> Markdown version of [/jobs/ext/2256232-application-security-architect](https://www.wearedevelopers.com/jobs/ext/2256232-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Architect - **Company:** Veeva Systems - **Location:** Oxford, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Amazon Web Services, Software System Penetration Testing, Systems Engineering, Microsoft Azure, Cloud Computing, Static Program Analysis, Cyber Security, Digital Signature, Python (Programming Language), Key Management, Network Security, Microsoft Security Essentials, Open Web Application Security, Web Application Security, Software Engineering, Scripting, Enterprise Software Applications, Cloud Platform System, Software Security, Information Technology, Veeva, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815045807-application-security-architect ## About the Role * Excellent written and verbal communication * Ability to evangelize technical security needs to product leadership and engineers * Broad experience with information, system, and network security concepts and components * Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk * Experience implementing strategies to support secure and compliant architectures * Deep understanding of the OWASP Top 10 application security risks and how to address them * Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related services * Experience with web application security scanning software and related assessment tools such as SAST/DAST/SCA * Working knowledge of encryption, hashing, secure random number generation, key derivation, key management, digital signatures * Understanding of internet-scale, distributed, multi-tenant architecture and services. * Knowledge of Java and the Java Ecosystem. Proficiency with Python, JavaScript and other scripting languages * BS in Computer Science or equivalent with 10+ years of experience, * Experience with assessing and providing recommendations for securing generative AI solutions * Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). * Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX * MS in Cyber Security, Information Security, MIS or equivalent * Industry security certifications such as CISSP or others * Experience in Application penetration testing, CTF competitions, CVE research and/or Bug Bounty recognition * Experience in Web and Mobile (Android/iOS) based application/service assessment ## Description The Role As an Application Security Architect, you are a security expert and evangelist. You provide subject matter expertise and security guidance to product engineering teams and IT to design and build secure solutions, drive the implementation of security best practices, establish security architecture standards and patterns, and perform security architecture reviews. You will partner with other security leads to grow the security program, mentor junior security team members, measure adherence, suggest and implement changes, develop roadmaps, present to steering committees and engineering teams, and promote security awareness company wide. What You'll Do * Build strong relationships and effectively influence Veeva's product and IT engineering * Translate security risks to business impact * Research, prioritize, coordinate, and communicate security solution recommendations * Provide security architecture advice in support of product application development, cloud infrastructure, and enterprise technology projects * Perform code analysis, application security reviews, and contribute to the application security training program * Stay current with security technologies and make usage recommendations * Maintain an expert knowledge level of Information Security and the related issues, systems, processes, products, and services. Requirements * Excellent written and verbal communication * Ability to evangelize technical security needs to product leadership and engineers * Broad experience with information, system, and network security concepts and components * Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk * Experience implementing strategies to support secure and compliant architectures * Deep understanding of the OWASP Top 10 application security risks and how to address them * Expert knowledge of Amazon AWS, Microsoft Azure or other cloud computing platform offerings and security related services * Experience with web application security scanning software and related assessment tools such as SAST/DAST/SCA * Working knowledge of encryption, hashing, secure random number generation, key derivation, key management, digital signatures * Understanding of internet-scale, distributed, multi-tenant architecture and services. * Knowledge of Java and the Java Ecosystem. Proficiency with Python, JavaScript and other scripting languages * BS in Computer Science or equivalent with 10+ years of experience Nice to Have * Experience with assessing and providing recommendations for securing generative AI solutions * Working knowledge of the Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM). * Familiar with compliance regulations like; ISO, GDPR, SOC2, SOX * MS in Cyber Security, Information Security, MIS or equivalent * Industry security certifications such as CISSP or others * Experience in Application penetration testing, CTF competitions, CVE research and/or Bug Bounty recognition * Experience in Web and Mobile (Android/iOS) based application/service assessment Veeva's headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world. As an equal opportunity employer, Veeva is committed to fostering a culture of inclusion and growing a diverse workforce. Diversity makes us stronger. It comes in many forms. Gender, race, ethnicity, religion, politics, sexual orientation, age, disability and life experience shape us all into unique individuals. We value people for the individuals they are and the contributions they can bring to our teams. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at . ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)