Application Security Contract Jobs in Cardiff
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Contract Application Security Specialist – Outside IR35
Posted 1 day ago by PSB Recruitment
Role OverviewYou’ll work closely with engineers and leadership to drive secure SDLC, lead threat modelling, assess vulne...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Gloucester, England, United Kingdom
Cloud & Application Security Engineer
Posted 7 days ago by RM IT Professional Resources AG
Cloud & Application Security Engineer Position bei unserem Kunden aus der Telco Branche nähe Ittigen zu besetzen.Ihr...
- Rate Not specified
- Category Outside
- Work type Hybrid
- Location Ittigen, Switzerland
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
Application Security Engineer - Threat & Vulnerability (AI Focus)
Posted 1 week ago by Red Global
RED Global is looking for an experienced Application Security Engineer to help secure AI-powered applications, LLMs and...
- Rate Not specified
- Category Outside
- Work type Remote
- Location United States of America, North America
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Information Security Analyst (App Security & AI Security)
Posted 2 weeks ago by BlueScope Buildings North America, Inc.
Company DescriptionFor over 100 years, BlueScope continues to build on our reputation of quality brands and products, le...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote or Ohio
Salesforce Application Security Consultant (Pharma Domain & SFDC Life science re...
Posted 2 weeks ago by SumasEdge Corporation
Key ResponsibilitiesProvide business information security guidance throughout the application development and deployment...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
About Our Application Security Contract Roles in Cardiff
What does a application security contractor do?
Application Security contractors are engaged to identify, assess, and help remediate security vulnerabilities within software applications across the development lifecycle. The work spans a range of activities including secure code review, penetration testing of web and mobile applications, threat modelling, security architecture review, and the integration of security practices into DevSecOps pipelines. Application Security contractors are brought in when organisations need specialist security expertise that their development teams do not hold, when a specific application requires a security assessment ahead of launch, or when a security remediation programme requires dedicated resource.
Technical skills in Application Security contracting are deep and specialised. Contractors need strong knowledge of the OWASP Top 10 and broader application vulnerability classes, hands-on experience with penetration testing tools such as Burp Suite, and the ability to conduct both manual and automated security assessments of web applications, APIs, and mobile applications. Experience reviewing code for security issues across languages such as Java, Python, JavaScript, or .NET is a common requirement. For DevSecOps-focused roles, knowledge of integrating security tooling into CI/CD pipelines using tools such as SonarQube, Snyk, or Checkmarx is increasingly required. Relevant certifications including OSCP, CEH, or GWAPT are well regarded and frequently listed as requirements.
What is the market like for application security contractors?
Application Security contracting is a high-demand specialist market, driven by the increasing pace of software delivery and the growing recognition that security must be embedded in development processes rather than applied retrospectively. The shift towards DevSecOps across technology organisations is creating sustained demand for contractors who can work within agile engineering teams as well as conducting standalone assessments. Financial services, fintech, and e-commerce organisations are among the most active buyers, though demand is growing across all sectors that handle sensitive data or operate regulated digital services. Supply of experienced Application Security contractors remains limited relative to demand, supporting strong rate levels.
What is the contracting market like in Cardiff?
Devolved government makes Cardiff the administrative centre of Wales and a consistent source of programme management, policy, and digital delivery contracts. Insurance and financial services employers, several of whom have established significant operational centres in the city, provide a steady flow of IT, data, and change roles. An emerging technology sector around the city centre and Cardiff Gate business park has added software development and cloud engineering to the local mix, though volumes remain modest compared to larger English cities. The Welsh Government's investment in digital capability is a distinctive feature of the Cardiff market, creating opportunities in govtech and public service transformation that are structured and funded differently from equivalent programmes in England.
How much do application security contractors usually earn in Cardiff?
Contract rates for application security roles in Cardiff typically range from £495 to £855 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement.
How many application security vacancies in Cardiff are there on Quality Contracts?
Over the past twelve months, we have tracked over 150 application security contract roles across the site, with Cardiff demonstrating consistent opportunities. Data reviewed up to September 2026.