Security Application Solution Architect (Remote)

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn. 

Job Description

The Information Security Application Solution Architect is a member of the Information Security team and works closely with other members of the team to develop and implement a comprehensive information security program.  This includes defining security policies, processes, and standards.  We are seeking a highly skilled architect to collaborate with application development teams, ensuring secure design, coding, configuration, and deployment of technology solutions. The architect will not only focus on common security mechanisms like encryption and authentication but will also dive into application-level risks, session management, securing configuration files, secrets management, and risk identification in system configurations. This role requires a deep understanding of secure application development practices, including the security of API interactions and cloud application environments. 

This position can be virtually from anywhere in the U.S.

Major Duties and Responsibilities: 

• Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards. 
• Generate detailed application specific security controls design and documentation for each business application under review 
• Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service 
• Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications. 
• Establish collaborative working relations with business applicatio