• Manage document control activities within the electronic document management system (EDMS) (i.e., Veeva Quality Suite), related to Phase III and Commercial readiness associated GXP (i.e., Good Clinical Practice (GCP), Good Laboratory Practice (GLP), and Good Manufacturing Practice (GMP)) documentation • Play a critical role in ensuring that Apogee maintains the highest standards of document management and regulatory compliance • Support cross functional teams’ success in the advancement through every stage within the document lifecycle • Maintain document control policies, procedures, and systems in accordance with GXP regulations • Utilize Veeva Systems as a centralized EDMS for GXP documentation and employee training • Ensure proper classification, indexing, version control, and archiving of GXP-related documents, including current and historical records • Conduct regular audits (“data cleaning”) of GXP documents and training processes and documents/records to identify, address, and correct discrepancies and or non-compliance issues to ensure accuracy and “system wellness” • Maintain robust quality control measures for all GXP documents • Leverage experience with Veeva Systems to optimize document management processes and workflows • Provide guidance and training to staff on using Veeva for document control and compliance purposes • Stay up to date with and ensure strict adherence to GXP regulatory requirements, guidelines, and industry best practices (e.g., FDA, EMA, ICH) • Work in partnership with various departments (e.g., Biometrics, Clinical, IT, Legal, Nonclinical, Program Management, Regulatory Affairs, Technical Operations, etc.) to ensure GXP document accuracy and relevance • Identify opportunities for improvements in GXP document and record control practices

• Design, execute, and document comprehensive manual test cases for new and existing product features, thinking critically about edge cases. • Test complex UI flows thoroughly by clicking through the product, identifying issues that might not be obvious. • Work with APIs using Postman to validate backend functionality. • Provide clear evidence of testing through screenshots, Loom videos, and detailed reproduction steps. • Write high-quality bug reports that are actionable and easy for the team to reproduce. • Collaborate closely with engineers, product managers, and designers to clarify requirements, define test scope, and advocate for quality. • Participate in sprint planning, grooming, and retrospectives, providing QA feedback and helping prioritize fixes. • Maintain and update internal documentation on product behavior, key workflows, and edge cases. • Communicate proactively with a fully remote, distributed team across time zones.

• Lead and conduct highly advanced, in-depth white-box penetration testing of web applications and APIs. • Perform comprehensive security assessments and penetration testing on Cloud Infrastructure (AWS and Azure). • Deep-dive into Kubernetes clusters and containerized applications. • Define the offensive security roadmap and lead the adoption of cutting-edge testing techniques and tools. • Serve as an advisor and act as effective challenger to Architecture, Engineering, and DevOps teams, providing expert guidance. • Lead advanced threat modelling exercises for major initiatives. • Analyze, prioritize, and articulate complex security findings. • Drive the selection, customization, and deployment of best-in-class security tools. • Develop and present executive-level technical reports that are actionable. • Mentor other penetration testers fostering a culture of excellence, continuous learning, and security research.

• Own the QA process, defining and continuously refining our quality strategy, workflows, test frameworks, and success metrics across the project. • Lead and maintain a high-performing internal QA organization, while establishing effective partnerships and accountability with external QA vendors. • Be the primary quality partner to the development teams, providing clear quality signals, risk assessments, and readiness input to inform scheduling, prioritization, and release decisions. • Establish and maintain QA standards, documentation, and reporting to ensure clarity and consistency. • Oversee vendor QA strategy and performance, including scope definition, quality expectations, and integration with internal QA efforts. • Own platform compliance and certification readiness across all target platforms, proactively identifying risks and driving mitigation plans.