> Markdown version of [/jobs/ext/2032826-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2032826-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** IQVIA - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Adobe InDesign, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Data Analysis, Applications Architecture, Architectural Patterns, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, Information Leak Prevention, DevOps, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Systems Development Life Cycle, Secure Coding, Software Engineering, Systems Integration, Software Vulnerability Management, Scripting, Cloud Platform System, Large Language Models, Software Security, Model Validation, Event Driven Architecture, Build Management, GWAPT, Containerization, Kubernetes, Information Technology, Devsecops, Static Application Security Testing, Microservices, Dynamic Application Security Testing - **Published:** August 12, 2026 - **Apply:** https://www.healthjobsnationwide.com/node/15418577/apply-external ## About the Role * Minimum of 6-8 years of professional experience in Application Security, DevSecOps, Software Engineering, Cloud Engineering, or related technical security roles. * Hands on experience with CI/CD pipelines and DevSecOps tooling, including integrating security controls into build and deployment workflows. * Working knowledge of application security testing techniques such as SAST, DAST, SCA, container scanning, and infrastructure as code security. * Experience with cloud environments (Microsoft Azure and/or Amazon AWS), including deploying and securing applications in IaaS and PaaS platforms. * Experience with containerized and modern application architectures, including Kubernetes, microservices, APIs, and event driven systems. * Practical scripting experience, preferably in Python, for automation, integrations, or security tooling support. * Knowledge of secure software development practices, OWASP Top 10, common application attack patterns, and secure coding principles. * Foundational to intermediate knowledge of AI and ML security considerations, including Agent development, model risk, data protection, pipeline security, and misuse/abuse scenarios. * Bachelor's degree in Computer Science, Software Engineering, Information Security, or equivalent practical experience is preferred. * Security or cloud certifications (such as CSSLP, GWAPT, AWS/Azure Security, CKAD/CKS, or equivalent) are preferred but not mandatory. * Working knowledge of security frameworks and standards such as NIST, OWASP, ISO 27001, or similar is an advantage. * Strong communication skills, with the ability to work directly with engineering teams and explain security concepts in a practical, delivery focused manner. ## Description The Application Security / DevSecOps Specialist role presents a hands on opportunity to support and scale IQVIA's global Application Security and DevSecOps capabilities. We are deepening our DevSecOps capabilities, maturing AI security governance, and embedding security earlier into the software development lifecycle across a complex global environment - including cloud-native platforms, containerized workloads, third-party SaaS, and AI-enabled systems. This role is for a technically strong, practitioner-level leader who can operate at the intersection of engineering and security architecture. You will not only assess and advise - you will build, automate, and drive adoption of secure-by-design practices across IQVIA's global delivery teams. You will sit within the global Information Security organization, collaborating closely with Security Architecture, Cloud Security, Vulnerability Management, and DevOps platform teams, as well as directly with product engineering and delivery teams across business units and regions. Principal responsibilities will include: * Drive adoption and ownership of CI/CD security controls across product engineering teams, including tooling configuration, findings triage, pipeline onboarding, and remediation follow-through. * Provide follow-up support for CI/CD security requests, including assisting teams with pipeline security tooling, configuration issues, findings remediation, and onboarding to DevSecOps services. * Support application security assessments and security design reviews, working with delivery and architecture teams to identify risks, define mitigations, and track remediation actions. * Act as a security point of contact for development teams, providing consultancy and guidance on secure coding practices, SDLC requirements, and secure architecture patterns. * Review and assess application architectures, including cloud-native, microservices, APIs, containerized workloads, and event-driven systems, with an architectural security mindset. * Support cloud application deployments and architecture patterns across Microsoft Azure and Amazon AWS, focusing on secure configuration, identity, network controls, and workload security. * Contribute to the implementation and operationalization of DevSecOps practices, including SAST, DAST, SCA, container scanning, secret detection, and infrastructure-as-code security. * Develop and maintain Python scripts and automations to support security checks, data analysis, reporting, or CI/CD integrations where appropriate. * Support and contribute to AI Security for Development, including guidance on securing AI/ML architectures, protecting training pipelines, managing model risks, securing LLM prompt workflows, and addressing data leakage, model abuse, and agentic system risks. * Assist in defining and maintaining security standards, requirements, and guidance related to application security, DevSecOps, cloud development, and AI-enabled systems. * Collaborate closely with Security Architecture, Cloud Security, Vulnerability Management, and DevOps platform teams to ensure alignment with IQVIA security frameworks and toolsets. * Track, follow up, and support security findings remediation, ensuring issues identified through assessments or pipeline tools are addressed effectively by delivery teams. * Help promote Security by Design and Shift-Left principles, supporting teams early in design and development phases rather than late-stage security enforcement. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)