Senior Web Developer / Application Security Specialist for Independent Code Review

Senior Web Developer / Application Security Specialist for Independent Code Review We are looking for an experienced freelancer to conduct an independent code quality and security review of Itineramente’s user-facing web app. Itineramente helps people choose places and routes based on their accessibility needs. The app’s code has recently been rewritten, and we want an independent assessment of its quality, maintainability, and security before further development and release. Scope of work • Review application architecture, code structure, readability, and maintainability. • Identify bugs, unnecessary duplication, and weaknesses in error handling. • Review authentication, session management, authorization, and isolation of user data. • Assess the APIs and backend access controls used by the app. • Check input validation, dependencies, secrets handling, and relevant configuration. • Assess existing tests and identify significant coverage gaps. • Perform manual testing in a staging environment, supported by automated tools. We will share the technology stack, repository structure, and main user flows during the initial discussion so you can propose a realistic scope and quote. Expected deliverables An actionable report including: • Findings ranked by severity and remediation priority. • Relevant code references. • Supporting evidence or reproduction steps, where applicable. • Recommended fixes. • A clear statement of what was reviewed, limitations, and exclusions. Please include a final walkthrough call. Quote implementation of fixes and a follow-up retest separately. Required experience • Senior-level experience developing and reviewing web applications. • Demonstrable application security and secure code review experience. • Strong understanding of API security, authentication, and authorization. • Ability to explain findings clearly to a product founder with a technical background. • Familiarity with OWASP ASVS is a plus. To apply, please provide: 1. Relevant projects and technology stacks you have reviewed. 2. Your proposed approach, including which checks you perform manually. 3. An anonymized sample report, if available. 4. Your availability, estimated effort, and pricing. 5. Any information you need to define the scope and provide a fixed-price quote. This is a remote, one-off review with potential follow-up work. Initial repository access will be read-only, with testing carried out in a dedicated staging environment using synthetic data. A confidentiality agreement will be required. The initial engagement covers assessment and reporting. Any code changes will be agreed separately.