Cybersecurity Architect
AbbVie
August 21, 2026
Remote
United States
$124,500 - $236,500 USD yearly
IT
Responsibilities:
- Define and evaluate security architecture for end-user devices (workstation/laptop hardening, EDR/endpoint protection, data protection, configuration baselines).
- Advise on mobility security (MDM/UEM such as Microsoft Intune, mobile application management, conditional access, and BYOD posture for iOS/Android).
- Perform Security Architecture Reviews (adjudicate submissions, align risk/controls with system owners, ensure review quality).
- Deliver security architecture consulting engagements end to end, with timely turnaround and clear communication.
- Provide risk evidence review on request with Risk Management to assess control/mitigation effectiveness.
- Plan, design, build, and implement enterprise security architecture; create supporting documentation.
- Evaluate security technologies/controls (including third-party) and adapt controls to business needs, risk, and threat landscape.
- Identify and communicate emerging security threats/risks; propose new/revised mitigation measures.
- Balance security needs with business needs in collaboration with business/IT stakeholders.
- Use AI to accelerate design reviews, threat modeling, documentation, and analysis.
- Create reusable security-architecture artifacts (reference architectures, patterns, guidelines, security positions).
- Build durable solutions, patterns, and standards to solve recurring root causes (technical, process, and people).
- Support training/mentorship for junior and non–Information Security employees as needed.
Qualifications:
Required:
- Bachelor’s + 8 years OR Master’s + 7 years OR PhD + 3 years.
- Demonstrated security controls/concepts; working knowledge of NIST, CIS Controls, OWASP, Cloud Security Alliance.
- Advanced knowledge of OS, networking protocols, systems administration, and security technologies.
- Cybersecurity terminology and foundational understanding of threat landscape/attack vectors.
- Understanding of risk management principles integrated into security practices.
- Ability to learn quickly and adapt to change.
- Fluency with AI concepts and demonstrated use of AI tools.
- Critical thinking, problem solving, analytical skills.
- Strong organization, attention to detail; strong written/verbal communication.
- Ability to work independently and effectively in a team; willingness to address major/critical security issues.
- Tool experience: EDR/EPP, data protection, configuration-baseline tooling; MDM/UEM (e.g., Intune), mobile app management, conditional access; OS/network/admin and cloud (AWS/Azure); security control frameworks and threat/attack vectors; AI tools/workflows; ServiceNow ITSM, Jira, Confluence, Microsoft 365/SharePoint.
Preferred:
- Professional cybersecurity certifications (e.g., CISSP, SANS/GIAC).
- Define and evaluate security architecture for end-user devices (workstation/laptop hardening, EDR/endpoint protection, data protection, configuration baselines).
- Advise on mobility security (MDM/UEM such as Microsoft Intune, mobile application management, conditional access, and BYOD posture for iOS/Android).
- Perform Security Architecture Reviews (adjudicate submissions, align risk/controls with system owners, ensure review quality).
- Deliver security architecture consulting engagements end to end, with timely turnaround and clear communication.
- Provide risk evidence review on request with Risk Management to assess control/mitigation effectiveness.
- Plan, design, build, and implement enterprise security architecture; create supporting documentation.
- Evaluate security technologies/controls (including third-party) and adapt controls to business needs, risk, and threat landscape.
- Identify and communicate emerging security threats/risks; propose new/revised mitigation measures.
- Balance security needs with business needs in collaboration with business/IT stakeholders.
- Use AI to accelerate design reviews, threat modeling, documentation, and analysis.
- Create reusable security-architecture artifacts (reference architectures, patterns, guidelines, security positions).
- Build durable solutions, patterns, and standards to solve recurring root causes (technical, process, and people).
- Support training/mentorship for junior and non–Information Security employees as needed.
Qualifications:
Required:
- Bachelor’s + 8 years OR Master’s + 7 years OR PhD + 3 years.
- Demonstrated security controls/concepts; working knowledge of NIST, CIS Controls, OWASP, Cloud Security Alliance.
- Advanced knowledge of OS, networking protocols, systems administration, and security technologies.
- Cybersecurity terminology and foundational understanding of threat landscape/attack vectors.
- Understanding of risk management principles integrated into security practices.
- Ability to learn quickly and adapt to change.
- Fluency with AI concepts and demonstrated use of AI tools.
- Critical thinking, problem solving, analytical skills.
- Strong organization, attention to detail; strong written/verbal communication.
- Ability to work independently and effectively in a team; willingness to address major/critical security issues.
- Tool experience: EDR/EPP, data protection, configuration-baseline tooling; MDM/UEM (e.g., Intune), mobile app management, conditional access; OS/network/admin and cloud (AWS/Azure); security control frameworks and threat/attack vectors; AI tools/workflows; ServiceNow ITSM, Jira, Confluence, Microsoft 365/SharePoint.
Preferred:
- Professional cybersecurity certifications (e.g., CISSP, SANS/GIAC).