Outside IR35 Application Security Contract Jobs
Create a free account to access remote working contract opportunities outside the UK
Sign Up.svg?format=webp)
||application Security Engineer||please Go Through The Full Jd Before Applying||...
Posted 3 days ago by Shift Code Analytics
Role OverviewHi,Hope you are doing wellI have an urgent opening of Application Security Engineer at remote role100% Remo...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote
Application Security Technical Lead (Remote)
Posted 3 days ago by Kforce Technology Staffing
RESPONSIBILITIESKforce's client is seeking an Application Security Remediation Technical Lead to provide technical leade...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote or Draper, Utah
Application Security Engineer Canada Remote - 3 months contract
Posted 7 days ago by Lorven Technologies, Inc.
Job description:: What they'll do:Remediate application security findings hands-on: read the code, write the fix, open t...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Security Architect – Zero Trust / Application Access
Posted 1 week ago by 3Core Systems, Inc
About the RoleOur client is building a secure-access strategy for internal business applications that have never been ex...
- Rate Not specified
- Category Outside
- Work type Hybrid
- Location Remote or Hybrid in Deerfield Beach, Florida
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Web Application (External Network Security Specialist)
Posted 1 week ago by Elegant Enterprise Wide Solutions
Primary responsibilitiesConduct external reconnaissance and penetration testing of 10 internet-facing IP addresses/servi...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote or Hybrid in Pennsylvania
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Application Security Program Manager/Cybersecurity Program Manager – SSDLC-Remot...
Posted 2 weeks ago by HPTech Inc.
Top Skills8 to 10 years of experience in leadership roles and cybersecurity program management.Experience improving appl...
- Rate Not specified
- Category Outside
- Work type Remote
- Location Remote
Create a free account to access remote working contract opportunities outside the UK
Sign Up
akamai sme / application security architect
Posted 2 weeks ago by Randstand (USA)
Job SummaryWe are seeking an Akamai Subject Matter Expert (SME) / Security Architect to oversee application security tra...
- Rate Not specified
- Category Outside
- Work type Remote
- Location nashville, tennessee (remote)
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
About Our Outside IR35 Application Security Contract Roles
What does a application security contractor do?
Application Security contractors are engaged to identify, assess, and help remediate security vulnerabilities within software applications across the development lifecycle. The work spans a range of activities including secure code review, penetration testing of web and mobile applications, threat modelling, security architecture review, and the integration of security practices into DevSecOps pipelines. Application Security contractors are brought in when organisations need specialist security expertise that their development teams do not hold, when a specific application requires a security assessment ahead of launch, or when a security remediation programme requires dedicated resource.
Technical skills in Application Security contracting are deep and specialised. Contractors need strong knowledge of the OWASP Top 10 and broader application vulnerability classes, hands-on experience with penetration testing tools such as Burp Suite, and the ability to conduct both manual and automated security assessments of web applications, APIs, and mobile applications. Experience reviewing code for security issues across languages such as Java, Python, JavaScript, or .NET is a common requirement. For DevSecOps-focused roles, knowledge of integrating security tooling into CI/CD pipelines using tools such as SonarQube, Snyk, or Checkmarx is increasingly required. Relevant certifications including OSCP, CEH, or GWAPT are well regarded and frequently listed as requirements.
What is the market like for application security contractors?
Application Security contracting is a high-demand specialist market, driven by the increasing pace of software delivery and the growing recognition that security must be embedded in development processes rather than applied retrospectively. The shift towards DevSecOps across technology organisations is creating sustained demand for contractors who can work within agile engineering teams as well as conducting standalone assessments. Financial services, fintech, and e-commerce organisations are among the most active buyers, though demand is growing across all sectors that handle sensitive data or operate regulated digital services. Supply of experienced Application Security contractors remains limited relative to demand, supporting strong rate levels.
What does Outside IR35 mean?
IR35 is UK tax legislation that determines whether a contractor is genuinely self-employed or working in a manner that resembles employment. When a contract is classified as outside IR35, the engagement is treated as a business-to-business arrangement. The contractor operates through their own limited company, invoices for services, and manages their own tax affairs including corporation tax, self-assessment, and VAT where applicable.
Outside IR35 engagements are assessed against three key factors: the degree of control the client exercises over how the work is delivered, whether the contractor has a genuine right to provide a substitute, and whether there is a mutuality of obligation between the parties. Contracts that demonstrate contractor autonomy, project-based delivery, and the absence of ongoing employment obligations are more likely to sit outside IR35. Since April 2021, responsibility for making this determination sits with the end client for medium and large private sector organisations.
On QualityContracts.co.uk, approximately 28% of roles with a stated IR35 status are classified as outside IR35. The proportion varies by sector and role type, with some disciplines seeing a significantly higher or lower share of outside IR35 opportunities. Each listing on this page displays its IR35 status where provided by the hiring organisation.
What application security roles are usually Outside IR35?
Around 20% of application security contracts with a stated IR35 status sit outside. Penetration testing, security code review, and vulnerability assessment engagements with defined scope and deliverables are the most likely to carry outside IR35 status. Specialist security consultancies and organisations commissioning periodic security assessments offer the clearest outside IR35 route. Contractors offering CREST or CHECK-accredited testing services are particularly well positioned for project-based outside IR35 application security work.
How much do application security contractors usually earn when working Outside IR35?
Contract rates for application security roles typically range from £550 to £950 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement. Rates shown are for outside IR35 engagements and reflect the gross day rate paid to the contractor's limited company before any personal tax obligations.
How many Outside IR35 application security vacancies are there on Quality Contracts?
Over the past twelve months, we have tracked over 150 application security contract roles across the site. Of the roles currently listed on our site, around one in four are Outside IR35. Data reviewed up to October 2026.