AbbVie Security Team

Open security roles at AbbVie, and what we know about the team behind them.

pharmaceuticals · 55000 employees · 2 open roles. Updated October 16, 2026.

Open roles (2)

AbbVie

“"embed security throughout the software development lifecycle"; "protects AbbVieâs patients, data, and brand".”

AbbVie

“"embed security throughout the software development lifecycle"; "protects AbbVieâs patients, data, and brand".”

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Stated AppSec Mission: "embed security throughout the software development lifecycle".
"protects AbbVieâs patients, data, and brand".
Developer Enablement vs. Gatekeeping: AbbVie "enables secure, rapid development through automation, developer enablement, and security integration"and aims to "Build and scale developer-focused security programs".
Risk Philosophy: The company seeks to "Develop an application security framework, encompassing all aspects of application security"and notes that "Application Security is a capability of ASM within the larger Cyber Security Operations (CSO) function."Stated Pain Points or Goals: Key goals include to "lead the march to shift security further left within AbbVie", "participating in the management of AbbVieâs bug bounty program", and "identifying enhancements to tools, standards and processes".
Gaps: No public AppSec charter or roadmap with KPIs/SLAs is available.

The team

Organizational Structure: Application Security is a capability of ASM within the larger Cyber Security Operations (CSO) function.
Key Public-Facing Leaders: Peter (Pete) Naumovski (Global CISO and VP of IT Risk Management), Brian Kissick (Manager of Application Security Testing), Eric Johnson (Application Security Director).
Active AppSec Job Postings (as of): 6 jobs found.
Common Skill/Tool Patterns: Experience with SAST/DAST/IAST/SCA tooling, Snyk, Endor Labs, Burp Suite, OWASP ZAP, SIEM tools (Chronicle, Splunk, ELK), Attack surface management solutions (Falcon, Tenable, Shodan, Censys), HashiCorp Vault, and integration into CI/CD pipelines.
Gaps: No public org chart or dated AppSec roadmap/SLA documents.

What they're working on

Security Champions Program: Evidence found for "AppSec champions programs". "Shift Left"in Practice: AbbVie aims to "lead the march to shift security further left"and performs "application security reviews throughout the application development lifecycle".
Vulnerability Management Process: Intake includes "Participating in the management of AbbVieâs bug bounty program"and using "Attack surface management solutions".
Triage/Remediation involves "Auditing results of security assessments with development and/or security teams and offering plans for remediation of vulnerabilities"and "Retesting remediation of identified vulnerabilities".
Gaps: No public SLAs or MTTR commitments for AppSec remediation, nor a published public roadmap with dates for tool rollouts or program launches in the prior 6 months.