Jobs › AbbVie

Principal Agentic AI Security Engineer

AbbVie · North Chicago, IL · Full time · Information Technology

Posted Jul 10, 2026 · We last checked this listing on Oct 6, 2026

Apply at AbbVie

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about something you built where there was no playbook. How did you go from idea to production?

What they are checking: Whether they can define an approach, prove it, and harden it, which is the core of this role.

Describe a framework or set of patterns you created that other engineers then used. How did you get them to adopt it?

What they are checking: Whether they can set technical direction as an individual contributor, not just write their own code.

Tell me about a time a system you shipped failed in production. What did you change afterward?

What they are checking: Whether they learn from failures honestly and turn them into better engineering standards.

What would you do

Your agent recommends isolating a production server it believes is compromised, and it is wrong. How should the system have been designed to prevent harm?

What they are checking: Whether they plan for agent error with reversibility, confidence thresholds and human approval on destructive actions.

A security operations team distrusts your agent's output and keeps redoing its work by hand. What do you do?

What they are checking: Whether they earn trust through transparency and evidence rather than pushing adoption by mandate.

About the work

Walk me through an agentic system you would build to triage and investigate security alerts autonomously. Where would you draw the line on what it can do without a human?

What they are checking: Whether they can design useful autonomy with clear guardrails for high-stakes security actions.

How would you defend an investigation agent against prompt injection hidden in the logs, emails or files it reads?

What they are checking: Whether they understand that agents consuming attacker-controlled data are themselves an attack surface.

How should two agents authenticate and trust each other when one hands a task to another?

What they are checking: Whether they can reason about secure agent-to-agent communication, identity and least privilege.

How would you evaluate whether a threat hunting agent is actually good, not just impressive in a demo?

What they are checking: Whether they build rigorous evaluation with ground truth and failure analysis before trusting an agent in operations.

How do you think about using AI agents for offensive security work like vulnerability analysis, and what controls would you require?

What they are checking: Whether they can explore offensive use responsibly with containment and scope controls.

What logging and audit trail should an autonomous security agent leave so that its decisions can be reviewed later?

What they are checking: Whether they design for accountability so every agent action can be explained in a regulated environment.

Practice this interview out loud.

Offer builds a real interview for this exact role at AbbVie from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by AbbVie.

We are building a team that develops AI agents to solve hard security problems -- and you will be tackling the hardest ones. This is a hands-on, senior IC role. You will architect, build, and ship agentic AI systems that operate autonomously within security environments, while also driving the technical direction and standards for how these systems are built, tested, and secured. This is not a management role and not a pure research role. You will write code, ship systems, and get your hands dirty -- but you will be working on problems where there is no playbook yet. You will define the approach, build the proof of concept, harden it for production, and write the technical guidance others follow. Responsibilities: • Architect and build AI agent systems for security operations -- autonomous detection, investigation, response, threat hunting, vulnerability analysis, and risk assessment • Tackle the novel, high-complexity problems: adversarial robustness of agent systems, secure agent-to-agent communication, guardrails for autonomous decision-making in high-stakes security contexts • Develop frameworks, tooling, and patterns for building secure and reliable agentic AI systems -- then use them yourself • Conduct original research and experimentation on agentic AI applied to offensive and defensive security, translating findings into working code • Build proof-of-concept exploits and adversarial tests against agentic AI systems to identify failure modes and inform defensive design • Develop and publish technical guidance and policy for agentic AI security -- grounded in systems you have built and broken • Independently author security position papers on emerging technologies -- strategic, high-level documents that frame organizational thinking on new threat domains and drive downstream policy and technical guidance • Serve as a subject matter expert and key driver of the AI Cybersecurity Maturity program, spanning application security, training, AI controls and infrastructure, AI discovery and inventory, operations and incident response, and policy and procedure development • Integrate LLMs, custom models, and security tooling (SIEM, EDR, SOAR, cloud platforms, vulnerability scanners) into agent architectures • Evaluate and adopt emerging AI capabilities (new models, frameworks, techniques) and determine their applicability to security problems • Set technical direction for agent development practices, including evaluation frameworks, testing methodologies, and deployment patterns • Mentor and elevate other engineers on the team through code review, design guidance, and technical leadership Required: • Bachelor's Degree with 9 years’ experience; Master's Degree with 8 years’ experience; PhD with 4 years’ experience. • Respective years of experience in cybersecurity, security engineering, or security research -- with substantial hands-on technical depth • Strong software engineering skills -- you ship production systems, not just prototypes. Python required; additional languages a plus • Deep expertise in at least two of: security operations, application security, threat intelligence, vulnerability research, detection engineering, offensive security, cloud security • Demonstrated experience building AI agents and AI/ML-powered security tools or automation that operated at scale • Hands-on experience with agentic coding tools (e.g., Claude Code, Cursor, GitHub Copilot, Aider, or similar) as part of your daily development workflow -- you build with agents, not just build agents • Track record of original technical work -- published research, open-source tooling, conference presentations, or equivalent evidence of independent technical contribution • Ability to work at the intersection of security and AI: you understand both the security implications of AI systems and how to apply AI to security problems • Experience developing technical standards, frameworks, or guidance that others adopted • Strong written and verbal communication -- you can explain complex technical concepts to both engineers and senior leadership, and you can write strategically about emerging technology risks at a level that shapes organizational direction Preferred: • Experience with agent orchestration and autonomous systems (custom frameworks, LangChain, AutoGen, MCP, or similar) • Background in adversarial ML, AI red teaming, or AI safety • Familiarity with security compliance frameworks (NIST, ISO 27001, SOX) and how they apply to AI systems • Published work (Black Hat, DEF CON, OWASP, academic journals, or equivalent venues) • Experience in regulated industries (financial services, healthcare, critical infrastructure, government/defense) • Contributions to open-source security projects • OWASP, MITRE ATT&CK, or similar framework expertise applied in production environments • Security clearance eligibility (not required) Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​ • The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future. ​ • We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​ • This job is eligible to participate in our long-term incentive programs. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law.​ AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community.  Equal Opportunity Employer/Veterans/Disabled. US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: https://www.abbvie.com/join-us/reasonable-accommodations.html

Apply at AbbVie