{"id":3506402,"url":"https://alion.io/job/iqvia-application-security-analyst-i","title":"Application Security Analyst I","company":{"id":4918,"name":"IQVIA","domain":"iqvia.com","url":"https://alion.io/company/iqvia","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":523,"ghost_share":0.008,"stale_share":0.839,"repost_share":0.019,"time_to_fill_p50_days":23,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kathmandu, Nepal"],"countries":["NP"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":56000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Git","optional":false},{"name":"HIPAA","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Postman","optional":false},{"name":"SOC 2","optional":false},{"name":"Sysdig Secure","optional":false},{"name":"Veracode","optional":false},{"name":"Wiz","optional":false},{"name":"AWS","optional":true},{"name":"C#","optional":true},{"name":"JavaScript","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-30T05:44:04Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-02T20:39:32Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About the Role:\nAt IQVIA, protecting healthcare applications, sensitive client information, and Protected Health Information (PHI) is a critical responsibility. The Application Security Analyst I plays an important role in supporting the security of applications, APIs, cloud-native platforms, and software delivery pipelines.\nWorking closely with Application Development, DevOps, Infrastructure, and Security teams, you will help identify and assess application security risks, support vulnerability remediation efforts, maintain application security records, and contribute to secure software development practices. This role provides hands-on experience with application security testing, vulnerability management, Secure SDLC activities, and modern application security technologies. You will have the opportunity to develop expertise in application security while helping ensure security and compliance across healthcare technology platforms that support our clients and members.\nIdeal Candidate:\nThe ideal candidate is an early-career Application Security professional who is passionate about securing applications and helping development teams build secure software. You have a strong foundation in web application security, vulnerability management, and secure development practices, and you're eager to expand your expertise in modern technologies such as cloud-native applications, APIs, containers, CI/CD pipelines, and AI-enabled solutions. You enjoy investigating security issues, collaborating with developers to resolve vulnerabilities, and balancing security requirements with business needs. Strong analytical thinking, attention to detail, effective communication skills, and a continuous learning mindset will be key to success in this role.\nMajor Responsibilities:\nSupport and administer application security tools including SAST, SCA, DAST, API security, secrets scanning, container scanning, and Infrastructure-as-Code (IaC) security solutions.\nValidate security findings, assess potential impact, prioritize vulnerabilities, and support remediation efforts through verified closure.\nPerform targeted security testing of web applications, APIs, authentication and authorization controls, file handling functions, business logic, and data flows.\nExecute application security testing activities required through Secure SDLC and AI Development Lifecycle (AIDLC) processes while maintaining supporting evidence and documentation.\nProvide developers with remediation guidance based on scanning results, security testing findings, code reviews, and security incidents.\nSupport monitoring of software supply chain risks including third-party dependencies, repositories, CI/CD credentials, artifact integrity, and software bills of materials (SBOMs).\nAssist in maintaining the application catalog by onboarding applications, validating ownership information, and ensuring inventory records remain accurate.\nMaintain application security profiles including data sensitivity, security-tool coverage, testing records, findings, and risk information.\nHelp validate that required security scans, reviews, and testing activities are completed before software releases.\nSupport security reviews of AI-generated code and AI-enabled applications, including testing for prompt injection, data leakage, insecure outputs, authorization weaknesses, and improper use of sensitive information.\nProduce security metrics, testing evidence, remediation reports, and compliance-related documentation.\nEscalate complex technical risks, architectural concerns, and design-related security issues to senior application security team members when required.\nRequired Experience and Qualifications:\nBachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Software Engineering, or a related field, or equivalent experience.\n1-3 years of experience in Application Security, Security Engineering, DevSecOps, Software Development, Penetration Testing, or a related cybersecurity discipline.\nHands-on experience with SAST, SCA, DAST, API security testing, container security, vulnerability management, or similar application security technologies.\nFamiliarity with application security tools such as Veracode, Wiz, Sysdig, Burp Suite, Postman, or equivalent platforms.\nWorking knowledge of web security, API security, authentication, authorization, secure coding, cryptography, and software supply chain security.\nExperience supporting Secure SDLC, CI/CD pipelines, Git workflows, security testing, and release security controls.\nKnowledge of OWASP Top 10, OWASP API Security Top 10, MITRE CWE, NIST SSDF, HIPAA, HITRUST, SOC 2, and related security frameworks.\nStrong analytical, communication, documentation, and reporting skills.\nFluent in written and verbal English.\nPreferred Qualifications:\nExposure to security tools such as Veracode, Wiz, Sysdig, Burp Suite, Postman, or similar application security platforms.\nExperience with healthcare SaaS platforms, PHI processing environments, cloud-native applications, containers, or multi-tenant platforms.\nWorking knowledge of Python, Java, JavaScript/TypeScript, or C# from a development, automation, or code review perspective.\nSecurity certifications such as CompTIA Security+, CSSLP, AWS Certification, GWAPT, GWEB, or equivalent application security credentials.\nIQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com\nIQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism.","description_format":"text","description_chars":6227,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Biotechnology","Health Care","Medical Laboratories"],"lifecycle":[{"event":"open","at":"2026-10-30T05:44:04Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":23,"reasons":["conf:1","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/iqvia-application-security-analyst-i","json_url":"https://alion.io/job/iqvia-application-security-analyst-i.json","meta":{"generated_at":"2026-11-03T00:37:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":829,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4918},"rest":"https://alion.io/mcp/rest/get_company?id=4918"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiqvia-application-security-analyst-i"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiqvia-application-security-analyst-i"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiqvia-application-security-analyst-i"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iqvia-application-security-analyst-i\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiqvia-application-security-analyst-i"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3506402}},{"tool":"search_jobs","arguments":{"company":"iqvia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3506402},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}