Hiring now
Security consultant (freelance)
We build websites, client portals, dashboards and AI systems for service businesses in the UK and US. AI already runs a security review on every build. We need an expert to check those reports, test further and sign off the builds that hold sensitive data.
- Team
- Engineering
- Type
- Freelance, paid per sign-off
- Location
- Remote, UK or US hours
- Pay
- Fixed fee per build sign-off, plus a day rate for quarterly reviews, agreed on experience
What you will do
- Check the AI security report on each build that needs sign-off, and find what it missed
- Test those builds yourself: access control, sign-in, data exposure and the OWASP Top 10
- Test AI features for prompt injection and data leaks
- Sign off each build with a short report a business owner can follow
- Review our own website, dashboard and client portal once a quarter
- Help with client security questionnaires, and lead the response if anything goes wrong
What we are looking for
Must have
- 3+ years testing web applications
- OSCP, CREST, OSWE or CISSP, or an equally strong track record
- Comfortable reading TypeScript, Next.js and Supabase
- Clear written reports, done within 5 working days
Nice to have
- Healthcare or NHS data experience
- HIPAA knowledge for US clients
- Can run Cyber Essentials assessments
- Experience testing AI features
Working with us
How it works
- Freelance and remote, alongside your other clients
- Fixed scope per sign-off, usually 1 to 2 days
- About 2 to 3 days a quarter on our own systems
- One point of contact: the founder
What you get
- Steady repeat work that grows with us
- Clear scopes and quick payment
- One modern stack, so reviews get faster
- A say in our build standards
How hiring works
- 1
Apply with your CV and an example report (redacted is fine)
- 2
30-minute intro call
- 3
Short paid trial on one of our own systems
- 4
Agree rates, sign the NDA, start on the next build