freiberufler Freelance Security Engineer — Post-Quantum & Applied Cryptography auf freelance.de

Freelance Security Engineer — Post-Quantum & Applied Cryptography

zuletzt online vor wenigen Tagen
  • 90€/Stunde
  • 41460 Neuss
  • Europa
  • pt  |  en
  • 15.09.2026

Kurzvorstellung

Post-quantum and applied cryptography: migration planning, hybrid ML-KEM/ML-DSA implementation and FIPS conformance review. Also smart-contract and DeFi security reviews, and AI-agent security. Remote across Europe, English and Portuguese.

Geschäftsdaten

Qualifikationen

  • Blockchain (allg.)
  • Cyber Security Engineer
  • Incident-Management
  • ISO / IEC 27001
  • IT Sicherheit (allg.)1 J.
  • Kryptographie2 J.
  • PKI
  • Python
  • Smart Contract
  • Transport Layer Security

Projekt‐ & Berufserfahrung

Security Engineer (Festanstellung)
Flow Traders, Amsterdam
2/2026 – offen (9 Monate)
Finanzdienstleister
Tätigkeitszeitraum

2/2026 – offen

Tätigkeitsbeschreibung

Security reviews of DEX and DeFi protocols before trading capital is exposed: 30+ protocol onboarding evaluations covering smart-contract review, security analysis and risk scoring for trading desks.

Weekly on-call incident handler, triaging and closing roughly 200 security incidents per month using SOAR and detection tooling.

Evaluated and integrated on-chain monitoring, anomaly-detection and smart-contract auditing tooling; hardened smart-contract and node deployments together with trading and engineering teams; set the security policy for internal AI tooling.

Technologies: threat detection, incident response, SOAR, on-chain monitoring, smart-contract auditing, DeFi security, application security, Python.

Eingesetzte Qualifikationen

IT Sicherheit (allg.), Kryptographie, Incident-Management

Cryptography and Quantum Systems Engineer
QbitShield, Remote
8/2025 – 12/2025 (5 Monate)
IT & Entwicklung
Tätigkeitszeitraum

8/2025 – 12/2025

Tätigkeitsbeschreibung

Implemented hybrid classical-quantum cryptographic protocols combining quantum random number generator (QRNG) entropy with NIST post-quantum algorithms (ML-KEM, ML-DSA).

Validated entropy quality against NIST SP 800-22 and SP 800-90B using TestU01 and Dieharder, and built an HMAC-DRBG profiler aligned with NIST SP 800-90A for cryptographic key generation.

Remote contract engagement.

Technologies: Python, NIST SP 800-22 / 800-90A / 800-90B validation, TestU01, Dieharder, QRNG, ML-KEM, ML-DSA, Git.

Eingesetzte Qualifikationen

IT Sicherheit (allg.), Kryptographie, Python

Post-Quantum Cryptography Engineer
pi-lar GmbH, Bonn
9/2024 – 7/2025 (11 Monate)
IT & Entwicklung
Tätigkeitszeitraum

9/2024 – 7/2025

Tätigkeitsbeschreibung

Implemented a hybrid classical/post-quantum key exchange for the Neuropil protocol framework in C using liboqs, integrating ML-KEM (FIPS 203) and ML-DSA (FIPS 204) while preserving backward compatibility with existing X25519/Ed25519 nodes.

Benchmarked classical against hybrid builds on multi-node test clusters: quantified join-handshake overhead, isolated lattice-operation cost to under 1 ms and confirmed steady-state throughput was unaffected.

Verified byte-level conformance with FIPS 203/204 against the published test vectors and delivered the C implementation together with validation reports. The code is merged and running in pi-lar's production product.

Technologies: C, liboqs, ML-KEM, ML-DSA, hybrid protocol integration, performance benchmarking, Git.

Eingesetzte Qualifikationen

C (Programmiersprache), Kryptographie

Ausbildung

Cybersecurity
M.Sc.
University of Coimbra
2025
Coimbra
Informatics Engineering
B.Sc.
University of Coimbra
2022
Coimbra

Über mich

I am a security engineer specialised in post-quantum and applied cryptography. I design, implement and review cryptography that has to run in production and survive an audit.

Post-quantum migration and implementation
Cryptographic inventory and crypto bill of materials (CBOM), dependency mapping, and a migration plan against the EU 2026 inventory deadline and BSI's 2030 target for critical infrastructure. Hybrid protocol design, implementation and review: ML-KEM (FIPS 203) and ML-DSA (FIPS 204), TLS 1.3 hybrid key exchange, constant-time review and conformance testing against the published test vectors. For the Neuropil protocol framework at pi-lar GmbH I implemented hybrid classical/post-quantum key exchange while preserving backward compatibility with classical nodes, benchmarked it on multi-node clusters and verified byte-level FIPS conformance. That code is merged and running in production.

Applied cryptography and security engineering
Key and certificate lifecycle, PKI, entropy and RNG validation against the NIST SP 800-90 series, and review of security-critical source code.

Smart contract and DeFi security
At a proprietary trading firm I review DEX and DeFi protocols before trading capital is exposed — over 30 protocol evaluations covering source-code review, attack-surface analysis and risk scoring. I also handle security incidents week to week using SOAR and detection tooling.

AI agent security and governance
Tamper-evident audit trails, policy-as-code enforcement and multi-party approval, with controls mapped to the EU AI Act, DORA, ISO 42001 and SOC 2. I wrote the tamper-evident logging guidance in the OWASP AI Exchange and maintain Asqav, an open-source signed audit-trail layer for AI agents.

Most useful to banks, insurers, trading firms, telecoms and crypto companies. Many consultants can write the migration roadmap; I can also implement and review the cryptography it finds.

MSc Cybersecurity, University of Coimbra. Working languages: English and Portuguese.

Weitere Kenntnisse

Post-Quantum Cryptography, Applied Cryptography, ML-KEM, ML-DSA, FIPS 203, FIPS 204, liboqs, Cryptographic Protocol Design, TLS, PKI, Smart Contract Security, Solidity, DeFi Security, Blockchain Security, Application Security, Incident Response, Threat Detection, SIEM, SOAR, AI Security, LLM Security, AI Governance, EU AI Act, DORA, NIS2, ISO 27001, ISO 42001, SOC 2, OWASP, C, Python, TypeScript, Node.js, Docker, CI/CD, DevSecOps, Git

Persönliche Daten

Sprache
  • Englisch (Fließend)
  • Portugiesisch (Muttersprache)
Reisebereitschaft
Europa
Arbeitserlaubnis
  • Europäische Union
Home-Office
bevorzugt
Profilaufrufe
76
Berufserfahrung
3 Jahre (seit 10/2023)

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden