Mend (WhiteSource) Experts in Germany
in minutes from 15,000 CVs with the power of AIHire experts who secure open source usage with Mend, WhiteSource, and SCA workflows, tune policy rules, and keep dependency risk visible across builds and releases. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used Mend (WhiteSource)
Nils K.
Last position:
Vulnerability management and secure SDLC at DB InfraGO AG
- Successful implementation of vulnerability management with DefectDojo
- Consulting and implementation of technical and process-related aspects of vulnerability management with DefectDojo
- Consulting on the implementation of a secure software development lifecycle
- Skills: Gitlab, DefectDojo, Vulnerability Management, SCA, SAST, DAST, Python, Kubernetes, ArgoCD, Docker, AWS, Azure, Whitesource/Mend, Greenbone
Anton K.
Last position:
Head of Overall Technical Integration NSC / Hadoop Cloud Development at IABG
Head of overall technical integration NSC (National Secure Cloud, project with approx. 60 employees).
Technical integration of all subprojects into one product, definition of interfaces and basic components of a cloud including hardware, technical architecture of the IABG platform.
Development of a Cloud Management Platform (CMP) capable of creating private/mixed clouds of any complexity based on a textual description with one click or interactively.
CMP also includes the complete hardware management lifecycle.
Kubernetes, OpenStack and Hadoop are used as the foundation.
The management layer includes Harbor, Gitea, Longhorn, Keycloak, Rancher and Jenkins, which are configured automatically.
Private cloud can run any customer workloads, including a full Hadoop layer with HDFS, Spark, MapReduce, Mesos, HBase and around 20 additional ML/DL technologies.
Hadoop worker clusters can also be installed automatically without Kubernetes on bare metal or commodity hardware.
OpenStack with Nova, Neutron, Ironic, Swift, Cinder, Ceph.
Development of a Java application Rudi: SOAP, REST, containers, DB.
Technologies: Kubernetes (K3s, Rke2, Minikube, Harbor, Gitea, Jenkins, Longhorn, Keycloak, Rancher), OpenStack (Nova, Neutron, Keystone, Swift, Ceph, Cinder, Sahara, Magnum, Kayobe, Kolla, Bigrost, Ironic), Hadoop (HDFS, Ambari, Solr, Livy, Ranger, YARN, Tez, HBase, Kafka, Hive, Zookeeper, MapReduce, Spark, Oozie, Flink), virtualization (Kubernetes (K3S), VMware, Oracle), scripting (Ansible, Puppet, Juju, Shell, Groovy, Gradle, Maven).
Tan P.
Last position:
DevOps Engineer in the DevOps Team at Rise-World
- Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
- Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
- Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
- Use of Scrum and Kanban methods.
- Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
- Development of new plugins and add-ons needed on current infrastructure.
- Database support.
- Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
- Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
- Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
- Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
- Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
- Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
- Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
- Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
- Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
- Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
- Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
- Automated system provisioning and deployment using CloudFormation templates.
- Configuration of IAM roles, policies and permissions to ensure secure access control.
- Patch management, backup automation and disaster recovery setup on AWS infrastructure.
- Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
- Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
- Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
- Configuration of AWS CloudWatch to monitor application performance and system events.
- Planning and execution of migration of on-premises applications to AWS cloud platforms.
- Deployment of containerized applications using Docker and Kubernetes in AWS environments.
- Deployment of internal software packages between availability zones using AWS CodeDeploy.
- Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.
Jochen H.
Last position:
DevSecOps Expert at DB InfraGO
- Central build and delivery for 20+ applications, 100+ pipelines/day, 700+ GitLab projects
- Build pipelines for Go, Java and JavaScript
- Provisioning of 100+ components
- Quality assurance via GitLab Code Quality and SonarQube
- Checks for dependencies, licensing and vulnerabilities
- Release creation via Jira and ServiceNow
- SBOM, Supply Chain Security, distroless images
- PoC GitLab Runner: Nomad vs. Kubernetes
- Technologies: Artifactory, buildah, GitLab Premium, Go, Gradle, Jenkins, Mend, Podman
Michael Y.
Last position:
Senior Consultant, Senior DevOps Engineer at DB Regio AG
- Supported implementation and operation of a portal used online and offline in customer-facing vehicles
- Automated processes by introducing CI/CD pipelines
- Provided enablement and methodological guidance for adopting software engineering best practices
- System environment: NestJS, Node.js, npm, AWS, Docker, Docker Swarm, GitLab CI, WhiteSource, PostgreSQL, Prometheus, Grafana, OpenSearch, REST API
Ulrich C.
Last position:
Java Architect/Developer – Freelancer at DHL/DP – Rentenservice
Implementation of a Java service (daemon) as part of the automated processing of death notifications
Technologies used: Java17, SpringBoot, Hexagonal Architecture, REST API, Oracle, Maven, SonarQube, FindBugs, Checkstyle
Jamal B.
Last position:
Freelance Software Architect & Developer at IBM Deutschland GmbH / BWI GmbH
- Architecture, design and further development of a hybrid solution consisting of a Java backend with REST API and C# / WPF frontend
- Development of secure, distributed functions for classified message processing, categorization and encryption
- Integration of backend services with document management systems (DMS) for structured file storage
- Planning, setup and continuous optimization of Azure DevOps pipelines for automated deployment and quality assurance of distributed applications in a security-critical environment
- Technical coordination with Bundeswehr project managers and third-party providers of relevant software and interfaces, and documentation of the developed solutions
Discover over 15,000 top freelancers
Statistics of experts using Mend (WhiteSource)
Aggregated from the professional profiles of matched freelancers.
Experience
25 years
Position duration
2.1 years
Positions per freelancer
24
Top business areas
Information Technology, Product Development, Quality Assurance
Top industries
Information Technology, Banking and Finance, Transportation
Certification focus areas
Information Technology, Product Development, Business Intelligence
Bachelor's degree or higher
100%
Master's degree or higher
71%
Certifications per freelancer
4
Most common languages
German, English, Arabic
Speak two or more languages
100%
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using Mend (WhiteSource)
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Mend (WhiteSource) experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (86%)
- Transportation (86%)
- Government and Administration (71%)
- Education (43%)
- Manufacturing (43%)
- Retail (43%)
- Telecommunication (43%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Open source control
Mend, formerly WhiteSource, is used to track open source components, find known vulnerabilities, and apply policy rules before software ships. It helps teams see what is in a codebase, where risk enters, and what needs review.
Typical work
- Software composition analysis for applications and services
- Vulnerability triage and remediation guidance
- License policy checks and approval flows
- CI/CD integration and build gating
- Reporting for security and compliance reviews
Tooling fit
Strong specialists work with Mend across repositories, build pipelines, package managers, and security workflows. They know how to connect it to Maven, npm, NuGet, Gradle, and similar ecosystems without slowing delivery.
When to bring help
Companies usually bring in freelance expertise when dependency risk is growing, policy rules are inconsistent, or existing alerts are too noisy to act on. It is also useful during tool rollout, team handover, or audit preparation.
What strong experts do
A good Mend professional can separate real risk from low-priority noise, tune policies for how your teams ship, and create clear ownership for fixes. They also understand how WhiteSource reports map to developer workflows and security review needs.
Germany teams
In Germany, Mend work often sits between product teams, security, and compliance groups. Freelance specialists can support remote collaboration in English or work with local teams on-site when implementation, rollout, or training needs closer coordination.
Frequently asked questions
The facts hiring teams ask for most often when it comes to Mend (WhiteSource).
Mend (WhiteSource) is used to monitor open source dependencies, identify known vulnerabilities, and enforce license policy before code is released. It gives teams a clearer view of component risk across repositories, builds, and deployed services.
Yes. Mend is the current product name, and WhiteSource is the former name many teams still use in searches and internal discussions. A freelancer who knows both terms can usually move faster during setup and audits.
Bring in a Mend specialist when dependency alerts are piling up, policy rules need cleanup, or the tool is being connected to CI/CD for the first time. It is also helpful when security and development teams need a shared process for triage and remediation.
A strong Mend professional usually understands software composition analysis, dependency management, and secure build pipelines. Familiarity with package ecosystems such as Maven, npm, NuGet, and Gradle is often important, along with practical experience in security review workflows.
Mend is often compared with other software composition analysis tools that scan dependencies and surface license or vulnerability risk. The best fit depends on your build stack, policy needs, and how much control you want over approvals, automation, and reporting.
For a clean rollout, a Mend freelancer should understand your source control, build system, release flow, and security ownership model. They do not need to know your product domain in depth, but they do need enough context to tune alerts and avoid workflow friction.
Most Mend work can be done remotely, especially configuration, policy tuning, and advisory work. On-site support in Germany can help when teams need workshops, stakeholder alignment, or hands-on rollout across several groups.
Look for someone who can explain why a finding matters, not just how to click through the tool. A good Mend expert produces clear policy rules, sensible exception handling, and a process your team can maintain after the engagement ends.
The average hourly rate of freelancers in Germany who have used Mend (WhiteSource) in their recent projects is 98 €, which corresponds to a daily rate of about 784 € based on an 8-hour working day.
Of the freelancers in Germany who have used Mend (WhiteSource) in their recent projects, 100% hold at least a Bachelor's degree and 71% hold at least a Master's degree.
On average, freelancers in Germany who have used Mend (WhiteSource) in their recent projects have 25 years of professional experience, with a single engagement typically lasting around 2.1 years.
The most common languages among freelancers in Germany who have used Mend (WhiteSource) in their recent projects are German (100%), English (100%), and Arabic (29%).
The most common industries among freelancers in Germany who have used Mend (WhiteSource) in their recent projects are Information Technology (100%), Banking and Finance (86%), and Transportation (86%).
The most common business areas among freelancers in Germany who have used Mend (WhiteSource) in their recent projects are Information Technology (100%), Product Development (100%), and Quality Assurance (86%).
Main locations of FRATCH Experts, who have recently used Mend (WhiteSource)
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
