Upwork home
Sign up
Secondary

Hire the best Application Security Freelancers in California

Check out Application Security Freelancers in California with the skills you need for your next job.
Get started
  • $90 hourly

    • 5.0/5
    • (18 jobs)
    I thrive on the cutting-edge of application cyber security! If you're in need of in-depth testing for your applications, professional reports on your vulnerability landscape for management, remediation support to mitigate vulnerabilities, or looking to enhance your existing security measures, you've found your ally. For over half a decade, I've been delivering exceptional application security services and have successfully safeguarded a multitude of Fortune 1000 companies from potential cyber threats. 🔒 My Expertise and Services 🎯 Black-Box Application Testing: Unearthing vulnerabilities through rigorous external testing without access to the internal source code or architecture. 🎯 White-Box Application Testing: Conducting an exhaustive analysis of your internal code, architecture, and design to identify weaknesses from an insider's viewpoint. 🎯 Static Application Security Testing (SAST): Evaluating your application from the inside out, at a non-running state, to identify potential vulnerabilities. 🎯 Dynamic Application Security Testing (DAST): Live testing of your application to uncover actual application behavior and pinpoint flaws. 🎯 Code Review: Carrying out an in-depth analysis of your application's codebase to ascertain its safety and efficiency. 🎯 AWS Cloud Config Review: Safeguarding your cloud infrastructure by scrutinizing your AWS configuration for potential risks and areas of improvement. 🎯 Professional Reports: Providing comprehensive, understandable, and actionable reports detailing your current security stance and steps to take to secure your applications. 🎯 Remediation Support: Not just identifying vulnerabilities, but also guiding you through the process of remediation to ensure a robust defense against cyber threats. ⭐️Enhancing and fortifying your existing application security. ⭐️Offering holistic application security solutions. ⭐️Providing dedicated application security consultation. ⭐️Securing multi-site, membership, and multilingual applications. ⭐️Protecting chatbots against malicious threat actors. ⭐️Shielding e-commerce platforms with robust security measures. ⭐️Designing user-friendly solutions without compromising on security. 🛡️ Why choose me as your defense partner? Assurance of Quality: As a full-time consultant, I prioritize delivering top-tier services. I ensure reliability, excellent communication, adherence to tight deadlines, and satisfaction from start to finish. My aim is to deliver excellent ROI for my clients through high-quality work. Passion for Security: I believe that applications should not only be functional and user-friendly but also secure. My commitment is to create a secure environment for your applications, strengthening the bond of trust between you and your users. Ready to fortify your applications against potential cyber threats? Let's ensure cyber-resilience together.
    Featured Skill Security
    DevOps
    Smart Contract Development
    Web App Penetration Testing
    Writing
    API
    Ethical Hacking
    IT Consultation
    Python
    Code Review
    JavaScript
    Information Security
    Application Security
  • $40 hourly

    • 4.9/5
    • (6 jobs)
    OSCP, eCPPTv2, eWPT Certified Penetration Tester :: Web, Mobile App and API Expert :: 99th Percentile at HackerOne :: Cybersecurity Vulnerability & Risk Assessment and Mitigation :: Python, Bash, Powershell, Ruby, C, Javascript Proficient :: Top 0.001% on TryHackMe :: Top 0.1% on HackTheBox I work with companies in order to protect their digital assets, finances, reputations and secure their customer's private data, by discovering vulnerabilities before malicious actors do. - Certified and licensed penetration tester with experience exploiting vulnerabilities across web, network, mobile apps, APIs, PCI DSS compliance tests and more. - Found vulnerabilities in companies like Red Bull, Indeed, Verizon, Seagate, Toyota, UnderArmour, Razer. Merck, Cedar-Sinai and more. - Author of "Enumerating Esoteric Attack Surfaces", the most comprehensive document on web reconnaisance for bug bounty hunters and web-focused penetration testers. - Coding proficiency with Python, Bash, Ruby, Powershell, PHP, Javascript, NodeJS, C if you need code for security automation, customizing existing code, network/AD administration, doing security code analysis (white-box testing) or anything else. - Contributor to hackingthe.cloud , an expansive guide to penetration testing against targets hosted on cloud platforms (AWS, GCP, Azure) - Illustration work sometimes - I've worked with Dungeons & Dragons, TMNT, Brutal Truth, Noisear and many more. Certifications - OSCP (Offensive Security Certified Professional) - eWPT (Web Penetration Tester) - eCPPTv2 (Certified Professional Penetration Tester v2) - CompTIA Pentest+ - Python Institute PCEP Mostly do offsec work but capable of most computer-related tasks, including the ones you need help with right now!! Thanks for reading
    Featured Skill Security
    Web App Penetration Testing
    Python
    Application Security
    Ethical Hacking
    Vulnerability Assessment
    Information Security
    Kali Linux
    Metasploit
    Bash Programming
    Tech & IT
    Security Engineering
    Cloud Security
    Penetration Testing
    Linux
    Security Testing
  • $151 hourly

    • 5.0/5
    • (3 jobs)
    - I am a Senior Security Engineer with expertise in application, product security, vulnerability management, and security automation. - I have over a decade of experience in software development processes and security engineering. - I hold a master’s degree in Cybersecurity from Georgia Institute of Technology. - I am proficient in Python, Node.js, and Bash. - Fluent in English, Russian, and Armenian.
    Featured Skill Security
    Bash Programming
    JavaScript
    Python Script
    NIST Cybersecurity Framework
    Information Security Audit
    Website Security
    Cloud Security
    Secure SDLC
    Security Engineering
    Application Security
    Threat Detection
    Vulnerability Assessment
    Information Security Threat Mitigation
    Information Security
    Compliance
  • $35 hourly

    • 0.0/5
    • (1 job)
    Hey there! I specialize in: - Python Development - Javascript Development - Fullstack Web Development - Security Engineering - API Development - Social Media Automation/Integration - 3D Web Design - Game Development (ThreeJS, Reality Engine, Enfusion Engine, UE4) - Geo-coding Thank you for your interest. -Chad
    Featured Skill Security
    Information Gathering
    Map Visualization
    Ethical Hacking
    C++
    GIS
    Twitter/X
    Game Development
    Discord
    Application Security
    Python
    Linux
    Bot Development
    Automation
    PHP
    JavaScript
  • $30 hourly

    • 4.6/5
    • (23 jobs)
    Greetings! I'm Aamir Tarik, your trusted cyber security expert. With more than 8 years of hands-on experience in the cyber security, I have experience and expertise to the forefront. 🛡 My Specializations 🛡 🔒 Information Security 🕵 Penetration Testing 🌐 Vulnerability Assessment 🔐 Identity and Access Management (IAM) 📊 Governance, Risk, and Compliance (GRC) ☁ Cloud Security 🏆 NIST Services 📊 SIEM 🔍 Security Operations 💼 What I Offer 💼 ✅ Cybersecurity Services: I provide end-to-end cybersecurity solutions, ensuring your digital assets are fortified against cyber threats. ✅ Penetration Testing: Uncover vulnerabilities before the bad actors do! ✅ Vulnerability Assessments: Identifying weak links in your digital armor. ✅ IAM Solutions: Safeguard your digital identities with precision. ✅ GRC Consulting: Navigate the maze of governance, risk, and compliance. ✅ Cloud Security: Lock down your cloud infrastructure. ✅ Security Operations: Always vigilant, always secure. ✅ Threat Mitigation: Swift and precise action against potential threats. ✅ Incident Response: When the worst happens, I'm here to minimize damage and restore normalcy. ✅ Security Consultation: Tailored advice to bolster your defenses. ⭐ Why Choose Me? - With years of experience in the field, I bring a wealth of knowledge to every project. - Professionalism: I take every project seriously and deliver results with the utmost professionalism. 💬 You're never in the dark. I keep you updated every step of the way. - Your satisfaction is my top priority. Your peace of mind, my mission. Connect with me today! 🌐 #CyberSecurity #InformationSecurity #Pentest #IAM #GRC #CloudSecurity #SecurityOps #NIST #GuardianOfYourData #Cybersecurity #EthicalHacking #InformationSecurity
    Featured Skill Security
    Linux System Administration
    SOC 2
    HIPAA
    Compliance
    Microsoft Azure
    Cloud Computing
    Tech & IT
    Internet Security
    Application Security
    Threat Detection
    Cloud Testing
    Cloud Security
    Network Security
    Penetration Testing
    Information Security
  • $150 hourly

    • 0.0/5
    • (0 jobs)
    Experienced leader with 20+ yrs in IT & Security. Been leading teams of technical individuals for 15 years the largest of which was 20. Demonstrated track record of success in a diverse range of industries including SaaS Ecommerce, Aviation Manufacturing and Healthtech/Healthcare. Primarily a people leader, passionate about building high-performing teams through empowerment and ownership, but also highly technical, with an up-to-date skill set in tool configuration and scripting for automation. Loves training and mentoring junior security engineers and analysts. Comfortable in global, matrixed enterprises, or rapid growth start-ups. Looking to consult on security programs on any of the following areas Cloud Security Enterprise Security Product, Application Security Pen Testing Identity & Access Mgmt Privacy, Data Loss Prevention Security M&A Integration Third Party Risk Security Automation ZeroTrust AWS, Azure, GCP
    Featured Skill Security
    Web Application Security
    Application Security
    Secure SDLC
    FedRAMP
    Cloud Security
    Cloud Engineering
    Business Continuity Plan
    Privacy
    GDPR
    PCI DSS
    ISO 27001
    Cybersecurity Monitoring
    NIST Cybersecurity Framework
    Cyber Threat Intelligence
    Cybersecurity Management
  • $70 hourly

    • 0.0/5
    • (0 jobs)
    Versatile technologist with expertise in web development, cybersecurity consultancy, and AI business integration. I craft robust web solutions, provide strategic cybersecurity advice to safeguard digital assets, and help businesses leverage AI to optimize operations and drive innovation. With a holistic understanding of modern tech landscapes, I deliver tailored solutions that address complex challenges and propel businesses forward in the digital age.
    Featured Skill Security
    Incident Response Plan
    Incident Management
    Anomaly Detection
    Threat Detection
    Splunk
    Microsoft Azure
    AI Security
    AI Development
    AI Chatbot
    AI Agent Development
    Artificial Intelligence
    Application Security
    Cybersecurity Tool
    Cybersecurity Monitoring
    Cybersecurity Management
  • $89 hourly

    • 0.0/5
    • (0 jobs)
    𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗶𝗻 𝗛𝗶𝗴𝗵-𝗦𝘁𝗮𝗸𝗲𝘀 𝗘𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁𝘀 I am a seasoned cybersecurity professional with over a decade of experience leading cybersecurity initiatives within the 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹, 𝗵𝗲𝗮𝗹𝘁𝗵𝗰𝗮𝗿𝗲, and 𝗨.𝗦. 𝗗𝗲𝗽𝗮𝗿𝘁𝗺𝗲𝗻𝘁 𝗼𝗳 𝗗𝗲𝗳𝗲𝗻𝘀𝗲 (𝗗𝗼𝗗) sectors. My focus has been on elevating startup companies to meet and exceed stringent regulatory and audit requirements, ensuring their growth and compliance are in sync: 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲: Expertly navigated and achieved flawless audits under key regulations including 𝗙𝗙𝗜𝗘𝗖, 𝗦𝗢𝗫, 𝗚𝗟𝗕𝗔, 𝗖𝗖𝗣𝗔, 𝗡𝗬𝗗𝗙𝗦, 𝗦𝗘𝗖, 𝗚𝗗𝗣𝗥, 𝗡𝗜𝗦𝗧, 𝗖𝗠𝗠𝗖, 𝗙𝗘𝗥𝗣𝗔, 𝗛𝗜𝗣𝗔𝗔, 𝗜𝗦𝗢, 𝗦𝗢𝗖, 𝗮𝗻𝗱 𝗣𝗖𝗜-𝗗𝗦𝗦. 𝗧𝗲𝗮𝗺 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽: Hired and led high-caliber teams to deliver outstanding audit results, showcasing exceptional leadership and team management skills. 𝗞𝗲𝘆 𝗔𝗿𝗲𝗮𝘀 𝗼𝗳 𝗘𝘅𝗽𝗲𝗿𝘁𝗶𝘀𝗲: 𝘚𝘦𝘤𝘶𝘳𝘪𝘯𝘨 𝘈𝘥𝘷𝘢𝘯𝘤𝘦𝘥 𝘛𝘦𝘤𝘩𝘯𝘰𝘭𝘰𝘨𝘪𝘦𝘴: Proficient in securing emerging technologies like artificial intelligence large language models, applications, APIs, development pipelines, data, operations, and infrastructure across on-premise, hybrid, and cloud environments. 𝘋𝘢𝘵𝘢 𝘚𝘦𝘤𝘶𝘳𝘪𝘵𝘺: Implemented robust security measures for data protection, ensuring privacy and compliance with laws like GDPR, CCPA, and HIPAA. 𝘔𝘦𝘵𝘳𝘪𝘤𝘴-𝘋𝘳𝘪𝘷𝘦𝘯 𝘚𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘗𝘳𝘰𝘨𝘳𝘢𝘮𝘴: Created and managed comprehensive, metrics-driven information security programs for organizations with up to 75,000 employees, handling teams of up to 50 cybersecurity professionals. 𝗦𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗜𝗺𝗽𝗮𝗰𝘁: 𝘙𝘦𝘨𝘶𝘭𝘢𝘵𝘰𝘳𝘺 𝘊𝘰𝘮𝘱𝘭𝘪𝘢𝘯𝘤𝘦: My teams have consistently achieved flawless examinations and audit results, demonstrating a deep understanding of regulatory landscapes. 𝘖𝘱𝘦𝘳𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘌𝘹𝘤𝘦𝘭𝘭𝘦𝘯𝘤𝘦: By focusing on metrics, I have established security programs that are not only compliant but also operationally effective, enhancing the overall security posture of the organizations I've served. My unique blend of hands-on technical expertise, strategic leadership, and a proven track record in regulated environments makes me an ideal candidate for organizations seeking a cybersecurity leader who can effectively manage risk, drive compliance, and propel growth.
    Featured Skill Security
    KPI Metric Development
    Business Continuity Planning
    Incident Response Plan
    Cybersecurity Management
    Vendor Management
    User Identity Management
    Machine Learning
    Fraud Mitigation
    CMMC
    NIST Cybersecurity Framework
    NIST SP 800-53
    Application Security
    Web Application Security
    Cloud Security
    Artificial Intelligence
  • $200 hourly

    • 0.0/5
    • (0 jobs)
    Security expert with 15 years of experience in cyber and information security, having built and led teams at Placer.ai, HomeBase, Stripe, LinkedIn, and the Israeli Defense Force. At Placer.ai and HomeBase, spearheaded strategic security initiatives, reporting directly to the CEO while developing and executing programs to protect critical infrastructure and sensitive data. At LinkedIn, built a brand-new security team from scratch, successfully reducing web scraping by 99%. At Stripe, launched and led the first-ever “purple team”, integrating both offensive and defensive security to strengthen the company's security posture. Core competencies include cybersecurity leadership, advisory, threat intelligence, ethical hacking, and team building. A results-driven leader who builds high-performing teams and delivers innovative security solutions to tackle real-world challenges.
    Featured Skill Security
    Governance, Risk & Compliance Software
    Risk Management
    Risk Assessment
    Security Infrastructure
    Application Security
    Security Engineering
    Threat Detection
    Cyber Threat Intelligence
    Information Security
  • $125 hourly

    • 0.0/5
    • (0 jobs)
    Experienced and versatile professional in application security, security architecture, hardware security, and penetration testing. Proven track record in establishing vulnerabilities triage frameworks and implementing security measures and policies at the enterprise level. Skilled in designing secure IT infrastructures and software pipelines with automated security controls. Proficient in embedded systems security testing, vulnerability discovery and remediation. DoD IAM/IAT 8570 Level III compliant, active DoD Secret security clearance.
    Featured Skill Security
    Information Security
    Nessus
    Cloud Security
    Firmware
    Wireshark
    OWASP
    NIST Cybersecurity Framework
    Governance, Risk & Compliance Software
    MQTT
    Kali Linux
    C
    C++
    Python
    Application Security
    Penetration Testing
  • $50 hourly

    • 0.0/5
    • (0 jobs)
    I am a dedicated Software QA Engineer with a robust background in software testing, information security, and system/network administration. I specialize in both manual and automated testing to ensure that software products not only meet but exceed quality and security standards. What I Bring to the Table: Automation & Efficiency: I design and implement automated testing frameworks that streamline your CI/CD pipelines and reduce the release times. Security-First Approach: From vulnerability scans to penetration tests, I proactively identify and mitigate security risks, enhancing overall system integrity. Problem-Solving Excellence: Whether troubleshooting complex bugs or optimizing test strategies, I deliver reliable solutions that keep projects on track. I'm passionate about continuous learning and innovation, always exploring the latest QA methodologies and technologies to drive improvements in software quality. Let’s connect if you’re looking for a collaborative partner who can help your team or startup achieve excellence in software testing and security.
    Featured Skill Security
    Test Results & Analysis
    Static Testing
    Vulnerability Assessment
    Test Case Design
    Web Application Security
    Application Security
    Agile Project Management
    Python
    API Testing
    Test Automation
    Manual Testing
    Software Testing
    Software QA
    Quality Assurance
  • $100 hourly

    • 0.0/5
    • (2 jobs)
    * 15+ years of experience building software. * Worked for AWS for 5+ years where I built, launched and operated an AWS security service (Amazon GuardDuty). * Expert at AWS security. In addition to building an AWS threat detection service, I led numerous AppSec reviews, compliance efforts, SecOps engagements. I also wrote and reviewed numerous threat models and worked closely with AppSec teams to mitigate the most subtle and intricate AWS attack vectors. I'm also certified by AWS in the security specialty. * Extensive experience with AWS DevOps best practices. At AWS, I built numerous microservices, with in-depth logging, monitoring and alerting. I wrote plenty of unit tests, integration tests, canary tests and runbooks, and built many CI/CD deployment pipelines with continuous monitoring and automatic rollbacks. * Extensive experience with building scalable microservices. At AWS, I built and operated event-driven services that autoscale to handle millions of events per minute and automatically release capacity when load subsides to avoid incurring unnecessary costs. * Experience with AWS cost optimization. At AWS, I helped reduce infrastructure spend, at times by more than $60K/month by leveraging serverless architectures and optimizing compute and network egress costs.
    Featured Skill Security
    Cloud Computing
    Information Security
    Security Analysis
    Application Security
    Agile Software Development
    Amazon Web Services
  • $75 hourly

    • 0.0/5
    • (0 jobs)
    I'm a Full-Stack Developer with over 7 years of experience building and optimizing web applications from the ground up. I specialize in crafting high-performance, user-friendly platforms for businesses, startups, and enterprises. 🔹 Expert in Frontend & Backend Development – Skilled in React, Next.js, TypeScript, Node.js, Express, and SQL/PostgreSQL 🔹 Scalable & Maintainable Code – Writing well-tested, efficient, and reusable code following industry best practices 🔹 Modern UI/UX Design – Experienced with Figma, Tailwind CSS, Material UI, and responsive design principles 🔹 API & Database Management – Strong experience with RESTful APIs, GraphQL, MongoDB, MySQL, and Redis 🔹 Cloud & DevOps – Familiar with AWS, Docker, Kubernetes, and CI/CD pipelines I've worked on enterprise applications, SaaS platforms, eMobility solutions, and HIPAA-compliant healthcare software, delivering secure, scalable, and performant applications. Whether it's optimizing an existing platform, developing a new feature, or leading a project from concept to deployment, I bring a problem-solving mindset and a commitment to quality. I prioritize clear and consistent communication throughout every stage of development to ensure that project goals are met and expectations are exceeded. Let’s build something amazing together! 🚀
    Featured Skill Security
    Application Security
    Application Optimization
    REST API
    Docker
    AWS Development
    Microservice
    MongoDB
    PostgreSQL
    GraphQL
    ExpressJS
    Redux
    TypeScript
    Node.js
    Next.js
    React
  • $75 hourly

    • 0.0/5
    • (0 jobs)
    Results-driven hands-on security leader with a proven record of scaling security teams at HelloSign, Dropbox, and Chime. Demonstrated expertise in driving secure innovation and product development within mobile-first, highly regulated and high growth startup environments. Deep proficiency in Application Security(Web & Mobile), Cloud Security (AWS) and GenAI Security. Co-author of Kickstart Your Security Engineering Career: A step by step guide to landing your first job in security engineering. Services provided : - GenAI security consulting - Application Security & Startup Security consulting - Mentorship and Coaching within Cybersecurity
    Featured Skill Security
    AI Security
    Application Security
    Secure SDLC
    Security Engineering
    Information Security
  • Want to browse more freelancers?
    Sign up

How hiring on Upwork works

1. Post a job

Tell us what you need. Provide as many details as possible, but don’t worry about getting it perfect.

2. Talent comes to you

Get qualified proposals within 24 hours, and meet the candidates you’re excited about. Hire as soon as you’re ready.

3. Collaborate easily

Use Upwork to chat or video call, share files, and track project progress right from the app.

4. Payment simplified

Receive invoices and make payments through Upwork. Only pay for work you authorize.

Trusted by 5M+ businesses