Archiviertes Projekt - IT Security Consulting Level 3 (m/w/d)

We are currently looking for a freelance IT Security Consulting Level 3 (m/w/d) for our client in the Bank / Finance sector.

Start: asap
End: 3 months
Volume: 40 Tag(e)
Location: Nürnberg oder Frankfurt / remote

Tasks and Responsibilities per phase:

Initialization/Preparation Phase:

Ensure execution of Threat Modeling in early project phases


Construction Phase:

Supports of Security Champion in the vulnerability management process in development phase (e.g. triage, prioritization, follow of exceptions)
Support Security champions in their mission to assists developers in security defect fixing
Perform security acceptance testing before go-life for tests on SAST/SCA tooling and provide reports to support Go/No-Go decisions
Act in the role of SME for risk assessments for all kind of issues linked to source code security


RUN Phase (in production):

Responsible for the continuous Monitoring of Library and Framework Security (tool assisted)
In case finding appear in RUN phase all tasks described in Construction Phase apply here as well
Contribute to global Vulnerability Management Process related to applicative findings