Application & Platform Security Architect

🕒 vor 1 Monat

🐊 Florida – Remote

🐊 Florida – Remote

💵 $141.500 - $268.500 / Jahr

⏰ Vollzeit

🟠 Senior

🔴 Experte

🔙 Backend-Entwickler

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

AbbVie

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

Gegründet 2013

🏥 Gesundheitswesen

💼 Beratung

🏭 Fertigung

Healthcare • Consulting • Manufacturing

AbbVie ist ein weltweit tätiges Pharmaunternehmen, das innovative Medikamente und Lösungen zur Verbesserung des Lebens entdeckt und bereitstellt. Mit dem Schwerpunkt auf den weltweit größten gesundheitlichen Herausforderungen ist AbbVie in über 175 Ländern tätig und bietet eine breite Palette von Produkten in Bereichen wie Immunologie, Onkologie, Neurowissenschaften und Ästhetik an. AbbVie ist der wissenschaftlichen Innovation verpflichtet und investiert erheblich in Forschung und Entwicklung mit dem Ziel, erstklassige Medikamente zu produzieren. Das Unternehmen legt zudem großen Wert auf Vielfalt am Arbeitsplatz, Nachhaltigkeit und Patientenunterstützungsinitiativen, um sowohl für seine Patienten als auch für die gesamte Gemeinschaft positive Auswirkungen zu gewährleisten.

Beschreibung

• Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications • Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction • Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls • Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards • Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems • Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service • Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications • Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums • Support security aspects of business & IT initiatives by assisting in architecture, design, implementation, deployment, and operational transition of innovative & secure technology solutions • Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies • Establish collaborative working relations with the Information Technology functions to ensure that solutions align with security architecture and business strategy • Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned • Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed • Research and assess new information security threats and recommend remedial actions • Foster an information security culture through education, skill development, and implementation of effective information security processes and practices • Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, GxP compliance, data security, and the software development lifecycle • Matures and leverages relationships with affiliates, subsidiaries, vendors, and industry peers in accordance with AbbVie Values, Vendor Management Office, and Purchasing to further the mission, vision, and goals of the organization • Design the security architecture for applications, ensuring all components meet best practices and regulatory compliance • Work closely with software development, DevOps, and operations teams to integrate security into the software development lifecycle (SDLC) • Lead efforts in identifying potential threats through application threat modeling and propose design changes to mitigate risks

🎯 Anforderungen

• Bachelor’s degree and 9 years of experience OR Master’s Degree and 8 years of experience OR PhD and 4 years of experience in information security and/or related functions (IT Audit, Risk Management or Security Architecture) • Must have demonstrated exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders • Requires in-depth knowledge of the systems development life cycle, client area’s functions and systems, and systems applications programs development technological alternatives • Strong understanding of application security principles, including OWASP Top 10, SANS/CWE Top 25, and secure coding practices • Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect) • Knowledge of cryptographic practices, encryption protocols, and PKI management • Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP) • Familiarity with tools for code analysis (e.g., SonarQube, Veracode) and vulnerability scanning (e.g., Burp Suite, Nessus) • Understanding of DevSecOps practices, including securing CI/CD pipelines

🏖️ Vorteile

• paid time off (vacation, holidays, sick) • medical/dental/vision insurance • 401(k) to eligible employees • participate in long-term incentive programs