Application Security Architect (freelancer)

Description

The company is a technology consultancy across EMEA that focuses on AI-driven change for businesses and public institutions.

It has 30 years of consulting experience and now works mainly in cloud, data, cybersecurity and AI.

11,000 specialists go through its AI certification programme.

Forward-deployed engineers, tech experts and AI agents work inside clients' core business units to design, build and scale AI platforms that support growth.

The company holds strategic partnerships with leading technology and AI providers.

It has been a ServiceNow Elite Partner since 2019 and was named ServiceNow Partner of the Year in 2026, the fourth year running.

Responsibilities

• Keep application security in place across each stage of the application lifecycle, taking into account best practices, regulatory obligations and the needs of the business.
• Work with the development teams to build security controls and measures into their delivery process.
• Direct an external partner running detailed security assessments, finding vulnerabilities and proposing fixes.
• Write and enforce application security policies, standards and procedures that meet internal and external requirements.
• Advise development teams on secure coding, secure configuration and fixing vulnerabilities.
• Track new threats, vulnerabilities and trends in application security and judge how they affect the company.
• Bring OWASP, SANS and NIST standards and frameworks into the application security programme.
• Act as the subject matter expert, advising stakeholders, managers and executives on application security.
• Handle other security architecture topics that relate to project deliverables.
• Build and maintain strong working relationships with key vendors and strategic external partners.

Requirements

• Minimum: a university degree or equivalent experience in computer science, engineering, information technology or a related field.
• Minimum: fluent written and spoken English.
• Minimum: proven experience as an Application Security Architect or in a similar role focused on securing applications.
• Minimum: strong grasp of application security principles, including secure coding, input validation, authentication, access control and encryption.
• Minimum: experience with standards and frameworks such as the OWASP Top Ten, the SANS CWE Top 25 and secure software development lifecycle (SDLC) methods.
• Minimum: hands-on work with security testing, ideally code review, vulnerability scanning and penetration testing.
• Minimum: experience working in a global company and designing or deploying solutions at scale.
• Minimum: strong negotiation, communication and interpersonal skills, with the ability to build influential relationships at every level of stakeholders.
• Preferred: knowledge and experience of standards such as ISO 27001, CIS Controls, NIST and Cyber Essentials is a plus.
• Preferred: certification or accreditation in information security, such as CSSLP, CISM, CISA or CISSP, and or vendor-specific certifications, is a plus.

Conditions

This is a freelance engagement.