Application Security Architect em Porto Salvo, Portugal

IQVIA seeks an Application Security Architect to protect healthcare data and design security safeguards across Cedar Gate applications, APIs, and cloud infrastructure hosted in AWS or Snowflake. This senior, hands-on role is based in Portugal, advising product and engineering teams on threat modeling, secure development practices, and AI security governance.

Responsibilities

• Establish risk-based review criteria for applications, functionality, AI features, and infrastructure; document decisions and systemic weaknesses
• Lead threat modeling for applications, APIs, and data flows using STRIDE and attack-path analysis
• Maintain reusable security patterns, architecture decision records, and guidance for identity, cryptography, APIs, and PHI workflows
• Influence Secure SDLC and AIDLC through architecture gates, threat-modeling criteria, and risk-based release standards
• Provide architectural guidance to engineering, product, and security leadership on testing, vulnerability management, and remediation strategies

Requirements

• 6+ years progressive application security, software engineering, or cloud security experience
• Expertise in threat modeling, sensitive data flows, multi-tenant SaaS, identity, cryptography, and PHI processing
• Knowledge of SAST, SCA, DAST, API security, container scanning, and infrastructure-as-code testing
• Familiarity with OWASP standards, NIST frameworks, HIPAA, HITRUST, SOC 2, and CIS requirements
• Experience evaluating AI-generated code, LLM integrations, and securing AI-enabled applications
• Strong analytical and communication skills; fluent English; bachelor's degree in related field or equivalent