Application & Platform Security Architect
Location
Florida
Posted
2 days ago
Salary
$141.5K - $268.5K / year
Seniority
Lead
Job Description
Application & Platform Security Architect
AbbVie
• Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications • Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction • Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls • Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards • Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems • Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service • Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications • Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums • Support security aspects of business & IT initiatives by assisting in architecture, design, implementation, deployment, and operational transition of innovative & secure technology solutions • Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies • Establish collaborative working relations with the Information Technology functions to ensure that solutions align with security architecture and business strategy • Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned • Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed • Research and assess new information security threats and recommend remedial actions • Foster an information security culture through education, skill development, and implementation of effective information security processes and practices • Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, GxP compliance, data security, and the software development lifecycle • Matures and leverages relationships with affiliates, subsidiaries, vendors, and industry peers in accordance with AbbVie Values, Vendor Management Office, and Purchasing to further the mission, vision, and goals of the organization • Design the security architecture for applications, ensuring all components meet best practices and regulatory compliance • Work closely with software development, DevOps, and operations teams to integrate security into the software development lifecycle (SDLC) • Lead efforts in identifying potential threats through application threat modeling and propose design changes to mitigate risks
Job Requirements
- Bachelor’s degree and 9 years of experience OR Master’s Degree and 8 years of experience OR PhD and 4 years of experience in information security and/or related functions (IT Audit, Risk Management or Security Architecture)
- Must have demonstrated exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders
- Requires in-depth knowledge of the systems development life cycle, client area’s functions and systems, and systems applications programs development technological alternatives
- Strong understanding of application security principles, including OWASP Top 10, SANS/CWE Top 25, and secure coding practices
- Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect)
- Knowledge of cryptographic practices, encryption protocols, and PKI management
- Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP)
- Familiarity with tools for code analysis (e.g., SonarQube, Veracode) and vulnerability scanning (e.g., Burp Suite, Nessus)
- Understanding of DevSecOps practices, including securing CI/CD pipelines
Benefits
- paid time off (vacation, holidays, sick)
- medical/dental/vision insurance
- 401(k) to eligible employees
- participate in long-term incentive programs
Related Guides
Related Job Pages
More Backend Engineer Jobs
Principal Engineer, Python Fullstack – React, GenAI
NagarroNagarro (Frankfurt: NA9) is a leader in digital product engineering and drives technology-led business breakthroughs.
• Understanding the client’s business use cases and technical requirements and be able to convert them into technical design which elegantly meets the requirements • Own the architecture and technical vision for AI-powered, user-facing applications built with Python, React, and Generative AI • Design scalable, secure, and cost-efficient backend platforms for LLM inference, RAG pipelines, and agent-based orchestration • Define frontend architecture and UX patterns for AI-native applications, including conversational interfaces, copilots, and intelligent dashboards • Lead the design and implementation of complex GenAI workflows that combine LLMs, tools, APIs, structured data, and user context • Establish engineering standards and best practices for prompt design, model integration, evaluation, and observability • Drive GenAI platformisation—building reusable components, SDKs, and frameworks used across multiple teams or products • Partner with product, design, data, and business leaders to translate strategic objectives into scalable technical solutions • Review critical designs and codebases, unblock teams on complex technical challenges, and raise the overall engineering bar • Lead technical discovery and solutioning for high-impact initiatives, including client or executive-facing workshops when required • Ensure enterprise readiness: security, privacy, compliance, governance, and responsible AI practices • Use AI-assisted development tools (e.g., Copilot, Claude Code) to accelerate delivery while maintaining production-grade quality • Mapping decisions with requirements and be able to translate the same to developers • Identifying different solutions and being able to narrow down the best option that meets the client’s requirements • Defining guidelines and benchmarks for NFR considerations during project implementation • Writing and reviewing design document explaining overall architecture, framework, and high-level design of the application for the developers • Reviewing architecture and design on various aspects like extensibility, scalability, security, design patterns, user experience, NFRs, etc., and ensure that all relevant best practices are followed • Developing and designing the overall solution for defined functional and non-functional requirements; and defining technologies, patterns, and frameworks to materialize it. • Understanding and relating technology integration scenarios and applying these learnings in projects • Resolving issues that are raised during code/review, through exhaustive systematic analysis of the root cause, and being able to justify the decision taken • Carrying out POCs to make sure that suggested design/technologies meet the requirements.
• Drive the design, development, and delivery of high-performance, scalable solutions • Own the technical vision for your team’s product line • Mentor developers and enforce best-practice standards • Champion clean, test-driven code within an Agile framework • Partner with product owner, architects and operations • Translate business goals into robust, future-ready software • Lead and contribute to the development of software solutions that meet business objectives • Take full technical ownership of the team’s assets (Previs, Fidelis, and Asteca) • Drive every phase of the Agile-based SDLC • Actively participate in the delivery of solutions • Act as 'Security Champion' for the squad • Provide technical guidance and support to developers • Oversee and participate in development and perform first-level testing • Involve in deployment, technical testing and production • Ensure the maintainability and stability of applications • Arbitrate technical issues • Act as the point of reference for technical guidelines of the company • Support the Product Owner and Business Analyst in implementing a technical roadmap • Analyze and quantify the features and User Stories • Ensure smooth deployment and operability of delivery, in collaboration with OPS team • Validate architecture changes of IT system that supports products • Contribute to documentation updates, ensuring production of deliverables for operability of the solution • Support technical onboarding of new arrivals and skill development of present developers • Co-lead Agile rituals and lead technical refinement session
• Responsible for the end-to-end development of a communications simulator in Python, including architecture design, implementation, and automated tests • Develop and extend an existing simulator across ISO/OSI layers 2–7 with a focus on application-level protocols (e.g., TCP, UDP, HTTP) • Design and implement an interactive GUI dashboard (e.g., with Dash/Plotly or PyQt/PySide) for real-time visualization and analysis of communication flows • Implement advanced data visualizations and analysis features for protocol traces, performance, and error patterns • Produce structured, developer-focused documentation of the software architecture (including UML and API documentation) • Work independently in an agile environment with a strong focus on Clean Code, testability, and maintainability
Senior Software Engineer, .Net Full Stack
PairSoftThe strongest procure-to-pay platform for mid-market and enterprise companies with integrations to your ERP system.
• Lead the design and implementation of complex backend systems, APIs, microservices, and modern frontend architectures • Serve as a subject-matter expert for .NET, cloud architecture, performance, and scalability • Drive the integration of AI services (Azure OpenAI, Cognitive Services) into the product where appropriate • Mentor and coach team members, conduct technical reviews, and enforce engineering best practices • Champion secure-by-design principles and threat modeling • Ensure CI/CD pipelines support automated testing, quality gates, security scanning, and deployment reliability • Collaborate with product managers and designers to define technical roadmaps • Troubleshoot complex production issues with strong debugging and diagnostic skills • Engage in cost optimization and cloud operational excellence
