Security Auditing Jobs

Necesito optimizar dos páginas web con el objetivo de mejorar su posicionamiento en Google y aumentar el tráfico orgánico. Una de las webs es estática y la otra está desarrollada en WordPress con Elementor Pro. Esta última sufrió un ataque recientemente, por lo que también necesito revisar su seguridad, detectar posibles vulnerabilidades y asegurar que todo esté funcionando correctamente. El trabajo incluiría: * Revisión y optimización SEO de ambas webs. * Mejora de estructura, títulos, metadescripciones y contenido. * Revisión de velocidad y rendimiento. * Configuración y optimización básica para Google. * Revisión de seguridad de la web en WordPress. * Comproba...

Cerco un esperto in sicurezza informatica con comprovata esperienza nella gestione e protezione di account Google e Apple. Ho bisogno di: • Analisi approfondita dei miei account per identificare app, autorizzazioni sospette e possibili vulnerabilità • Segnalazione dettagliata di eventuali anomalie o rischi rilevati • Breve formazione personalizzata sulle migliori pratiche di sicurezza per mantenere protetti i miei account in futuro L’esperto ideale ha già gestito casi simili, conosce strumenti di auditing per Google e Apple e sa spiegare in modo semplice le procedure di sicurezza.

Objectives • Obtain an independent, manual penetration test to validate the security of the Selcomm platform and the isolation of customer environments. • Produce a formal report (with a redactable version) to evidence security assurance to enterprise customers. Environment (context) Solution: Selcomm billing platform — dedicated (non-cloud) software; virtualised Windows + Linux/Informix Hosting: Production: NTT data centre. Access/interfaces: Per-customer dedicated VLANs; site-to-site VPN; SSL/TLS and sFTP. No wireless Target list / scope (please price individually and combined) • A — External infrastructure: internet-facing VPN endpoint(s), any public web/portal, mail gateway. • B — Web application: authenticated & unauthenticated test of the Se...

I’m looking for a fresh, expert set of eyes on my already-launched SaaS. The priority is a thorough check of both Security and Performance. I’ll share the exact tooling, checklists, and testing methodologies I currently use so you can step straight into the review process without guessing which scanners, profilers, or penetration-testing suites to run. Here’s how I see the engagement unfolding: you explore every security layer—from authentication flow to data storage—and benchmark performance under realistic load. When you’re done, I’d like a concise report that highlights the key findings, high-impact risks, and the quick wins that will give me the most immediate improvement. No need for a long-form narrative or slide deck; a sharply written summ...

Summary # Migration & Security Handover Brief **Prepared for:** MetaNet --- ## 1. Summary of what I need I want to migrate my web estate from Exoscale to MetaNet **and** perform a security clean-up at the same time, following a parting of ways with the previous contractor who built and had administrative access to these systems. I am not technical, so I need this handled end-to-end, but with **ownership of all accounts remaining under my control** (see section 3). Please treat this as: (a) a **clean migration** of 17 sites, and (b) a **security hardening / access reset** so no prior access survives the move. --- ## 2. The estate - **2 dynamic sites:** RedMontMed () and RedMontActive () — near-identical builds. **No traditional database**; their search is powered **live by ...

I’m building a single cloud solution that lets U.S.-based and foreign entities seamlessly calculate, file, and strategize their taxes. The first release must satisfy the needs of large corporations—complex, multi-state operations with consolidated returns—while remaining expandable to individuals and small businesses later on. Scope of work • Develop calculation engines for income, property, and sales tax that stay current with IRS and state rules. • Integrate e-file workflows that generate ready-to-submit federal and state forms. • Add real-time advisory features: scenario modeling, credit optimization, and audit-trail reporting. • Provide role-based dashboards, multi-entity management, and SOC-2-ready security. Preferred tech (open to sugge...

I’m ready to invest time in practical, one-on-one guidance that demystifies how attacks really unfold and, more importantly, how to spot and stop them. My background is purely beginner, yet my responsibilities will soon include supervising an IT/security team, so I need a clear, experience-based understanding of the attacker’s mindset. Focus areas • Network security: packet sniffing, basic exploitation, lateral movement, and network-level hardening. • Social engineering: phishing set-ups, pretexting scenarios, and the defense playbook that counters them. Learning format We will work inside pre-configured virtual machines you supply, where you walk me through the build-break-fix cycle: launching a representative attack, detecting it with common tools (Wireshark...

I need a VPN setup to enable secure remote work for my employees. The VPN should be both Site-to-Site and Remote Access. Requirements: - Connects securely: Desktops, Laptops, and Servers - Standard encryption Ideal Skills and Experience: - Proven VPN setup experience - Familiarity with various encryption protocols - Ability to configure for multiple device connectivity

My e-commerce site is currently under an active DDoS attack. No protective measures are in place yet, and service interruptions are starting to hurt sales and SEO. I have full administrative access to the Nginx server, so any configuration changes or security software installs can be done immediately. I need an experienced DDoS mitigation specialist to: • Restore site availability quickly by filtering malicious traffic and keeping legitimate customers online • Harden the existing Nginx stack with rate-limiting, connection throttling, and optimized firewall rules • Configure and fine-tune an external protection layer (e.g., Cloudflare, AWS Shield, or comparable scrubbing/WAF service) • Deliver a brief post-incident report outlining what was done, residual risks,...

I want to deepen my practical understanding of cloud-focused cybersecurity and I’m looking for an experienced professional who can design and deliver a concise, hands-on training program. The emphasis is squarely on cloud security—identity and access management, data protection, threat detection, compliance mapping, and incident response workflows in modern cloud environments. Because I may shift between AWS, Azure, and Google Cloud on different projects, the material should either be provider-agnostic or flexible enough to map easily to the major platforms. Live walk-throughs, lab exercises I can replicate on my own account, and clear explanations of real-world attack paths are key. In your proposal, highlight the cloud security training or mentoring experience you alrea...

I need expertise in unauthorized control access of telecom towers for network manipulation. Key Requirements: - Skills in penetration testing and vulnerability assessment - Experience with telecom infrastructure - Proficiency in radio frequency technologies - Knowledge of security protocols and bypass techniques Please provide a detailed plan and previous experience in similar projects.

Title: Web application Penetration Testing & Security Vulnerability Assessment Category: Cybersecurity / Web Application Security Project Overview: We are looking for an experienced security professional to conduct a penetration test and standard security scan on our web application. The goal is to identify vulnerabilities, misconfigurations, and potential attack vectors before they can be exploited, and to receive a clear, actionable report of findings. Scope of Work: Full black-box / grey-box penetration testing of the website (login areas, forms, APIs, user roles, and admin panels where applicable) Standard automated vulnerability scanning (OWASP Top 10 coverage: SQL injection, XSS, CSRF, broken authentication, insecure direct object references, security misconfigurations, e...

Je souhaite renforcer la sécurité informatique de mon infrastructure en me concentrant spécifiquement sur la sécurité des systèmes. Ma priorité est la mise en place d’une solution complète de Gestion des accès et des identités (IAM). Objectif Je veux m’assurer que seuls les utilisateurs autorisés accèdent aux ressources critiques, avec des droits exactement adaptés à leurs rôles. Ce que j’attends • Analyse rapide de l’environnement actuel (serveurs Windows et/ou Linux, applications internes, annuaire existant). • Conception d’une architecture IAM adaptée : rôles, groupes, politiques de mot de passe, segmentation des privil&eg...

I an experienced penetration tester to web application. The primary objective is to identify vulnerabilities, with particular attention paid to three high-risk zones: • Authentication and authorization logic • Database exposure paths (SQL injection, insecure queries, weak configuration) • Input validation and handling that could open the door to XSS, command injection, or similar issues I will provide you with staging and live URLs, test accounts, and any required API keys. Please treat the exercise as a real-world black/grey-box engagement—no source code will be shared. You may use industry-standard tooling such as Burp Suite, OWASP ZAP, sqlmap, or custom scripts as you see fit, as long as methodology aligns with the OWASP Testing Guide.

Necesito un ingeniero senior que lidere la puesta en marcha de nuestro nuevo Centro de Operaciones y Seguridad. El foco principal es la implementación completa del SOC, por lo que espero que llegues con sólida experiencia integrando firewalls de nueva generación, sistemas IDS/IPS y potentes herramientas de monitoreo de red. Partirás definiendo la arquitectura – lógica y física – del centro, para después instalar y afinar cada componente hasta que todo funcione 24/7. Con el SIEM operativo, quiero dashboards y reportes claros que muestren los KPIs que acordemos. También tendrás que redactar las políticas y procedimientos de seguridad e impartir la capacitación necesaria para que mi equipo pueda operar y...

Limozly is a multi-tenant B2B SaaS platform for limousine and black car operators. It is built, deployed, and substantially complete: seven portals, roughly 650 routes, a working booking and dispatch engine, CRM, pricing, settlements, and a public API. We are looking for one experienced developer to take it from substantially complete to verified and launched. This is a finishing and hardening role, not a rebuild. Someone who enjoys greenfield architecture will be bored. Someone who takes satisfaction in closing the last fifteen percent properly will do well. What you would be working on Stack. 14 (App Router), TypeScript, Tailwind, Prisma, Supabase (Postgres, Auth, Storage), Stripe Connect, SendGrid, Twilio, Google Maps Platform, Vercel. Domain. Each customer is a limousine operator runn...

I need a thorough, external-facing penetration test focused on my network infrastructure. The environment is small—fewer than 50 devices—and the critical assets are the servers that host internal services and data. No web or mobile application testing is required; this engagement is strictly about identifying and safely exploiting weaknesses on the network layer. Here is what I expect from you: • A concise test plan outlining scope, methodology, and tooling before any scanning begins. • Active reconnaissance and exploitation against the server segment, using industry-standard tools such as Nmap, Nessus/OpenVAS, Metasploit or similar. • A clear, prioritized vulnerability report that includes technical details, business impact, and actionable remediation step...

My on-premise accounting application now needs to live on Microsoft Azure. The database will stay where it is for the moment, so the immediate focus is lifting the application layer, cloud-ready refactoring if required, and wiring everything up so users experience the same—or better—reliability as today. What I need you to handle end-to-end: • Detailed migration plan that maps current application components to Azure services such as App Service, Azure Functions, or containers—whichever best sustains reliability. • Execution of the move with minimal downtime, including configuration of staging slots and rollback strategy. • Post-deployment hardening: regular security audits scheduled through Azure Security Center (encryption at rest or MFA can remain o...