Application Security Engineer – DevSecOps (Freelance)

About the role

We are looking for a freelance Application Security Engineer with a strong DevSecOps background to help our development teams embed security throughout the software lifecycle. You will work closely with engineers, architects, and testers to ensure secure coding practices and robust security tooling.

Key responsibilities

• Support development teams in adopting secure development and DevSecOps practices.
• Configure, manage, and maintain application security tools across engineering groups.
• Perform secure code reviews using SAST solutions and review third‑party libraries with SCA tooling.
• Maintain automated security scanning infrastructure and monitor vulnerability assessments.
• Coach developers on secure coding standards and deliver awareness training.
• Produce reports and dashboards on vulnerabilities and overall security posture.

Required profile

• Experience in software development or DevOps engineering.
• Strong interest in application security and the Secure SDLC.
• Good understanding of Agile, CI/CD, and DevOps environments.
• Ability to communicate technical concepts to developers, architects, and management.

Required skills

• SAST tools
• SCA tools
• GitLab
• Jenkins
• Maven
• Docker
• CI/CD pipelines
• Agile methodologies
• Penetration testing basics
• Network security fundamentals
• Mobile application security (nice to have)
• OWASP principles and secure coding standards