← Overview: Public sector & government
Public sector role profile
Hire an Application Security Engineer for Government & Public Sector
Secure web, APIs and line-of-business systems — from threat modelling to release gates
We run these mandates through IT recruitment with IT executive search depth, experienced IT recruiters and structured technology recruitment delivery.
Digital government services and OZG-aligned portals expand attack surface; AppSec engineers coach delivery teams with standards, reviews and automation.
OWASP ASVS and OWASP Top 10 guide practice — but must align with procurement accessibility and EU interoperability expectations.
Vendor-delivered systems need strong contract security requirements; NIS2 stresses supply-chain and vulnerability management.
We recruit engineers with public-sector or regulated software delivery experience.
Role profile
Purpose
Embed security into applications and interfaces — measurable and auditable.
Typical accountability
SAST/DAST/SCA integration, secure reviews, vulnerability lifecycle, architecture alignment.
Example KPIs
- • time to remediate critical findings
- • share of releases with security gate
- • reduction of recurring OWASP-class risks
Responsibilities in detail
1. Secure SDLC
Requirements in contracts; security user stories; OWASP SAMM-style maturity.
2. Testing & reviews
Manual reviews, toolchain orchestration, pentest remediation.
3. API & integration
EU interoperability interfaces; OAuth/token hardening.
4. Supplier cooperation
Evidence from integrators; alignment with digital administration programmes.
Interfaces
Internal
- engineering
- CISO
- ISO
- test management
External
- integrators
- pentest vendors
Without contract security requirements, AppSec stays reactive.
Qualifications
Professional
- web/API security
- SAST/DAST
- threat modelling
Personal
- patience with policy units
- teaching
- quality focus
Compensation notes
Challenges
Vendor dependency; threat pressure on web/APIs.
- • Technical debt in legacy systems.
- • Limited security time in projects.
- • Assurance evidence for auditors.
More role profiles
See the public sector & government recruiting overview — or the broader cybersecurity recruiting hub . Related public-sector roles:
- • Hire a Security Architect for Government & Public Sector
- • Hire a Cloud Security Engineer for Government & Public Sector
- • Hire a Penetration Test Coordinator for Government & Public Sector
- • Hire an Information Security Officer for Government & Public Sector
We also fill roles in industrial IT recruitment — including OT/ICS security and manufacturing IT.
Hire a government AppSec engineer
We tune the profile to SDLC maturity, stack and supplier model.
Practitioners — not slide-only profiles.