Application Security Engineer
IQVIA · Porto Salvo, Portugal
IT & SoftwareFull-timeCompany career page
The apply link worked recently (not employer-confirmed).
Role summary
Application Security Engineer role focused on embedding DevSecOps practices and security governance across IQVIA's global software development lifecycle. The position combines hands-on engineering with security architecture, working across cloud platforms, containerized systems, and AI-enabled applications.
What they're looking for
- 6-8 years in Application Security, DevSecOps, Software Engineering, or Cloud Engineering
- Hands-on experience with CI/CD pipelines and security tooling integration
- Working knowledge of SAST, DAST, SCA, container scanning, and infrastructure-as-code security
- Cloud platform experience with Microsoft Azure and/or Amazon AWS
- Experience with Kubernetes, microservices, APIs, and containerized architectures
- Python scripting for automation and security tooling support
- Knowledge of OWASP Top 10, secure coding practices, and secure software development
What you'll be doing
- Drive adoption of CI/CD security controls and pipeline onboarding across product engineering teams
- Conduct application security assessments and design reviews with delivery and architecture teams
- Serve as security consultant for development teams on secure coding and architecture patterns
- Review and assess cloud-native, microservices, and containerized application architectures
- Support AI/ML security implementation and guidance for development teams
Privacy & handoff
This role links to IQVIA's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.