Security Consultant Cloud & Application (Part-time)

Project overview

For a renowned company in the cultural industry, we are seeking an experienced Security Architect/Consultant (m/f/d) for a freelance service contract as soon as possible. Our client operates heavily frequented web portals and in-house developed specialist applications for high-volume platform processes and international participants.

In the course of the gradual migration and externalization of server infrastructures into modern cloud environments (including IONOS), the server-side architectures, communication interfaces, and attack vectors are to be thoroughly examined, hardened, and future-proofed as part of a security audit.

Framework Data:

Skills

What we offer

Exciting Environment: Independent consulting on business-critical specialist applications with high data and user volume. Partnership-based Support: Dedicated contacts at Randstad throughout the entire project.

• Start asap
• Duration until 30.06.2027
• Utilization: 3-5 PT/month
• 100% remote
• Architecture Review & Security Audit: Support and review of server-side architectures, cloud infrastructures, and commissioning processes to identify potential vulnerabilities
• Interface & API Security: Analysis and securing of REST APIs, data interfaces, and endpoints between internal and externally connected systems
• Edge, DDoS & Bot Protection: Conceptual consulting for defense against automated access, load peaks, and bot attacks (including in conjunction with WAF and edge solutions such as Myra)
• Protection of Critical Data Transmissions: Consulting on secure transmission of large data volumes and management of digital keys and encryption mechanisms
• Recommendations for Action & Best Practices: Development of concrete measures and consultation of the internal technical team during implementation
• Experience: Several years of practice as a Cyber Security Architect, Application Security Consultant, or Cloud Security Specialist
• Sound knowledge in server hardening and securing Linux-based hosting environments (e.g., IONOS Cloud, Web/App Servers)
• Solid understanding of hybrid interfaces to the internal Microsoft/Windows infrastructure (permission models, authentication, connection to Active Directory / Entra ID)
• Application & API Security: Experience with threat modeling, interface hardening, and web security (e.g., OWASP standards, OAuth2/OIDC)
• DDoS & Web Application Protection: Familiarity with upstream protection solutions (e.g., Myra Security, Cloudflare or similar)
• Cryptography & Key Management: Understanding of secure upload/download pipelines and digital key management is an advantage
• Language Skills: Business fluent German, spoken and written

Project details

100% Remote (nationwide).

Long-term, phased support (initially 3-6 months with extension option). Utilization: Approx. 3-5 person-days (PT) per month (flexible scheduling, ideal as a parallel mandate).

• Start: 09.11.2026
• Duration: unbefristet
• Remote: remote
• Location: 10178 Berlin, DE
• Languages: German