• design, develop, and implement security controls and solutions that enhance AbbVie’s security hygiene • ensure that security measures are effectively integrated into IT systems and applications • collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements • partner with platform and application teams to establish clear security baseline requirements, following the Center for Internet Security Critical Security Controls (CIS 18) • utilize existing enterprise tools dedicated to vulnerability management, asset inventory, and cyber hygiene to ensure that all assets meet established security baseline requirements • develop custom integrations using APIs or other scripting tools for high-risk applications to enable proactive monitoring of critical security controls • demonstrate a foundational understanding of how artificial intelligence (AI) and machine learning technologies work, including their strengths, limitations, and common enterprise use cases, particularly as they relate to cybersecurity • leverage AI-enabled tools and capabilities to improve security posture and hygiene outcomes, such as enhancing visibility, identifying configuration drift, prioritizing risk, or accelerating analysis and decision-making • lead posture and hygiene efforts to effectively drive and complete initiatives successfully. This includes coordinating stakeholders, setting clear objectives, and maintaining sustained focus on improving the organization’s security posture • manage documentation such as baselines, Standard Operating Procedures (SOPs), policies, and work instructions in accordance with AbbVie requirements, ensuring accuracy, currency, and alignment with organizational standards

• Deliver high-impact security engineering solutions across detection and platform engineering service streams • Design and implement detection capabilities, automate security workflows, and enhance security platform infrastructure • Lead incident response coordination and act as escalation point for security incidents across Canva's cloud-native infrastructure, including participation in on-call rotation • Investigate and triage security alerts, coordinating containment, eradication, and recovery activities across a range of security events • Lead and contribute to post-incident reviews, translating incident learnings into improved detections, playbooks, and response processes • Build and maintain automation workflows and response playbooks that streamline investigation, triage, and response, reducing analyst toil and improving mean-time-to-respond • Partner with CTI, Application Security, and Red Team to turn threat intelligence and emerging risks into practical detection and response outcomes • Develop and improve security response tooling and capabilities across areas including case management, automation, SOAR, SIEM, and forensics

• Finding vulnerabilities in ubiquitous Internet-deployed software and/or popular devices’ software or firmware • Constructing exploits for vulnerabilities discovered by yourself or your team • Guiding the teams technical outcomes to measurable deliverables for the organization • Training, management and provision of guidance to all levels of team members • Regular interaction with managers and customer-facing staff members to field queries and questions about technical work • Ability to obtain and maintain security clearance • Take an active role in cross-team projects when required

• Lead a team of Information Systems Security Officers (ISSOs) and cybersecurity professionals to develop, implement, and maintain comprehensive information security and privacy programs • Oversee risk management, vulnerability assessments, security authorizations, and compliance with federal and state guidelines (including NIST, FISMA, HIPAA, and FedRAMP) • Direct and mentor a team fostering a culture of continuous improvement and professional development • Ensure strict compliance with relevant regulatory standards • Develop and execute the organization's information security strategy in alignment with business goals and client requirements • Lead the incident response strategy to ensure rapid detection, containment, and eradication of security threats • Maintain oversight of security policies, procedures, and System Security Plans (SSPs). • Design and execute security awareness and training programs for all staff and contractors.