Security Engineer (Remote)

Role Summary

Security Engineer (Remote) at AbbVie Business Technology Solutions (BTS). Focuses on shaping and guiding the organization's security strategy, architecture, and practices with emphasis on security posture and hygiene.

Responsibilities

• Design, develop, and implement security controls and solutions that enhance AbbVie‚Äôs security hygiene. Ensure that security measures are effectively integrated into IT systems and applications
• Collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements
• Partner with platform and application teams to establish clear security baseline requirements, following CIS 18, and integrate security best practices into development and deployment processes
• Utilize existing enterprise tools for vulnerability management, asset inventory, and cyber hygiene to ensure all assets meet established security baseline requirements
• Develop custom integrations using APIs or other scripting tools for high-risk applications to enable proactive monitoring of critical security controls
• Lead posture and hygiene efforts to drive and complete initiatives, coordinating resources, setting objectives, and maintaining focus on security posture
• Manage documentation such as baselines, SOPs, policies, and work instructions in accordance with AbbVie requirements

Qualifications

• Bachelor‚Äôs degree in relevant field and at least 5 years relevant experience OR Master‚Äôs degree in relevant field and at least 4 years‚Äô experience
• Deep understanding of CIS Critical Security Controls (CIS 18)
• Strong working knowledge of configuring Windows Servers, Windows Desktops, and RedHat Linux
• Proficient in scripting languages: Python, Bash, and/or PowerShell
• Excellent written and oral communication skills
• Strong problem-solving and analytical skills to identify security risks and propose solutions
• Strong collaborative ability to work with IT stakeholders
• Understanding and adherence to corporate standards, including code of conduct, safety, GxP, data security, and SDLC

Skills

• Security architecture
• Vulnerability management
• Asset management
• Scripting (Python, Bash, PowerShell)
• Security baseline development
• Policy and SOP development

Education

• Bachelor‚Äôs degree in a relevant field or Master‚Äôs degree in a relevant field