Senior App Security Architect - Portugal (AWS, PHI)

IQVIA; Porto Salvo; On-site; EUR 90,000 - 130,000; Full time

Job summary

IQVIA is seeking an Application Security Architect to protect PHI and sensitive client data across healthcare applications, APIs, and cloud services. You will work embedded with Cedar Gate teams in Portugal, Nepal, and the United States, influencing Secure SDLC and AI guardrails while balancing engineering ownership and security governance.

Based in Portugal, you will lead risk-based reviews, threat modeling, and architecture decisions, ensuring secure design patterns and compliance with HIPAA,

Qualifications

• 6+ years in application security or related fields.
• Experience threat modeling, data flows, and risk-based requirements.
• Knowledge of SAST, SCA, DAST, API security, and IAM concepts.
• Familiarity with OWASP ASVS, NIST, HIPAA/SOC 2 controls.

Responsibilities

• Lead threat modeling for applications, APIs, and data flows.
• Define validation requirements for AI-generated code and AI-enabled apps.
• Provide architectural guidance for testing, vulnerability management, and risk reduction.
• Align Cedar Gate patterns with IQVIA security standards and governance.

Skills

Threat modeling

Application security

Cloud security

Secure SDLC

CI/CD security

Security governance

Education

Bachelor’s degree in a related field

Job description

IQVIA is seeking an Application Security Architect to protect PHI and sensitive client data across healthcare applications, APIs, and cloud services. You will work embedded with Cedar Gate teams in Portugal, Nepal, and the United States, influencing Secure SDLC and AI guardrails while balancing engineering ownership and security governance.

Based in Portugal, you will lead risk-based reviews, threat modeling, and architecture decisions, ensuring secure design patterns and compliance with HIPAA,