Security Auditing Jobs

I have a live Shopify app that I’m about to push into wider promotion, and before I do that I want a fresh set of expert eyes on it. Your task is to go through the app exactly as a merchant would, stress-test every corner of it, and hand back a clear, well-structured report that tells me what works, what doesn’t, and how the overall experience feels. Scope of the test • User interface and usability – every screen, button, and message should be intuitive and visually consistent. • Performance and speed – note any sluggish moments, long load times, or stalls. • Security and data protection – confirm sensitive actions (log-in, data saves, API calls) behave safely and expose nothing. Key workflows to cover • Account management: instal...

I need a VPN setup to enable secure remote work for my employees. The VPN should be both Site-to-Site and Remote Access. Requirements: - Connects securely: Desktops, Laptops, and Servers - Standard encryption Ideal Skills and Experience: - Proven VPN setup experience - Familiarity with various encryption protocols - Ability to configure for multiple device connectivity

I want to deepen my practical understanding of cloud-focused cybersecurity and I’m looking for an experienced professional who can design and deliver a concise, hands-on training program. The emphasis is squarely on cloud security—identity and access management, data protection, threat detection, compliance mapping, and incident response workflows in modern cloud environments. Because I may shift between AWS, Azure, and Google Cloud on different projects, the material should either be provider-agnostic or flexible enough to map easily to the major platforms. Live walk-throughs, lab exercises I can replicate on my own account, and clear explanations of real-world attack paths are key. In your proposal, highlight the cloud security training or mentoring experience you alrea...

I need expertise in unauthorized control access of telecom towers for network manipulation. Key Requirements: - Skills in penetration testing and vulnerability assessment - Experience with telecom infrastructure - Proficiency in radio frequency technologies - Knowledge of security protocols and bypass techniques Please provide a detailed plan and previous experience in similar projects.

Title: Web application Penetration Testing & Security Vulnerability Assessment Category: Cybersecurity / Web Application Security Project Overview: We are looking for an experienced security professional to conduct a penetration test and standard security scan on our web application. The goal is to identify vulnerabilities, misconfigurations, and potential attack vectors before they can be exploited, and to receive a clear, actionable report of findings. Scope of Work: Full black-box / grey-box penetration testing of the website (login areas, forms, APIs, user roles, and admin panels where applicable) Standard automated vulnerability scanning (OWASP Top 10 coverage: SQL injection, XSS, CSRF, broken authentication, insecure direct object references, security misconfigurations, e...

Je souhaite renforcer la sécurité informatique de mon infrastructure en me concentrant spécifiquement sur la sécurité des systèmes. Ma priorité est la mise en place d’une solution complète de Gestion des accès et des identités (IAM). Objectif Je veux m’assurer que seuls les utilisateurs autorisés accèdent aux ressources critiques, avec des droits exactement adaptés à leurs rôles. Ce que j’attends • Analyse rapide de l’environnement actuel (serveurs Windows et/ou Linux, applications internes, annuaire existant). • Conception d’une architecture IAM adaptée : rôles, groupes, politiques de mot de passe, segmentation des privil&eg...

I an experienced penetration tester to web application. The primary objective is to identify vulnerabilities, with particular attention paid to three high-risk zones: • Authentication and authorization logic • Database exposure paths (SQL injection, insecure queries, weak configuration) • Input validation and handling that could open the door to XSS, command injection, or similar issues I will provide you with staging and live URLs, test accounts, and any required API keys. Please treat the exercise as a real-world black/grey-box engagement—no source code will be shared. You may use industry-standard tooling such as Burp Suite, OWASP ZAP, sqlmap, or custom scripts as you see fit, as long as methodology aligns with the OWASP Testing Guide.

Necesito un ingeniero senior que lidere la puesta en marcha de nuestro nuevo Centro de Operaciones y Seguridad. El foco principal es la implementación completa del SOC, por lo que espero que llegues con sólida experiencia integrando firewalls de nueva generación, sistemas IDS/IPS y potentes herramientas de monitoreo de red. Partirás definiendo la arquitectura – lógica y física – del centro, para después instalar y afinar cada componente hasta que todo funcione 24/7. Con el SIEM operativo, quiero dashboards y reportes claros que muestren los KPIs que acordemos. También tendrás que redactar las políticas y procedimientos de seguridad e impartir la capacitación necesaria para que mi equipo pueda operar y...

Limozly is a multi-tenant B2B SaaS platform for limousine and black car operators. It is built, deployed, and substantially complete: seven portals, roughly 650 routes, a working booking and dispatch engine, CRM, pricing, settlements, and a public API. We are looking for one experienced developer to take it from substantially complete to verified and launched. This is a finishing and hardening role, not a rebuild. Someone who enjoys greenfield architecture will be bored. Someone who takes satisfaction in closing the last fifteen percent properly will do well. What you would be working on Stack. 14 (App Router), TypeScript, Tailwind, Prisma, Supabase (Postgres, Auth, Storage), Stripe Connect, SendGrid, Twilio, Google Maps Platform, Vercel. Domain. Each customer is a limousine operator runn...

I need a thorough, external-facing penetration test focused on my network infrastructure. The environment is small—fewer than 50 devices—and the critical assets are the servers that host internal services and data. No web or mobile application testing is required; this engagement is strictly about identifying and safely exploiting weaknesses on the network layer. Here is what I expect from you: • A concise test plan outlining scope, methodology, and tooling before any scanning begins. • Active reconnaissance and exploitation against the server segment, using industry-standard tools such as Nmap, Nessus/OpenVAS, Metasploit or similar. • A clear, prioritized vulnerability report that includes technical details, business impact, and actionable remediation step...

My on-premise accounting application now needs to live on Microsoft Azure. The database will stay where it is for the moment, so the immediate focus is lifting the application layer, cloud-ready refactoring if required, and wiring everything up so users experience the same—or better—reliability as today. What I need you to handle end-to-end: • Detailed migration plan that maps current application components to Azure services such as App Service, Azure Functions, or containers—whichever best sustains reliability. • Execution of the move with minimal downtime, including configuration of staging slots and rollback strategy. • Post-deployment hardening: regular security audits scheduled through Azure Security Center (encryption at rest or MFA can remain o...

I need a reliable WordPress specialist to keep my site healthy and running smoothly on a quarterly basis. The immediate focus is on routine security updates and staying on top of general plugin updates, with special attention to the existing security plugin and an image-optimization tool that helps keep media lean. Two issues require prompt resolution: 1. Slow-loading pages that are hurting user experience and SEO. 2. Intermittent error messages that appear on a few key pages. Your work will involve: • Applying the latest WordPress core, theme, and plugin updates without breaking existing functionality. • Auditing and tightening security settings, particularly within the current security plugin. • Optimizing performance—caching, image compression, or other best-p...

I want a teacher for me who can teach me ethical hacking from start to end . Daily 1 hrs class via the online mode . Most importantly at the cheapest price from start to end . I will participate in ethical hacking competitions so you have to train me for that . If he will be an indian then perfect it would be best for me

I need an experienced security professional to bring our organisation fully in line with GDPR, HIPAA and CCPA. My immediate priorities are strengthening data-encryption practices, tightening access controls and formalising an incident-response process. The end goal is clear: demonstrable, audit-ready compliance. Current status • A mix of on-prem and cloud workloads (M365, AWS) with basic policies in place. • No formal gap analysis, limited documentation, and no rehearsed breach-response run-book. What I’m expecting from you 1. Conduct a comprehensive compliance gap assessment across our systems and third-party services. 2. Design and, where possible, implement technical controls for encryption at rest/in transit, role-based access and log monitoring. 3. Draft or...

Buscamos un especialista/consultor freelance en Ciberseguridad y Pentesting para colaborar en la ejecución de auditorías técnicas de seguridad dirigidas a Pymes (entornos web, redes e infraestructura Cloud). Nosotros gestionamos la relación comercial y la integración de cumplimiento normativo (LOPD/ISO27001) para nuestros clientes en España. Buscamos un profesional técnico que ejecute las pruebas en modalidad Marca Blanca (White-Label) bajo la marca de nuestra consultora (Vortex Omnia Group). RESPONSABILIDADES DEL FREELANCE: 1. Ejecución de escaneos de vulnerabilidades perimetrales y pruebas de intrusión (Pentesting Web/Red). 2. Redacción de informe técnico detallado (vulnerabilidades encontradas, criticida...

I’m looking for a cybersecurity specialist who can zero-in on data protection, specifically the customer information our business holds. My main priorities are: • Assessing how and where customer data is collected, stored, and transmitted across our systems • Identifying current vulnerabilities or gaps in encryption, access control, and retention practices • Recommending and helping implement concrete safeguards—whether that means stronger database encryption, revised access policies, or automated monitoring and alerting • Delivering clear, step-by-step documentation so my team can keep everything compliant after your engagement ends Please outline the tools and frameworks you typically rely on (e.g., ISO 27001 controls, NIST CSF, OWASP, Splunk, SIEM...

I need an experienced ethical hacker to conduct thorough penetration testing on my mobile applications. The sole focus of this engagement is to simulate real-world attacks, uncover security flaws, and document practical remediation steps. Scope of work • Plan and execute a full penetration test tailored to mobile environments—covering authentication, data storage, API calls, transport security, reverse engineering, and runtime manipulation. • Use industry-standard methodologies such as the OWASP Mobile Security Testing Guide and well-known tools (e.g., Burp Suite, Frida, MobSF, Wireshark, Kali). • Provide a clear, reproducible report that ranks vulnerabilities by severity, explains exploitation paths, and recommends fixes that developers can act on immediately...

My site is already on Cloudflare, but the security section is still at its default settings. The immediate priority is to turn on and correctly tune Cloudflare’s DDoS protection so it works 24/7 without affecting legitimate traffic. Key tasks I need completed: • Enable and verify Cloudflare’s DDoS protection on the zone • Set sensible sensitivity levels and rate-limiting thresholds for both Layer 3/4 and Layer 7 attacks • Create at least one custom Firewall Rule to block obvious malicious patterns while allowing normal visitors and known search-engine bots • Produce a brief hand-off document outlining the settings changed, why they were chosen, and how to monitor the dashboard going forward I already have full access to the Cloudflare dashboard...

I need a thorough network-level penetration test carried out entirely with Kali Linux. The goal is to identify and validate every exploitable weakness on my production subnet, show me clear proof-of-concept for each finding, and give me a remediation-focused report I can hand straight to my infrastructure team. You will work from your own Kali box—feel free to lean on Nmap, Metasploit, Wireshark, or any other native toolkit you trust—as long as the methods remain ethical and fully documented. Scope is limited to the IP range I supply once we start; no social-engineering or physical testing is required. Deliverables • Executive summary written for non-technical leadership • Detailed technical report listing vulnerabilities, risk ratings, step-by-step reproduction, ...

I am looking for an experienced ethical hacker or cybersecurity professional to conduct a comprehensive security assessment of my mobile devices, Laptops, online accounts. I have reason to believe that my phone and company data may be monitored or accessed without my authorization. I need an expert who can investigate professionally, identify any potential security risks, and recommend remediation steps. Scope of Work The selected professional should be able to: Perform a complete mobile device security assessment (Android or iPhone). Check for spyware, malware, stalkerware, or unauthorized monitoring software. Review device settings, permissions, and installed applications. Analyze network traffic for suspicious activity. Check for unauthorized logins or compromised credentials. Ident...

I'm seeking detailed insights into social engineering tactics used by hackers. The information will be used to enhance personal cybersecurity measures. Key Areas of Interest: - Phishing schemes and variations - Pretexting and impersonation techniques - Baiting and quid pro quo methods - Tailgating and physical security breaches - Psychological manipulation strategies Ideal Skills and Experience: - Background in cybersecurity - Expertise in social engineering - Ability to provide real-world examples and scenarios - Strong analytical and research skills - Clear and concise communication

A recent Wordfence scan flagged a card-skimming script on my WooCommerce store, and I have not touched anything yet. I need a specialist who can dive in immediately, locate every trace of the malicious code, and clean it out without disrupting live sales. Please investigate the entire stack—WordPress core, themes, child themes, all plugins, and the database—then eliminate the skimmer, patch any other vulnerabilities you uncover, and harden the site so this does not recur. Once finished, I expect the next Wordfence scan (or a tool of your choice) to come back completely clean and for test purchases to process safely. Deliverables: • Full removal of the card-skimming script. • Clean security report confirming no malware remains. • Brief walkthrough of what wa...

I need a seasoned technical-SEO professional to run a full audit of my website and carry out the resulting fixes. The audit must dig into four specific areas—performance, user experience, security and overall SEO health—so I understand exactly what is slowing the site down, where visitors may be dropping off, and which security gaps or search-visibility weaknesses still exist. Once the report is complete, I want you to implement (or clearly document, if server access is restricted) every high-impact recommendation so the site loads faster, feels smoother to users, passes standard security checks and earns higher visibility in Google. My ultimate goals are straightforward: climb the rankings, pull in more qualified traffic and strengthen online visibility across the board. Del...

I am building the first release of Luminous Cleaning Singapore’s digital platform and need a complete, production-ready solution that covers both the customer experience and my internal administration. Scope of this phase • A native-like customer app for both iOS and Android that lets users register or log in, choose a cleaning service, schedule a time, pay online, receive push notifications, view past bookings, and leave ratings or reviews. • A web-based admin dashboard where my team can see every order in real time, edit schedules, update prices or service details, and respond to customer feedback. Key requirements • Solid, secure user authentication with social login as a plus. • Payment gateway integration (credit/debit cards at minimum, with the arc...