Engineering

Cybersecurity Expert — Low-Code & Agentic Systems (all genders)

FreelanceRemoteLow-code & agentic systems

Apply Now Opens the email app All Open PositionsGoes to: Join Us — Talents

[01]The Role

What This Seat Is For.

Keep our low-code automations and multi-agent systems secure by design: reviews, hardening, and guardrails for the platforms that run client mandates — the overtools suite, CRM integrations, and the AI gateway. A freelance mandate with real attack surface and real say.

[02]What You’ll Own

Your Scope From Week One.

Run security reviews of n8n/Make workflows, integrations, and webhooksHarden the AI gateway: authentication, secrets handling, rate limitsThreat-model agentic systems — prompt injection, tool abuse, data exfiltrationKeep data flows GDPR-tight across CRM, enrichment, and AI APIsBuild incident readiness: logging, alerting, and runbooks that fit a lean team

[03]What You Bring

The Profile That Wins This Seat.

Tick what’s true. Be honest — we will be.

Proven application / cloud security background — Reviews and hardening you can point to. API and webhook security, hands-on — OAuth, tokens, signing, replay protection. LLM security literacy — Prompt injection, jailbreaks, agent tool abuse — and their mitigations. Pragmatism for a lean stack — Controls that fit a small team, not enterprise theater. Clear reporting — Findings that engineers fix, not shelfware PDFs.

0 / 5Your call — the boxes are waiting. Opens the email app

Preferred, not required

The OWASP LLM Top 10 in practice. Not as a reading list.GDPR beyond the checklist. You have argued a data flow with a data protection officer.Cloud and identity hardening. Secrets, scopes, and least privilege that survives a deadline.A CVE, write-up or talk we can read. Public work counts.

[04]The Practical Details

What This Actually Looks Like.

Start By agreement

Engagement Part time, Freelance / contractor, Temporary

Where and when Remote, hours you set

Languages English for the work, German for documentation an advantage

Travel None expected

You work with The two engineers who built what you are reviewing

[05]The First Quarter

Your First 90 Days.

By day 30

Review the live n8n and Make workflows and rank what you find by blast radius, not by score.

By day 60

Harden the AI gateway: authentication, secrets, rate limits, and a prompt-injection threat model you can defend.

By day 90

Leave behind runbooks and alerting that a four-person team can operate on a Friday evening.

A freelance mandate with real attack surface, real say, and no security theatre. What we offer, and how we hire ➞