Junior Application Security Engineer

North Chicago, ILPosted 1 month agoWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About AbbVie

AbbVie is a global biopharmaceutical company based in North Chicago, Illinois, founded in 2013 as a spin-off from Abbott Laboratories. The company focuses on discovering, developing, and delivering innovative medicines in key therapeutic areas such as immunology, neuroscience, oncology, eye care, virology, gastroenterology, and women's health. AbbVie expanded its portfolio through the acquisition of Allergan, which added aesthetics and related products. AbbVie is known for its flagship product, Humira, a widely used treatment for autoimmune diseases. The company has a strong pipeline of medicines, including Viekira Pak for hepatitis C, Duopa for Parkinson's disease, and therapies for cancer like Imbruvica and Venclexta. With over $50 billion invested in research and development since its inception, AbbVie aims to create advanced pharmaceutical treatments for complex health conditions. The company serves a diverse customer base, reaching more than 30 million people globally and operating in over 70 countries with a workforce of more than 50,000 employees. AbbVie is committed to patient-centered innovation and improving health outcomes worldwide.

Industry

pharmaceuticals

Employees

55,000

2377 engineers

Revenue

$56B

Website

Visit →

Security at AbbVie

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Stated AppSec Mission: "embed security throughout the software development lifecycle".
"protects AbbVieâs patients, data, and brand".
Developer Enablement vs. Gatekeeping: AbbVie "enables secure, rapid development through automation, developer enablement, and security integration"and aims to "Build and scale developer-focused security programs".
Risk Philosophy: The company seeks to "Develop an application security framework, encompassing all aspects of application security"and notes that "Application Security is a capability of ASM within the larger Cyber Security Operations (CSO) function."Stated Pain Points or Goals: Key goals include to "lead the march to shift security further left within AbbVie", "participating in the management of AbbVieâs bug bounty program", and "identifying enhancements to tools, standards and processes".
Gaps: No public AppSec charter or roadmap with KPIs/SLAs is available.

Security Team

Organizational Structure: Application Security is a capability of ASM within the larger Cyber Security Operations (CSO) function.
Key Public-Facing Leaders: Peter (Pete) Naumovski (Global CISO and VP of IT Risk Management), Brian Kissick (Manager of Application Security Testing), Eric Johnson (Application Security Director).
Active AppSec Job Postings (as of): 6 jobs found.
Common Skill/Tool Patterns: Experience with SAST/DAST/IAST/SCA tooling, Snyk, Endor Labs, Burp Suite, OWASP ZAP, SIEM tools (Chronicle, Splunk, ELK), Attack surface management solutions (Falcon, Tenable, Shodan, Censys), HashiCorp Vault, and integration into CI/CD pipelines.
Gaps: No public org chart or dated AppSec roadmap/SLA documents.

Key Initiatives

Security Champions Program: Evidence found for "AppSec champions programs". "Shift Left"in Practice: AbbVie aims to "lead the march to shift security further left"and performs "application security reviews throughout the application development lifecycle".
Vulnerability Management Process: Intake includes "Participating in the management of AbbVieâs bug bounty program"and using "Attack surface management solutions".
Triage/Remediation involves "Auditing results of security assessments with development and/or security teams and offering plans for remediation of vulnerabilities"and "Retesting remediation of identified vulnerabilities".
Gaps: No public SLAs or MTTR commitments for AppSec remediation, nor a published public roadmap with dates for tool rollouts or program launches in the prior 6 months.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn