Security Engineer (Remote)

Security Engineer

Come to work each day with an inclusive and collaborative Business Technology team! As a Security Engineer in AbbVie Business Technology Solutions (BTS), you'll have opportunities to contribute to the digital transformation of a leading biopharma company, helping to create solutions that impact patients and their communities for the better.

As a member of the Information Security Risk Management architecture team, the Security Engineer plays a crucial role in shaping and guiding the organization's security strategy, architecture, and practices, with a focus on security posture and hygiene.

Responsibilities

• Design, develop, and implement security controls and solutions that enhance AbbVie's security hygiene. Ensure that security measures are effectively integrated into IT systems and applications
• Collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements
• Partner with platform and application teams to establish clear security baseline requirements, following the Center for Internet Security Critical Security Controls known as 'CIS 18'. The partnership ensures that security best practices are integrated into the development and deployment processes.
• Utilize existing enterprise tools dedicated to vulnerability management, asset inventory, and cyber hygiene to ensure that all assets meet established security baseline requirements
• Develop custom integrations using APIs or other scripting tools for high-risk applications to enable proactive monitoring of critical security controls
• Lead posture and hygiene efforts to effectively drive and complete initiatives successfully. The leadership role involves coordinating resources, setting clear objectives, and ensuring sustained focus on enhancing the organization's security posture
• Manage documentation such as baselines, Standard Operating Procedures (SOPs), policies, and work instructions in accordance with AbbVie requirements. This responsibility includes ensuring the documents are accurate, up-to-date, and aligned with organizational standards

Qualifications

• Bachelor's degree in relevant field and at least 5 years relevant experience OR Master's degree in relevant field and at least 4 years' experience.
• Possess a deep understanding of the Center for Internet Security's Critical Security Controls, specifically the CIS 18 framework.
• Strong working knowledge in configuring common operating systems, including Windows Servers, Windows Desktops, and RedHat Linux, among others.
• Proficient in scripting languages, including Python, Bash, and/or PowerShell.
• Excellent written and oral communication skills
• Strong problem-solving and analytical skills with the ability to identify security risks and propose effective solutions.
• Strong people skills, collaborative ability to work with IT stakeholders inside and outside of the organization.
• Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, GxP compliance, data security, and the software development lifecycle.

Additional Information

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.