Most pay $145,700–$212,625 — the shaded band above. At the midpoint, this role pays about $159k versus about $179k for comparable roles.

Based on 240 similar postings.

Employer

About AbbVie

AbbVie is a global biopharmaceutical company focused on discovering and delivering innovative medicines and solutions in immunology, oncology, neuroscience, and eye care. Its products include Humira, Skyrizi, and Rinvoq.

AbbVie currently has 297 open roles on FindRole.

Listed pay typically runs $109,500–$208,500 across 271 roles with salary data.

Most-posted roles

View all roles at AbbVie

At a glance

TL;DR · Senior Application Security Engineer

As a Senior Application Security Engineer within the Information Security team, you will enhance inline code testing and reporting processes by implementing and maintaining various application security tools. You will manage SAST, DAST, IAST, and SCA tools to identify vulnerabilities during the software development lifecycle while managing Application Security Posture Management systems to centralize findings. Your daily responsibilities include integrating these tools into CI/CD pipelines, providing first-line support to developers for remediation guidance, and reporting on security risks across diverse business units. You will utilize technologies including Java, Node.js, Python, Terraform, CloudFormation, Snyk, and Endor Labs within AWS and Azure cloud environments. The role focuses on scaling DevSecOps practices, ensuring secure coding standards, and managing vulnerabilities to protect software assets in a complex, large-scale organizational infrastructure.

What you'll do

  • Implement and maintain Application Security Testing tools like SAST, DAST, IAST, and SCA to identify vulnerabilities.
  • Manage Application Security Posture Management (ASPM) tools to centralize and deduplicate security findings.
  • Integrate security tooling into Continuous Integration and Continuous Deployment (CI/CD) pipelines.
  • Act as the first line of support for developers to resolve false positives and provide remediation guidance.
  • Triage security risks at scale across various application development environments and business units.
  • Develop detailed reports on security findings and ongoing remediation efforts.
  • Evangelize secure development practices and communicate technical risks to both technical and non-technical stakeholders.

What we're looking for

  • Bachelor's degree with 7 years of experience, Master's with 6 years, or PhD with 2 years (pharmaceutical industry preferred).
  • Demonstrated experience in application security and software development.
  • Experience implementing, administering, and supporting application security tooling such as SAST, DAST, IAST, and SCA.
  • Extensive knowledge of secure coding practices across multiple programming languages, especially Java and Node.js.
  • Extensive experience integrating security testing into CI/CD pipelines and scaling DevSecOps in cloud environments like AWS and Azure.
  • Experience developing Infrastructure as Code (IaC) via solutions such as Terraform or CloudFormation.
  • Ability to communicate technical findings to both technical and non-technical stakeholders and coach junior engineers.
  • Experience with Snyk, Endor Labs, CSPM tools, or automating workflows via Python (preferred).

More like this

Similar roles

Senior Application Security Engineer

AbbVie

Irvine, CA 42 days ago $109,500$208,500
SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python AWS Azure Terraform CloudFormation CSPM Snyk Endor Labs OWASP Top 10 CWE
7+ yrs exp

Junior Application Security Engineer

AbbVie

Chicago, IL 9 days ago $84,500$162,000
Application Security SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python Snyk Endor Labs CSPM OWASP Top 10 CWE Containerization
5+ yrs exp

Application Security Engineer

AbbVie

Chicago, IL 9 days ago $84,500$162,000
Application Security SAST DAST IAST SCA ASPM CI/CD DevSecOps Java Node.js Python Snyk Endor Labs CSPM OWASP Top 10 CWE Containerization
5+ yrs exp

Senior Application Security Engineer

Upstart

Remote (Canada) 7 days ago $166,900$230,900
Application Security Threat Modeling SAST DAST SCA CI/CD Python Java Go Ruby API Security Microservices GraphQL REST GenAI Secrets Management Cloud-Native AWS CISSP CSSLP CCSP
5+ yrs exp Remote

Senior Application Security Engineer

Brex

Remote 56 days ago $192,000$240,000
Application Security Penetration Testing SAST DAST Python Kotlin gRPC GraphQL Kubernetes AWS Threat Modeling Incident Response Scripting Distributed Systems
5+ yrs exp Remote

Senior Application Security Engineer

LPL Financial

Fort Mill, NC +5 32 days ago $100,631$167,787
Application Security OWASP Top 10 DevSecOps CI/CD IAST Burpsuite Postman Synopsys BlackDuck J-Frog PrismaCloud C# Java HTML CSS React Angular
5+ yrs exp Hybrid