Senior Application Security Architect - Portugal

IQVIA; Oeiras; On-site; EUR 90,000 - 120,000; Full time

Job summary

IQVIA is seeking an Application Security Architect to protect PHI and sensitive client data across healthcare applications, APIs, data exchanges, cloud services, and supporting infrastructure. The role collaborates with Cedar Gate teams in the US, Nepal, and Portugal, embedding security into development and modernization efforts.

The candidate will influence Secure SDLC and AIDLC practices, lead threat modeling, and provide senior architectural guidance for testing, risk management, and

Qualifications

• 5+ years of progressive experience in application security, software engineering, or security architecture.
• Strong knowledge of application and API security, multi-tenant SaaS, identity, cryptography, and PHI processing.
• Experience influencing Secure SDLC/AIDLC practices and embedding security into CI/CD pipelines.

Responsibilities

• Establish risk-based review criteria for new applications, functionalities, and infrastructure; document requirements and decisions.
• Lead threat modeling for applications, APIs, data flows, and AI-enabled features using STRIDE and attack-path analysis.
• Maintain patterns and guidance for identity, tenancy, input handling, cryptography, logging, PHI workflows, OAuth 2.0, OpenID Connect, and service communications.
• Define validation requirements for AI-generated code and AI-enabled applications; oversee SAST, SCA, DAST, and CI/CD security checks.
• Provide architectural guidance for testing, vulnerability management, and remediation strategies to multiple teams.

Skills

Threat modeling

Secure SDLC

CI/CD security

AWS security

API security

PHI handling

Security architecture

Effective communication

Education

Bachelor's degree in a related field

Tools

SAST

SCA

DAST

Identity & access management

Job description

IQVIA is seeking an Application Security Architect to protect PHI and sensitive client data across healthcare applications, APIs, data exchanges, cloud services, and supporting infrastructure. The role collaborates with Cedar Gate teams in the US, Nepal, and Portugal, embedding security into development and modernization efforts.

The candidate will influence Secure SDLC and AIDLC practices, lead threat modeling, and provide senior architectural guidance for testing, risk management, and