Associate Director, Application Security Engineering - Evinova

Are you ready to be part of the future of healthcare? Are you able to think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges?  Then Evinova, a new health tech business part of the AstraZeneca Group might be for you!  
 

Transform billions of patients’ lives through technology, data and cutting-edge ways of working. You’re disruptive, decisive and transformative. Someone who’s excited to use technology to improve patients’ health. We’re building a new healthtech business – Evinova, a fully-owned subsidiary of AstraZeneca Group. 

Our Gaithersburg, Maryland facility creates life-changing medicines for people around the world. This campus employs more than 3,500 experts in our field and is only a short drive from Washington, DC. This modern and vibrant scientific campus is the home of R&D and Oncology in the US. Here, we play host to some of the most cutting-edge technology and lab spaces, all designed to inspire collaboration and cross-functional science. We believe employees benefit from being challenged and inspired at work. We are dedicated to creating a culture of inclusion and collaboration.

The Gaithersburg site offers a variety of amenities to help boost productivity and help keep our employees happy and healthy. This includes a fitness center, employee healthcare clinic, electric vehicle charging stations, dry cleaning, full-service cafeteria and copy center. This is where you’ll find newly-designed, activity-based work spaces to suit a variety of working styles while increasing collaboration between teams.

Evinova delivers market-leading digital health solutions that are science-based, evidence-led, and human experience-driven. Thoughtful risks and quick decisions come together to accelerate innovation across the life sciences sector. Be part of a diverse team that pushes the boundaries of science by digitally empowering a deeper understanding of the patients we’re helping. Launch pioneering digital solutions that improve the patients’ experience and deliver better health outcomes. Together, we have the opportunity to combine deep scientific expertise with digital and artificial intelligence to serve the wider healthcare community and create new standards across the sector.  

The Staff Application Security Engineer at Evinova will serve as the primary Subject Matter Expert (SME) on application security. This role will be responsible for ensuring the security of our Java-based APIs through extensive software engineering & security engineering experience. Key responsibilities will include manual code reviews, creating code fixes, conducting architecture reviews, and performing other application security engineering duties to safeguard our digital solutions and platform against emerging threats. 

Key Responsibilities:

• Review Java code and API/web application architecture to identify and remediate security vulnerabilities within the APIs/applications.
• Develop security features to enhance the security posture of the APIs and associated web applications.
• Collaborate with cross-functional teams to drive the implementation of security best practices and ensure compliance with industry standards.
• Act as a key advisor on secure coding practices, threat mitigation, and potential security risks within the Java ecosystem.
• Establish and operationalize an application security vulnerability management program, including the validation, analysis, and prioritization of vulnerabilities, and drive remediation efforts.
• Drive the continuous improvement of security controls, processes, policies, standards, and other governing documents related to product and application security.
• Provide expert-level guidance and support for secure development standards and related trainings to raise awareness of secure coding practices and regulatory requirements.

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent practical experience.
• 6+ years of combined experience in software engineering and application or product security.
• Advanced knowledge and experience building and/or maintaining APIs in Java
• Deep understanding of application security related frameworks, securing applications on the AWS cloud platform, containerization technologies, and security best practices (e.g., API, Containers, AWS Cloud).
• Strong familiarity and past experiences conducting Threat Modeling.
• Ability to make pragmatic decisions by analyzing highly complex situations, assessing risks, and balancing strategic and tactical compliance/quality requirements.
• Ability to work independently in a fast-paced environment with a proven ability to manage competing priorities.
• Excellent written and verbal communication skills (English), project management, process improvement, attention to detail, and strategic thinking skills are highly preferred.

Desired Qualifications:

• Prior experience providing AppSec capabilities for a SaaS/cloud service provider.
• Prior experience as a Software Developer, Infrastructure Engineer, and/or Product Security Engineer.
• Expert knowledge of threat actors targeting the Healthtech sector and SaaS solution providers.
• Experience providing AppSec capabilities within a highly regulated, sophisticated global business environment, particularly in the healthcare and/or clinical research industry.
• Demonstrate initiative, strong customer orientation, and cross-cultural working.

Why Evinova (AstraZeneca)? 

Evinova draws on AstraZeneca’s deep experience developing novel therapeutics, informed by insights from thousands of patients and clinical researchers. Together, we can accelerate the delivery of life-changing medicines, improve the design and delivery of clinical trials for better patient experiences and outcomes, and think more holistically about patient care before, during, and after treatment.  We know that regulators, healthcare professionals, and care teams at clinical trial sites do not want a fragmented approach. They do not want a future where every pharmaceutical company provides its own, different digital solutions. They want solutions that work across the sector, simplify their workload, and benefit patients broadly. By bringing our solutions to the wider healthcare community, we can help build more unified approaches to how we all develop and deploy digital technologies, better serving our teams, physicians, and ultimately patients.  Evinova represents a unique opportunity to deliver meaningful outcomes with digital and AI to serve the wider healthcare community and create new standards for the sector.  Join us on our journey of building a new kind of health-tech business to reset expectations of what a bio-pharmaceutical company can be. This means we’re opening new ways to work, pioneering cutting-edge methods, and bringing unexpected teams together.

So, what’s next!

Are you already envisioning yourself joining our team? Good, because we can’t wait to hear from you.

Where can I find out more?

Our Social Media, Follow AstraZeneca on LinkedIn https://www.linkedin.com/company/1603/ 

Follow AstraZeneca on Facebook https://www.facebook.com/astrazenecacareers/  

Follow AstraZeneca on Instagram https://www.instagram.com/astrazeneca_careers/?hl=en

Learn more about Evinova www.evinova.com

The annual base pay for this position ranges from $121,926 to $182,889. Hourly and salaried non-exempt employees will also be paid overtime pay when working qualifying overtime hours. Base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience.  In addition, our positions offer a short-term incentive bonus opportunity; eligibility to participate in our equity-based long-term incentive program (salaried roles), to receive a retirement contribution (hourly roles), and commission payment eligibility (sales roles). Benefits offered included a qualified retirement program [401(k) plan]; paid vacation and holidays; paid leaves; and, health benefits including medical, prescription drug, dental, and vision coverage in accordance with the terms and conditions of the applicable plans. Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an “at-will position” and the Company reserves the right to modify base pay (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Date Posted

15-Jan-2025

Closing Date

22-Jan-2025Our mission is to build an inclusive and equitable environment. We want people to feel they belong at AstraZeneca and Alexion, starting with our recruitment process. We welcome and consider applications from all qualified candidates, regardless of characteristics. We offer reasonable adjustments/accommodations to help all candidates to perform at their best. If you have a need for any adjustments/accommodations, please complete the section in the application form.