Senior DevSecOps Architect

FREELANCE SENIOR DEVSECOPS SECURITY CONSULTANT

We are supporting a leading international technology organization as they continue to strengthen their secure software development capabilities across a large global engineering environment.

This is a key position within an ongoing DevSecOps transformation programme, where you will take ownership of identifying, selecting and implementing modern security tooling across the software development lifecycle. Rather than focusing on day-to-day engineering, you\'ll act as the technical lead for security tooling strategy, vendor selection and implementation, working closely with development, security and engineering teams worldwide.

Your focus

• Lead the evaluation, selection and implementation of Developer Endpoint Security Management (DESM) and Application Security Posture Management (ASPM) solutions.
• Assess business and technical requirements before producing recommendations and presenting solution options to senior stakeholders.
• Drive the implementation of selected security platforms, coordinating with development, infrastructure and security teams.
• Integrate security tooling into existing DevSecOps and CI/CD environments.
• Champion Secure Software Development Lifecycle (SSDLC) and Shift-Left Security practices across development teams.
• Advise engineering teams on modern application security, software supply chain security and secure development best practices.
• Collaborate with international stakeholders across multiple regions, providing technical leadership throughout the programme.

We\'re looking for

• Proven experience delivering enterprise DevSecOps or Application Security programmes.
• Hands-on experience implementing Developer Endpoint Security Management (DESM) and/or Application Security Posture Management (ASPM) solutions.
• Strong understanding of modern DevSecOps tooling, including CI/CD security, software supply chain security and secure development practices.
• Experience evaluating vendors, producing technical recommendations and leading tooling selection exercises.
• Knowledge of platforms such as GitLab, Jenkins, Nexus, JFrog Artifactory or similar DevOps ecosystems.
• Familiarity with security technologies including SAST, DAST, dependency scanning, secret scanning and SBOM management.
• Understanding of secure software development standards and regulatory frameworks such as NIS2, Cyber Resilience Act, ISO 27001 and OWASP.
• Excellent stakeholder management and communication skills, with the ability to work effectively with both technical and non-technical audiences.
• Fluent English is essential. German would be advantageous but is not required.

Contract details

• Location: Remote, client is based in Germany
• Start: ASAP
• Duration: Initial 6-month engagement with strong extension potential
• Working mode: Full time
• Hybrid: first few days of onboarding onsite in Germany, followed by remote working
• Applicants must have the right to work within the EU.