Application Security Architect (Freelance)

About the role

Devoteam, a technology consulting firm with 30 years of experience in cloud, data, cybersecurity and AI, is looking for a freelance Application Security Architect based in Prague. The consultant works with stakeholders across the organisation to protect applications throughout their lifecycle, steers external partners on security assessments and advises development teams on secure practices.

Key responsibilities

• Work with stakeholders to ensure application security across the lifecycle, considering best practices, regulations and organisational needs
• Steer external partners on comprehensive security assessments, vulnerability identification and remediation recommendations
• Collaborate with development teams to integrate security controls into the application development process
• Define and enforce application security policies, standards and procedures
• Keep up to date with emerging threats and trends and assess their impact on the company
• Advise development teams on secure coding, secure configuration management and vulnerability remediation
• Act as a subject matter expert for application security for stakeholders, management and executives
• Stay current with standards such as OWASP, SANS and NIST and maintain relationships with key vendors and partners

Required profile

• University degree or equivalent experience in computer science, engineering, IT or a related field
• Fluent written and spoken English
• Proven experience as an Application Security Architect or in a similar role
• Experience in a global company designing and deploying solutions at scale
• Excellent negotiation, communication and stakeholder relationship skills

Required skills

• Application security principles: secure coding, input validation, authentication, access controls and encryption
• OWASP Top Ten, SANS CWE Top 25 and secure SDLC
• Security testing: code review, vulnerability scanning and penetration testing
• Preferred: ISO 27001, CIS Controls, NIST, Cyber Essentials and certifications such as CSSLP, CISM, CISA or CISSP