Application & Platform Security Architect

🕒 Junho 27

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $141.500 - $268.500 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

🔙 Engenheiro Backend

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

AbbVie

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 2013

🏥 Saúde

💼 Consultoria

🏭 Manufatura

Healthcare • Consulting • Manufacturing

A AbbVie é uma empresa farmacêutica global que descobre e entrega medicamentos inovadores e soluções para melhorar vidas. Com foco em enfrentar os desafios de saúde mais difíceis do mundo, a AbbVie opera em mais de 175 países, oferecendo uma ampla gama de produtos em áreas como imunologia, oncologia, neurociência e estética. Comprometida com a inovação científica, a AbbVie investe fortemente em pesquisa e desenvolvimento, com o objetivo de produzir medicamentos inéditos. A empresa também dá ênfase à diversidade no ambiente de trabalho, sustentabilidade e iniciativas de apoio ao paciente, garantindo um impacto positivo tanto para seus pacientes quanto para a comunidade em geral.

Descrição

• Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications. • Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction. • Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls. • Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards. • Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems. • Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service. • Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications. • Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums. • Support security aspects of business & IT initiatives by assisting in architecture, design, implementation, deployment, and operational transition of innovative & secure technology solutions.

🎯 Requisitos

• Bachelor’s degree and 9 years of experience OR Master’s Degree and 8 years of experience OR PhD and 4 years of experience in information security and/or related functions (IT Audit, Risk Management or Security Architecture). • Must have demonstrated exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders. • Requires in-depth knowledge of the systems development life cycle, client area’s functions and systems, and systems applications programs development technological alternatives. • Proven implementation of creative technology solutions that advance the business. • Strong understanding of application security principles, including OWASP Top 10, SANS/CWE Top 25, and secure coding practices. • Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect). • Knowledge of cryptographic practices, encryption protocols, and PKI management. • Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP). • Familiarity with tools for code analysis (e.g., SonarQube, Veracode) and vulnerability scanning (e.g., Burp Suite, Nessus). • Understanding of DevSecOps practices, including securing CI/CD pipelines.

🏖️ Benefícios

• Paid time off (vacation, holidays, sick) • medical/dental/vision insurance • 401(k) to eligible employees • long-term incentive programs