Application Security Architect

About the role

As an Application Security Architect, you are a security expert and evangelist. You provide subject matter expertise and security guidance to product engineering teams and IT to design and build secure solutions, drive the implementation of security best practices, establish security architecture standards and patterns, and perform security architecture reviews.

Key responsibilities

• Build strong relationships and effectively influence Veeva’s product and IT engineering.
• Translate security risks to business impact.
• Research, prioritize, coordinate, and communicate security solution recommendations.
• Provide security architecture advice for product application development, cloud infrastructure, and enterprise technology projects.
• Perform code analysis, application security reviews, and contribute to the application security training program.
• Stay current with security technologies and make usage recommendations.
• Maintain expert knowledge of information security, related systems, processes, products, and services.

Required profile

• Excellent written and verbal communication.
• Ability to evangelize technical security needs to product leadership and engineers.
• Broad experience with information, system, and network security concepts and components.
• Demonstrated experience with architecture and security reviews, threat modeling, and risk identification.
• Experience implementing strategies to support secure and compliant architectures.
• Deep understanding of the OWASP Top 10 application security risks and mitigation techniques.
• Expert knowledge of Amazon AWS, Microsoft Azure, or other cloud platforms and their security services.
• Experience with web application security scanning tools such as SAST, DAST, and SCA.
• Working knowledge of encryption, hashing, secure random number generation, key derivation, key management, and digital signatures.
• Understanding of internet‑scale, distributed, multi‑tenant architecture and services.
• Knowledge of Java and its ecosystem; proficiency with Python, JavaScript, and other scripting languages.
• BS in Computer Science or equivalent with 10+ years of experience.

Required skills

• OWASP Top 10
• Amazon AWS
• Microsoft Azure
• SAST
• DAST
• SCA
• Encryption
• Hashing
• Secure random number generation
• Key derivation
• Key management
• Digital signatures
• Java
• Python
• JavaScript
• Threat modeling