# Application Security Analyst I

**Company**: IQVIA
**Location**: Kathmandu
**Experience**: entry
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Kathmandu-Nepal/Application-Security-Analyst-I_R1572581?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d3d3b6d2-edb

## Description

At IQVIA, protecting healthcare applications, sensitive client information, and Protected Health Information (PHI) is a critical responsibility.

The Application Security Analyst I plays an important role in supporting the security of applications, APIs, cloud-native platforms, and software delivery pipelines.

Working closely with Application Development, DevOps, Infrastructure, and Security teams, you will help identify and assess application security risks, support vulnerability remediation efforts, maintain application security records, and contribute to secure software development practices.

**Major Responsibilities:**

- Support and administer application security tools including SAST, SCA, DAST, API security, secrets scanning, container scanning, and Infrastructure-as-Code (IaC) security solutions.

- Validate security findings, assess potential impact, prioritize vulnerabilities, and support remediation efforts through verified closure.

- Perform targeted security testing of web applications, APIs, authentication and authorization controls, file handling functions, business logic, and data flows.

- Execute application security testing activities required through Secure SDLC and AI Development Lifecycle (AIDLC) processes while maintaining supporting evidence and documentation.

- Provide developers with remediation guidance based on scanning results, security testing findings, code reviews, and security incidents.

- Support monitoring of software supply chain risks including third-party dependencies, repositories, CI/CD credentials, artifact integrity, and software bills of materials (SBOMs).

- Assist in maintaining the application catalog by onboarding applications, validating ownership information, and ensuring inventory records remain accurate.

- Maintain application security profiles including data sensitivity, security-tool coverage, testing records, findings, and risk information.

- Help validate that required security scans, reviews, and testing activities are completed before software releases.

- Support security reviews of AI-generated code and AI-enabled applications, including testing for prompt injection, data leakage, insecure outputs, authorization weaknesses, and improper use of sensitive information.

- Produce security metrics, testing evidence, remediation reports, and compliance-related documentation.

- Escalate complex technical risks, architectural concerns, and design-related security issues to senior application security team members when required.

**Required Experience and Qualifications:**

- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Software Engineering, or a related field, or equivalent experience.

- 1-3 years of experience in Application Security, Security Engineering, DevSecOps, Software Development, Penetration Testing, or a related cybersecurity discipline.

- Hands-on experience with SAST, SCA, DAST, API security testing, container security, vulnerability management, or similar application security technologies.

- Familiarity with application security tools such as Veracode, Wiz, Sysdig, Burp Suite, Postman, or equivalent platforms.

- Working knowledge of web security, API security, authentication, authorization, secure coding, cryptography, and software supply chain security.

- Experience supporting Secure SDLC, CI/CD pipelines, Git workflows, security testing, and release security controls.

- Knowledge of OWASP Top 10, OWASP API Security Top 10, MITRE CWE, NIST SSDF, HIPAA, HITRUST, SOC 2, and related security frameworks.

- Strong analytical, communication, documentation, and reporting skills.

- Fluent in written and verbal English.

## Skills

### Required
- SAST
- SCA
- DAST
- API security
- container security
- vulnerability management
- web security
- authentication
- authorization
- secure coding
- cryptography
- software supply chain security
- OWASP Top 10
- MITRE CWE
- NIST SSDF
- HIPAA
- HITRUST
- SOC 2

### Nice to have
- Veracode
- Wiz
- Sysdig
- Burp Suite
- Postman
- Python
- Java
- JavaScript/TypeScript
- C#

---

Source: [Apply at iqvia.wd1.myworkdayjobs.com](https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Kathmandu-Nepal/Application-Security-Analyst-I_R1572581?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)