Senior Security Software Engineer

Job Description

Are you a Software Engineer looking to grow your influence and/or break into information security? The Information Security Strategy and Analytics team is seeking an experienced technologist with a software engineering background to help improve security at AbbVie by leading efforts to measure secure software development practices and validate security control effectiveness. The ideal candidate will have a strong technology and software engineering background combined with a foundational understanding of secure software development practices and a love of driving change through data.

This position can be remote anywhere in the U.S.

In this role you’ll be responsible for:

Building, maintaining, and enhancing tooling to monitor security controls, automate processes, and collect relevant data for analysis and reporting.
Collaborating with data engineers and analysts to design and build impactful metrics and reporting with an initial focus on security control coverage and application security.
Creating solutions that are scalable, maintainable, and secure.
Developing and maintaining clear and usable documentation.
Working collaboratively with other teams across information security and information technology.

Tools and skills you will use in this role:

Python and other scripting or programming languages such as JavaScript, Go, PowerShell, Bash, etc.
Website and API development using traditional and/or cloud-native technologies.
AWS services for data processing and solution hosting.
Git for version control and code management.

Qualifications

Bachelor’s Degree and 6 years’ of experience OR Master’s Degree and 5 years’ of experience OR PhD and 0 years’ experience in software engineering, application security and information security disciplines.
4+ years of experience in a software engineering role or an information security role with a heavy focus on software development (beyond basic scripting/automation).
Proficient in Python programming with an emphasis on automation, integration, and data analysis.
Experience building APIs and/or websites using modern web development technologies.
Strong understanding of software development best practices with a focus on security and mature development methodologies such as test-driven development and CI/CD.
Familiarity with developing and deploying cloud-based solutions (AWS preferred).
Experience communicating with various levels of management including executive audiences.

Strongly Preferred:

Experience building and maintaining distributed cross-platform agent-based solutions.
Experience creating metrics and reporting for senior leadership.
Experience working within or directly supporting security engineering and operations teams.
Familiarity with enterprise security controls and best practices such as those documented in the CIS Critical Security Controls.