• Lead and manage a Teamcenter support team of three, allocating workload, setting priorities, monitoring performance, and ensuring high-quality service delivery against agreed SLAs. • Act as the lead escalation point for L1/L2/L3 Teamcenter incidents and service requests, investigating, diagnosing, and coordinating the resolution of complex application defects, server errors, workflow failures, and data issues with structured root-cause analysis and permanent fixes. • Lead the design and governance of custom Teamcenter solutions using ITK APIs, BMIDE business modeller, Active Workspace client-side customisation, Java or C++ extensions, and workflow handler development, while mentoring team members and maintaining a controlled GxP SDLC. • Author and maintain controlled technical documents including System Design Specifications (SDS), Validation Plans, IQ/OQ/PQ protocols, SOPs, change control records, and user guides in compliance with ISO 13485 and 21 CFR Part 11 document control requirements. • Support Computer System Validation (CSV) activities – including installation qualification, operational qualification, and performance qualification – to keep Teamcenter in a validated state aligned with EU MDR 2017/745, ISO 13485, and FDA 21 CFR Part 11. • Oversee day-to-day Teamcenter service operations and server administration, including environment health monitoring, patch and upgrade planning, data model migrations, capacity planning, and coordination of team activities. • Participate in internal and external audits (FDA, Notified Body, ISO) as the Teamcenter SME, providing evidence of system validation, data integrity controls, and audit trail completeness. • Manage change requests through the formal change control process, including impact assessments, regression testing, and updating validation documentation prior to deployment in the production environment. • Coach and develop the Teamcenter support team, establish knowledge-sharing practices, and ensure end-user training, user guides, and ongoing support are delivered effectively across engineering, quality, and regulatory functions.

• Resolve L1/L2/L3 Teamcenter incidents and service requests within SLA • Investigate, diagnose, and resolve Teamcenter application defects, server errors, workflow failures, and data issues, applying structured root-cause analysis and providing permanent fixes with full traceability • Develop custom Teamcenter solutions using ITK APIs, BMIDE business modeller, Active Workspace client-side customization, Java or C++ extensions, and workflow handler development, all under a controlled GxP SDLC • Author and maintain controlled technical documents including System Design Specifications (SDS), Validation Plans, IQ/OQ/PQ protocols, SOPs, change control records, and user guides in compliance with ISO 13485 and 21 CFR Part 11 document control requirements • Support Computer System Validation (CSV) activities – including installation qualification, operational qualification, and performance qualification – to keep Teamcenter in a validated state aligned with EU MDR 2017/745, ISO 13485, and FDA 21 CFR Part 11 • Manage day-to-day Teamcenter server administration: environment health monitoring, patch and upgrade planning, data model migrations • Participate in internal and external audits (FDA, Notified Body, ISO) as the Teamcenter SME, providing evidence of system validation, data integrity controls, and audit trail completeness • Manage change requests through the formal change control process, including impact assessments, regression testing, and updating validation documentation prior to deployment in the production environment • Deliver end-user training, create user guides and quick-reference materials, and provide ongoing helpdesk-level support to Teamcenter users across engineering, quality, and regulatory functions

• Conduct application security reviews — threat modeling, code review, and risk assessment — for new features and major product changes across Monarch's Django/Python stack • Perform and improve SAST/DAST operations including triage, validation, and remediation tracking of findings in CI/CD pipelines • Work through the vulnerability backlog with urgency — maintaining triage criteria, remediation tracking, and escalation paths in partnership with engineering squads • Perform and coordinate penetration testing and security assessments against Monarch's web and API surfaces • Apply and improve AI security review processes for LLM-integrated features and agentic attack surfaces — covering prompt injection, data leakage, model abuse, and supply chain risk • Build and maintain security automations and AI-powered tooling, and define and assess security requirements for AI workflows and agentic systems. • Participate in the weekly security on-call rotation

Role Description The Application Security Engineer will focus on securing applications and systems for the SEC. This position is 100% remote and requires obtaining SEC Public Trust clearance. - Contract Duration: 12+ months - Interview Process: 2x video - Areas of focus: Burp and Veracode Qualifications - 6+ years of Information Technology experience - 3+ years of experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite - 2+ years of experience with Java, Python, .NET, or C# - 3+ years of experience in designing and implementing enterprise-wide security controls - Experience with Eclipse, JDeveloper, or Visual Studio - Experience with securing enterprise web applications and knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS-25 - Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP - Knowledge of Linux or UNIX environments - HS diploma or GED Requirements - Experience with Interactive Application Security Testing (IAST) capabilities and tools - Experience with HackerOne - Experience with Selenium - Experience writing bash scripts - Experience with OWASP ZAP or Burp Proxy Company Description