Contact person: Business Client

Phone:Show

Email:Show

Location: India

Budget: Recommended by industry experts

Time to start: As soon as possible

Project description:
"I am bringing a new software product to life and want security woven into the code from day one. I’m looking for an Information Security officer whose core strength is Application Security and who can partner with my developers during the Development phase to make sure every line ships hardened and compliant.

What I need you to do
• Establish a secure-by-design workflow: define security requirements, threat-model the architecture, and translate findings into actionable user stories for the devs.
• Guide secure coding practices and set up automated checks with tools such as OWASP ZAP, SonarQube/SAST, or any stack-appropriate alternative you propose.
• Perform ongoing code reviews, vulnerability triage, and risk assessments, then document remediation paths the team can follow.
• Deliver concise yet complete artefacts—requirements matrix, threat model diagrams, review reports, and an executive summary that proves the app meets OWASP Top 10 and any relevant regulatory touchpoints we identify together.

Acceptance criteria
The engagement is complete when the agreed artefacts are delivered, all critical and high-severity findings are retested and closed, and the development pipeline enforces the controls you introduced without blocking normal release cadence.

To be considered
Attach a detailed project proposal outlining your methodology, preferred toolset, timeline, and any prerequisite access you’ll need from me. Feel free to showcase similar application-security engagements if that helps illustrate your approach. I’ll review proposals and set up a quick call with shortlisted candidates so we can lock in scope and milestones." (client-provided description)