Immediate contract with a global business, focused on secure SDLC, threat modelling, and vulnerability management across complex regulated products. Strong long-term potential for contractors who like hands-on technical ownership.
The role
We're hiring an experienced Product Security / AppSec contractor to support secure product development across new and existing software-led products.
You'll work closely with engineering, quality, and security teams to improve secure-by-design practices, reduce risk, and support remediation across the development lifecycle.
Key responsibilities
Drive secure development practices across the SDLC
Lead threat modelling, risk assessments, and vulnerability management
Review software and product designs from a security perspective
Support engineering teams with secure coding and remediation guidance
Use static and dynamic analysis tools to identify and reduce risk
Contribute to security documentation and incident support
Skills and experience
Experience in product security, application security, or secure software engineering
Strong knowledge of secure SDLC, threat modelling, and vulnerability management
Experience with security testing, code analysis, or vulnerability scanning tools
Knowledge of OWASP, NIST, or similar secure coding frameworks
Understanding of encryption, PKI, networking, and common security threats
Comfortable working in a regulated or quality-driven environment
Nice to have: embedded or IoT security experience, Wi-Fi security knowledge, or security certifications.
Contract details
Hourly rate: Negotiable depending on experience
Contract length: 6-month initial contract
Extension: Likely to extend
Working pattern: Hybrid - 2 days per week onsite
Start date: 01/07
Why apply
Hands-on technical role with real ownership
Good scope across security engineering, risk, and remediation
Complex regulated environment that keeps the work interesting
Strong extension potential for the right contractor
Please click to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement.
To find out more about Real, please visit
Real Staffing, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC(phone number removed) England and Wales