Application Security Consultant – Freelance

We’re looking for an experienced Application Security Consultant to join UpSecurity on a freelance basis.

The role combines Application Security consulting and technical leadership with hands-on implementation, working closely with development, security and infrastructure teams to strengthen application security across a complex enterprise environment.

What you’ll do

• Lead and implement Application Security and Secure SDLC practices across development teams.

• Assess existing security processes, identify gaps and translate them into practical security improvements.

• Implement and optimize SAST, SCA and Secret Scanning solutions, integrating security controls and automated testing into CI/CD processes.

• Strengthen Git, software supply-chain and repository security, including permissions, dependency security and secure development controls.

• Implement and improve Secrets Management, access controls and Least Privilege practices.

• Identify, prioritize and drive remediation of application security vulnerabilities, working closely with developers and Security Champions.

• Define and track AppSec priorities and security KPIs, while supporting security initiatives around AI applications and AI Agents.

Qualifications

• 5+ years of hands-on Application Security experience, including proven experience building, implementing or significantly maturing AppSec practices within development environments.

• Strong practical knowledge of Secure SDLC and application security principles.

• Hands-on experience with SAST, SCA, Secret Scanning and CI/CD security controls.

• Good understanding of Git security, dependency security, secrets management and access controls.

• Experience working directly with development teams and driving security findings through remediation.

• Ability to independently assess security needs, define the appropriate approach and lead implementation end-to-end.

• Experience with Snyk and/or Nexus – a strong advantage.

• Familiarity with AI Security, LLM Security and AI Agents – an advantage.

This role is ideal for an AppSec professional who can move comfortably between advisory work, technical decision-making and hands-on implementation.