{"id":173389,"url":"https://alion.io/job/iqvia-application-security-engineer","title":"Application Security Engineer","company":{"id":4918,"name":"IQVIA","domain":"iqvia.com","url":"https://alion.io/company/iqvia","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":515,"ghost_share":0.006,"stale_share":0.814,"repost_share":0.025,"time_to_fill_p50_days":21,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Porto, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":45000,"max_usd":111000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-06-18T00:00:00Z","employer_posted_date":"2026-06-18","last_verified_at":"2026-10-20T18:00:23Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":124},"description":"Role and Responsibilities\nThe Application Security / DevSecOps Specialist role presents a hands on opportunity to support and scale IQVIA’s global Application Security and DevSecOps capabilities. We are deepening our DevSecOps capabilities, maturing AI security governance, and embedding security earlier into the software development lifecycle across a complex global environment - including cloud-native platforms, containerized workloads, third-party SaaS, and AI-enabled systems.\nThis role is for a technically strong, practitioner-level leader who can operate at the intersection of engineering and security architecture. You will not only assess and advise - you will build, automate, and drive adoption of secure-by-design practices across IQVIA’s global delivery teams.\nYou will sit within the global Information Security organization, collaborating closely with Security Architecture, Cloud Security, Vulnerability Management, and DevOps platform teams, as well as directly with product engineering and delivery teams across business units and regions.\nPrincipal responsibilities will include:\nDrive adoption and ownership of CI/CD security controls across product engineering teams, including tooling configuration, findings triage, pipeline onboarding, and remediation follow-through.\nProvide follow-up support for CI/CD security requests, including assisting teams with pipeline security tooling, configuration issues, findings remediation, and onboarding to DevSecOps services.\nSupport application security assessments and security design reviews, working with delivery and architecture teams to identify risks, define mitigations, and track remediation actions.\nAct as a security point of contact for development teams, providing consultancy and guidance on secure coding practices, SDLC requirements, and secure architecture patterns.\nReview and assess application architectures, including cloud-native, microservices, APIs, containerized workloads, and event-driven systems, with an architectural security mindset.\nSupport cloud application deployments and architecture patterns across Microsoft Azure and Amazon AWS, focusing on secure configuration, identity, network controls, and workload security.\nContribute to the implementation and operationalization of DevSecOps practices, including SAST, DAST, SCA, container scanning, secret detection, and infrastructure-as-code security.\nDevelop and maintain Python scripts and automations to support security checks, data analysis, reporting, or CI/CD integrations where appropriate.\nSupport and contribute to AI Security for Development, including guidance on securing AI/ML architectures, protecting training pipelines, managing model risks, securing LLM prompt workflows, and addressing data leakage, model abuse, and agentic system risks.\nAssist in defining and maintaining security standards, requirements, and guidance related to application security, DevSecOps, cloud development, and AI-enabled systems.\nCollaborate closely with Security Architecture, Cloud Security, Vulnerability Management, and DevOps platform teams to ensure alignment with IQVIA security frameworks and toolsets.\nTrack, follow up, and support security findings remediation, ensuring issues identified through assessments or pipeline tools are addressed effectively by delivery teams.\nHelp promote Security by Design and Shift-Left principles, supporting teams early in design and development phases rather than late-stage security enforcement.\nRequired Experience and Qualifications\nMinimum of 6-8 years of professional experience in Application Security, DevSecOps, Software Engineering, Cloud Engineering, or related technical security roles.\nHands on experience with CI/CD pipelines and DevSecOps tooling, including integrating security controls into build and deployment workflows.\nWorking knowledge of application security testing techniques such as SAST, DAST, SCA, container scanning, and infrastructure as code security.\nExperience with cloud environments (Microsoft Azure and/or Amazon AWS), including deploying and securing applications in IaaS and PaaS platforms.\nExperience with containerized and modern application architectures, including Kubernetes, microservices, APIs, and event driven systems.\nPractical scripting experience, preferably in Python, for automation, integrations, or security tooling support.\nKnowledge of secure software development practices, OWASP Top 10, common application attack patterns, and secure coding principles.\nFoundational to intermediate knowledge of AI and ML security considerations, including Agent development, model risk, data protection, pipeline security, and misuse/abuse scenarios.\nBachelor's degree in Computer Science, Software Engineering, Information Security, or equivalent practical experience is preferred.\nSecurity or cloud certifications (such as CSSLP, GWAPT, AWS/Azure Security, CKAD/CKS, or equivalent) are preferred but not mandatory.\nWorking knowledge of security frameworks and standards such as NIST, OWASP, ISO 27001, or similar is an advantage.\nStrong communication skills, with the ability to work directly with engineering teams and explain security concepts in a practical, delivery focused manner.\nIQVIA is a leading global provider of clinical research services, commercial insights, and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com.\nIQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism.\nAt IQVIA, we believe that diversity, inclusion, and belonging empower our mission to accelerate innovation for a healthier world. We create a culture of belonging by valuing the perspectives of all talented employees worldwide and providing them with the opportunity to power smarter healthcare for everyone, everywhere. When our talented employees bring their authentic selves and their diverse experiences to work, they enable us to accomplish extraordinary things. Multifaceted thought processes spark innovation. Multi-talented collaboration harnesses innovation to deliver superior outcomes. Likewise, as part of this culture, IQVIA is committed to ensuring effective equality between women and men, integrating it as a strategic principle in its corporate and human resources policies.","description_format":"text","description_chars":6895,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Clinical Trial Services (CRO)","Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-08-30T03:56:41Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.224,"p_room":0.28,"age_days":124,"expected_fill_days":21,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/iqvia-application-security-engineer","json_url":"https://alion.io/job/iqvia-application-security-engineer.json","meta":{"generated_at":"2026-10-20T20:21:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4918},"rest":"https://alion.io/mcp/rest/get_company?id=4918"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiqvia-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiqvia-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiqvia-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iqvia-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiqvia-application-security-engineer"}]}