Copy of Senior Cybersecurity Software Engineer (Remote)

About the position

The Information Security Strategy and Analytics team is looking for an experienced technologist with expertise in software engineering and information security to help improve security at AbbVie. In this role, you will develop software to perform automated tests of security controls and support efforts to measure enterprise security control coverage and application security maturity. The ideal candidate will possess a comprehensive understanding of both enterprise IT and information security, strong software development skills, and the ability to structure what you learn in a way that is consumable and actionable by senior leadership. This position can be remote anywhere in the U.S.

Responsibilities

• This position is a 50/50 split of software development and security engineering.
• Transforming a proof-of-concept (PoC) solution developed in Python designed to validate security control effectiveness into a mature application.
• Lead efforts to mature and expand the existing code base, implement additional control validation use cases, and make the data accessible to others via REST APIs and/or interactive websites.
• Using your strong enterprise IT and information security knowledge to measure application security and security control coverage.
• Supporting additional software development and reporting initiatives as required.

Requirements

• Bachelor's Degree with 7 years experience OR Master's Degree with 6 years experience OR PhD with 2 years experience in software engineering and information security.
• Experience in a software engineering role developing automation, REST APIs, and websites using modern web development technologies and cloud-native solutions.
• Must have experience in Software Development and Security Engineering.
• Demonstrated understanding of information security principles in areas including application security, infrastructure security, vulnerability management, and security operations.
• In-depth understanding of enterprise IT ecosystems and associated security controls, capable of evaluating and reporting on the effectiveness of these controls to non-technical audiences.
• Advanced Python programming skills.
• Experience designing metrics and reports that effectively communicate technical security metrics and insights to senior leadership.

Nice-to-haves

• Experience building distributed hybrid cloud solutions in AWS.