Application Security Architect em Porto Salvo, Portugal
IQVIA
Porto Salvo, Portugal
IQVIA seeks an Application Security Architect to protect healthcare data and design security safeguards across Cedar Gate applications, APIs, and cloud infrastructure hosted in AWS or Snowflake. This senior, hands-on role is based in Portugal, advising product and engineering teams on threat modeling, secure development practices, and AI security governance.
Responsibilities
Establish risk-based review criteria for applications, functionality, AI features, and infrastructure; document decisions and systemic weaknesses
Lead threat modeling for applications, APIs, and data flows using STRIDE and attack-path analysis
Maintain reusable security patterns, architecture decision records, and guidance for identity, cryptography, APIs, and PHI workflows
Influence Secure SDLC and AIDLC through architecture gates, threat-modeling criteria, and risk-based release standards
Provide architectural guidance to engineering, product, and security leadership on testing, vulnerability management, and remediation strategies
Requirements
6+ years progressive application security, software engineering, or cloud security experience
Expertise in threat modeling, sensitive data flows, multi-tenant SaaS, identity, cryptography, and PHI processing
Knowledge of SAST, SCA, DAST, API security, container scanning, and infrastructure-as-code testing
Familiarity with OWASP standards, NIST frameworks, HIPAA, HITRUST, SOC 2, and CIS requirements
Experience evaluating AI-generated code, LLM integrations, and securing AI-enabled applications
Strong analytical and communication skills; fluent English; bachelor's degree in related field or equivalent
... Align Cedar Gate patterns with IQVIA security architecture requirements. Required Experience and Qualifications - 6 or more years of progressive experience in application security, software engineering, product security, cloud security, security engineering, or application security architecture; 6–8 years of directly relevant ...
... context, tool misuse, excessive agency, privilege escalation and cross-tenant risks. - Define reusable security capabilities and engineering patterns for application, platform and data teams rather than relying on one-off security implementations. - Establish technical security architecture across cloud platforms, APIs, ...
... (primarily AWS) You will act as a trusted security architecture advisor, working closely with: - CIB CTO Security - BaaS Security - CISO - Regional architecture and security teams and platform engineering domains - Devops team - Solution Architect team KEY RESPONSIBILITIES - Define and design end-to-end security architectures aligned ...
... (primarily AWS) You will act as a trusted security architecture advisor, working closely with: - CIB CTO Security - BaaS Security - CISO - Regional architecture and security teams and platform engineering domains - Devops team - Solution Architect team KEY RESPONSIBILITIES - Define and design end-to-end security architectures aligned ...
... with development and platform engineering teams to optimize application deployment strategies and cloud resource utilization - Establish and champion cloud security best practices, governance frameworks, and architecture guardrails - Document architectural blueprints, decision records, and reference architectures to foster ...
... architectural principles; - Understand the Outsystems security model and recommendations for infrastructure and applications; - Experience using OutSystems Architecture Canvas to identify your business concepts and correctly organize them into a cohesive architecture; - Experience using Architecture Dashboard to evaluate ...
... security-driven implementations. You will support governance, optimize IT processes, and help shape enterprise-wide technology decisions. Your role includes performing security assessments, aligning designs with architectural patterns, and supporting innovation across platforms. What you are like: - Bachelor’s Degree in Computer Science, ...
... Enterprise AI Architect will own the technical architecture of LBC’s AI solutions and platforms, connecting business requirements, enterprise systems, data, cloud, security and emerging AI technologies. You will define how generative AI, predictive models, agents, enterprise data, applications, workflows, identity systems and cloud ...