Incident Response Jobs

I need a seasoned OT-security specialist to run an end-to-end security assessment across several plant-floor environments and to deliver a clear, actionable report that highlights every weakness and maps out the fixes. Scope in detail • Honeywell control systems – 2 units • Yokogawa control systems – 2 units • Honeywell I/O – 100 sensors • Yokogawa I/O – 100 sensors • Rockwell PLCs – 100 sensors • Rice Lake Weigh-Bridge – 100 sensors The assessment must dig into network segmentation, firmware, access controls, physical interfaces and protocol exposure, using recognised OT frameworks such as IEC 62443 and NIST CSF where relevant. Feel free to bring in tools like Nessus, Wireshark, SHODAN, SecurityCenter, or ...

I am rolling out FortiNAC across a 40-user environment and need an experienced hand to configure it so we immediately raise our security posture. The main objective is crystal clear: enhance overall network security. Here is what I need achieved: • Build and refine access-control policies that automatically grant or deny connectivity based on user role and device posture. • Segment the network so that computers and laptops, mobile devices, and a growing mix of IoT equipment each sit in the right security zone with least-privilege access. • Complete the full FortiNAC setup: appliance or VM provisioning, switch/WLAN integration, 802.1X configuration, guest onboarding, and testing of enforcement actions. • Provide concise documentation and a quick-reference guide...

Our production systems run on a dedicated PostgreSQL database server that needs ongoing, professional management to keep performance high and downtime at zero. I need an experienced PostgreSQL administrator to take charge of routine upkeep, monitoring, and rapid incident response so the team can stay focused on product development. Scope of work You’ll handle version updates, configure and verify automated backups, watch key metrics, fine-tune queries and indexes when bottlenecks appear, and strengthen security by keeping roles, permissions, and network rules tight. The server is Linux-based and accessed via SSH; fluency with psql, pgAdmin, and common monitoring stacks (Prometheus, Grafana, or similar) will make the job straightforward. Deliverables • Initial health audit ...

I need a thorough security assessment of both our public-facing web applications and the underlying network infrastructure. For the web layer, your testing must zero-in on two critical areas—Authentication & Authorization and Input Validation—so we can be confident that user identities are protected and no injection or validation bypass is possible. On the network side, I’m looking for the classic internal and external penetration workflow: reconnaissance, vulnerability discovery, exploitation, and clear remediation guidance. Deliverables • Executive summary that highlights overall posture and business risk • Technical report detailing: – Findings for Authentication & Authorization – Findings for Input Validation – Networ...

Areas of Expertise / Training Scope Information Security Fundamentals Governance, Risk & Compliance (GRC) IT General Controls (ITGC) Information Security Risk Management Third-Party Risk Management (TPRM) Information Security Audits (Internal & Compliance) ISO/IEC 27001:2022 Implementation & Internal Auditing SOC 2 Type I & Type II Compliance NIST Cybersecurity Framework & NIST SP 800-53/171 Overview SEBI CSCRF & Indian Financial Regulatory Compliance Security Policies, Standards & Procedures Risk Assessment & Risk Register Management Vulnerability Assessment & Remediation Tracking Identity & Access Management (IAM) & User Access Reviews Change Management, Patch Management & Backup Controls Business Continuity & Disaster Recovery (BCP/DR)...

More details: Can you clarify the type of work you need done? Retrieve or access specific data What type of data are you trying to retrieve or access? Emails What email service provider does the account use? Gmail

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

I need a CISA-, DISA- or CERT-In-qualified professional to steer our young insurance brokerage through every stage of the IRDA Cyber Security Audit required for account renewal. At present we have virtually no formal artefacts, so you will be building the full documentation suite from the ground up. Core items include our cybersecurity policies, incident-response plans, access-control procedures and any additional processes the audit checklist demands. You’ll be free to introduce industry-standard frameworks and tooling provided they satisfy IRDA guidelines. Once the documents are in place I also want your guidance during the actual compliance cycle—answering auditor queries, closing gaps, and keeping the material evergreen for future renewals. If you already work with an aut...

Especialista en Ciberseguridad / Forense Digital – Detección y Análisis de Malware / Spyware en Windows (Remoto) Descripción: Busco un profesional con experiencia comprobable en análisis de malware, respuesta a incidentes o informática forense para auditar un equipo con sistema operativo Windows ante sospechas de software espía (spyware) o persistencia no autorizada. Objetivos del servicio: Realizar un triaje inicial y análisis de persistencia (tareas programadas, servicios, entradas de registro, extensiones). Analizar procesos en memoria y tráfico de red saliente para descartar conexiones C2 o exfiltración de datos. Identificar y aislar artefactos maliciosos si los hubiera (análisis estático/din&aacut...

Senior .NET Developer (Backend + Azure DevOps) Location: Chandigarh / Mohali (Hybrid/Remote) | Type: Full-time | Experience: 6+ Years The Role We are looking for a Senior Backend Engineer to join our core team and take ownership of a live, multi-portal web application. This isn't a spec-driven, cog-in-a-machine role. You will be stepping in to audit an existing ASP.NET Core codebase, stabilize the production environment, and lead the architecture for new enterprise features. If you enjoy the detective work of untangling unfamiliar code and the satisfaction of building scalable Azure infrastructure from scratch, this is for you. What You'll Do Codebase Rescue & Audit: Dive into an existing ASP.NET Core application to identify security gaps, structural flaws, and architectu...

I need a comprehensive vulnerability assessment and penetration test performed on my production web application. Because I can grant limited internal knowledge—such as architecture diagrams, sample credentials, and API documentation—I would like the engagement run as a grey box exercise rather than pure black-box reconnaissance. 1 External VA/PT - 4 public IPv4/region - Full manual validation through WAF/security stack 2 Internal VA/PT - 10 segments / 250 live IPs - Credentialed + non-credentialed testing 3 Web Application — Virtual Trust - 1 app / 20 modules / 10 roles - Grey/white box + targeted production validation 4 Web Application — CrimsonLogic - 1 app / 20 modules / 10 roles 5 API Security 50 endpoints base - Full OWASP API Top 10 + business logic 7 Confi...