Contact person: Develop Secure Coding Policy Framework - Language agnostic

Phone:Show

Email:Show

Location: Vernon Hills, United States

Budget: Recommended by industry experts

Time to start: As soon as possible

Project description:
"I want to standardize how every API and web application is written, reviewed, and released by turning OWASP-based secure-coding conventions into concrete, measurable policies. The focus spans input validation, authentication & authorisation, and robust error handling, and I need a framework that can be dropped into any pipeline and immediately tell us whether a code change meets the bar.

What I expect from you is a practical, technology-agnostic set of quality gates with an objective scoring model.

Deliverables
• A written standard (Markdown or AsciiDoc) that maps OWASP controls to Java-specific do’s and don’ts
• A scoring rubric that converts findings into pass/fail thresholds for pull-requests and releases
• Configuration files or sample scripts that integrate the rubric into a CI/CD pipeline
• A short usage guide demonstrating how to apply the framework on an existing codebase and on a greenfield project

Acceptance criteria: running the supplied configuration against a sample Spring Boot project must produce a clear, reproducible score with actionable feedback for any violations of the input-validation, auth, or error-handling rules.

If you have experience building internal security standards, automating code reviews, or crafting SonarQube quality profiles, you’ll feel at home here. I’m ready to start as soon as you can outline how you’ll translate OWASP best practices into enforceable policy files." (client-provided description)