Security Auditing Jobs

I have built two independent FinTech solutions that I plan to submit to the Bank of Jamaica’s regulatory Sandbox. Before I take that step, I need a fresh set of expert eyes to validate two things: 1. The overall security posture of each application. 2. Their alignment with Jamaican and international regulations covering Data Protection & Privacy, Anti-Money Laundering (AML), and Electronic Payments & Transactions. You will receive architecture diagrams, user flows, API documentation and direct access to a staging environment for both apps. I am specifically interested in whether my encryption strategy, authentication logic and general vulnerability surface meet current industry best practices (OWASP Top 10, ISO 27001, PCI DSS, etc.). On the compliance side, I want a clear...

Necesito asistencia de un hacker ético para retirar por completo un software MDM modificado de un teléfono Xiaomi. El dispositivo corre HyperOS 3.0.301.0 y actualmente sufre seguimiento y monitoreo no deseado. Lo que busco: • Análisis del firmware y detección de todos los módulos MDM instalados. • Eliminación segura sin dejar rastros que reactiven el control. • Preservar datos personales, cuentas y funcionalidad de MIUI/HyperOS. • Guía paso a paso para que pueda repetir el proceso en caso de futuras actualizaciones. • Comprobación final: el teléfono no debe comunicarse con servidores MDM ni mostrar certificados, perfiles ni apps ocultas asociadas. Trabajo remoto. Puedo proporcionar acceso ...

Mi móvil Xiaomi presenta signos claros de compromiso. Un informe de seguridad externo confirmó que hay acceso remoto activo, software modificado y un perfil MDM que otorga control total del dispositivo. Busco a un hacker ético que pueda: • Examinar a fondo el firmware, las apps instaladas y los perfiles de administración (MDM) para localizar cualquier puerta trasera. • Eliminar o neutralizar el software modificado y deshabilitar el control MDM sin perder datos críticos. • Cerrarme el acceso remoto y asegurar la integridad del sistema, incluyendo bootloader, recovery y capas de MIUI. • Entregarme un informe claro con hallazgos, pasos realizados y recomendaciones para mantener el teléfono protegido. Trabajo 1...

My company site is currently hosted on GoDaddy, but I’m ready to rethink that setup. The immediate goal is to keep the site online, fast, and secure while we decide whether a migration to a more robust hosting environment makes sense. Here’s what I need handled on an ongoing basis: • Routine monitoring so the site is always up, backed up, and running the latest security patches. • Regular content refreshes on a predefined schedule—primarily product pages and service pages, plus swapping in fresh logos, customer logos, and updated calendar items. • Graphic tweaks when we roll out new branding elements. • Hosting review and, if approved, a seamless move from GoDaddy to the new provider with zero noticeable downtime. Success looks like cons...

My company site is currently hosted on GoDaddy, but I’m ready to rethink that setup. The immediate goal is to keep the site online, fast, and secure while we decide whether a migration to a more robust hosting environment makes sense. Here’s what I need handled on an ongoing basis: • Routine monitoring so the site is always up, backed up, and running the latest security patches. • Regular content refreshes on a predefined schedule—primarily product pages and service pages, plus swapping in fresh logos, customer logos, and updated calendar items. • Graphic tweaks when we roll out new branding elements. • Hosting review and, if approved, a seamless move from GoDaddy to the new provider with zero noticeable downtime. Success looks like cons...

I want to learn how to fix a real infected website. You will need to provide the infected website. Controlled environment is ok but continued work may be given if you provide real infected websites over a controlled environment. PHP based systems like laravel and Wordpress preferred. In your response give an example of an infected website you fixed, explain the situation. I only need an hour of your time for now but if I like your work I may give you more work. Preference will be given to real natural responses to this ad over AI responses.

Looking for an experienced Full-Stack Developer to help finalize an almost-completed web application and make it fully launch-ready and deployment-ready. The project is already largely built and functional. I am not looking for someone to start from scratch. The main work will involve reviewing the existing codebase, checking that all frontend and backend components are properly wired together, fixing any broken flows, completing unfinished features, improving security, testing the application thoroughly, and preparing it for production launch. The developer should be comfortable with: * Reviewing an existing full-stack codebase * Checking frontend-to-backend wiring * Verifying API integrations * Fixing incomplete or broken functionality * Completing remaining features * Improving auth...

Job Title: Urgent Android Phone Hacking, Screen Mirroring & Possible Phone Cloning Investigation My personal mobile phone may have been compromised. I need an experienced mobile cybersecurity / digital forensics expert to investigate my device for unauthorized access. I am particularly concerned about: - Unauthorized screen mirroring or screen sharing - Remote access/control of my phone - Possible phone cloning or duplication of my mobile activity - Spyware or stalkerware - Malware and suspicious applications - Unauthorized access to my Google account, WhatsApp, email, or other applications - Suspicious device-admin/accessibility permissions - Unknown VPNs, certificates, profiles, or configuration changes - Unauthorized SIM/eSIM or account-related activity What I need Please condu...

Senior Technical Auditor for I am looking for an experienced senior full-stack technical auditor to conduct an independent review of an existing bilingual Saudi offers and loyalty platform called Chance Plus. The platform is currently live and deployed in production. This is not a new development project and I am not requesting a rebuild. The initial task is strictly to review, test and report on the existing implementation before onboarding the first real store. Technology stack: TypeScript React and Vite Node.js and Express PostgreSQL Drizzle ORM and database migrations REST APIs and OpenAPI Progressive Web App (PWA) GitHub, pull requests and CI/CD DigitalOcean App Platform and Managed PostgreSQL Arabic and English interfaces, including RTL support Platform structure: Custo...

I need my standalone Windows Server 2025 brought up to full CIS Benchmarks Level 1 compliance. After the changes are applied, I also require a line-by-line report that maps each CIS control to the exact setting on the machine, clearly indicating pass/fail status and any remediations performed. Scope • Harden every item in the official CIS Windows Server 2025 Benchmark, Level 1 profile. • Work directly on a single, isolated server (no domain dependencies). • Use standard, scriptable methods—Group Policy, registry edits, PowerShell, or CIS-CAT/SCAP content—so the steps are reproducible. Deliverables 1. Hardened server meeting Level 1. 2. Detailed compliance report in CSV or XLSX showing: – CIS control ID and description – Curre...

Looking for a certified and experienced cybersecurity professional or security testing company to conduct VAPT (Vulnerability Assessment and Penetration Testing) for a web application and its APIs. Only applicants with proven VAPT experience and relevant cybersecurity certifications will be considered. Scope Web Application VAPT REST API VAPT WebSocket API VAPT Grey-box testing Multiple user roles Approximately 20 API endpoints Requirements Proven experience conducting professional VAPT for web applications and APIs Relevant industry-recognized cybersecurity certifications Strong knowledge of OWASP and modern web/API security Ability to provide a professional, detailed VAPT report Previous VAPT experience and sample/redacted reports preferred Deliverables Comprehensive VAPT report Vuln...

I need a seasoned OT-security specialist to run an end-to-end security assessment across several plant-floor environments and to deliver a clear, actionable report that highlights every weakness and maps out the fixes. Scope in detail • Honeywell control systems – 2 units • Yokogawa control systems – 2 units • Honeywell I/O – 100 sensors • Yokogawa I/O – 100 sensors • Rockwell PLCs – 100 sensors • Rice Lake Weigh-Bridge – 100 sensors The assessment must dig into network segmentation, firmware, access controls, physical interfaces and protocol exposure, using recognised OT frameworks such as IEC 62443 and NIST CSF where relevant. Feel free to bring in tools like Nessus, Wireshark, SHODAN, SecurityCenter, or ...

Cisco ASA working through ASDM to tidy up and optimize my current firewall pair. The firewalls are already in active-standby high-availability mode, and we use SSL VPN for remote access. Here is what I want done: • Audit existing Access Rule, NAT rule and Service-Policy, rename them, group them logically, and delete anything that is redundant or obsolete. Environment SSL VPN to connect to LAN (working) Internal servers accessible from out for website (2)-working CCTV to be accessible from outside-working Cloud subnet accessible from LAN and VPN subnets for RDP (not working) Confirm two ASA in HA mode (active-standby) Recommend any improvements This is production ASA, so credentials cannot be shared, need to work via shared screen

I need a Flash-style TRC20 token built on the Tron blockchain that is both burnable and protected by multi-signature access. My priority is to have the contract coded, fully tested, and ready for deployment as quickly as possible without compromising security or adherence to the official TRC20 standard. Please write the contract in Solidity, comment it clearly, and supply a brief README so I can redeploy or verify it myself later. A small, self-contained test script (TronBox, Hardhat, or a comparable framework) that proves the burn function and the multi-sig requirement are working will speed up my review. Deliverables: • Auditable Solidity source code implementing TRC20 with burnable capability and multi-sig control • Compiled bytecode, ABI, and deployment steps • A s...

My Linux-based web server has been hit with malicious, unfamiliar files and scripts. I need a system administrator who can track every infection, remove it completely, and then perform a fresh installation and configuration of Imunify360 so the machine is once again hardened and monitored in real time. cPanel is available, SSH access can be granted, and downtime must be kept to a minimum while you work. Key deliverables: • Full scan, isolation, and removal of every malicious file or script • Fresh Imunify360 install with optimal settings, automatic updates, and firewall enabled • Brief post-cleanup report detailing what was found, what was removed, and confirmation that Imunify360 is active and passing its own self-check I’ll be on hand for quick credential e...

OSCP-Certified Technical Reviewer Needed Looking for 1 or 2 OSCP-certified penetration tester for occasional project-based technical QA. The primary assessment work is handled internally. Your role will mainly involve reviewing selected findings, validating technical reasoning, checking severity, and reviewing final reports before delivery. No client meetings. No full-time commitment. Requirements: Current OSCP or OSCP+ Certification verification Willingness to sign an NDA Ability to review penetration-testing findings and reports Work is paid per agreed review task. Please send your OSCP verification, a short summary of your experience, and your expected rate for a few hours of technical review.( Think 2-3 hours per task)

My home network has been compromised. I need an expert to: - Diagnose security breaches - Identify and remove unauthorized devices - Secure my Wi-Fi and connected devices - Provide guidance on protecting myself from future attacks Ideal Skills & Experience: - Strong background in cybersecurity - Experience with home network security - Ability to explain technical concepts clearly - Trustworthiness and professionalism Please help me regain control of my digital life. I do suspect that the individual may have used something like apple buisness or cisco technologies to gain complete access and control over everything I do on a daily basis. Including revoking my access to my own information. I need someone who can look beyond the curtain and really understand that it is not just the dev...

I have an enterprise-grade, multi-vendor SaaS marketplace that is feature-complete on paper but still awaiting a green light for production. Before we release, I need an experienced Technical Project Manager or Technical Product Manager to give the entire platform a hard, independent review and drive it all the way to an unequivocal “ready” or “not ready”. Scope you will own • Perform a line-by-line review of the build against the existing SRS, challenging developers whenever implementation drifts from spec. • Orchestrate milestone planning and daily follow-ups with the current dev team so fixes, retests and regressions stay on schedule. • Design and execute full UAT: test every workflow, log defects in detail, and verify fixes. The goal is sim...

More details: Can you clarify the type of work you need done? Retrieve or access specific data What type of data are you trying to retrieve or access? Emails What email service provider does the account use? Gmail

An ethical hacker Needs for managing my social media account and get some details mainly my instagram dms and request Only apply if you have good experience and certificated in this field

I need a seasoned ethical hacker to run a full-scope penetration test against my live website. The priority is to uncover weaknesses that could expose our database or allow logic flaws in the web application to be exploited. All findings must be mapped to PCI DSS requirements so I can demonstrate compliance to my acquiring bank. Here is what I expect: • A controlled black-box test using industry-standard toolsets such as Burp Suite, OWASP ZAP, sqlmap, nmap, plus any custom scripts you rely on. • No disruption to production; schedule your active exploits during an agreed maintenance window and keep traffic levels reasonable. • A written report that ranks every issue by risk and includes reproduction steps, screenshots or PoC code, and clear remediation guidance. &bull...

I'm seeking a skilled penetration tester to evaluate the security of our network infrastructure. The testing should cover: - Firewalls and Routers - Wireless Networks - Servers and Endpoints Ideal candidates should have: - Proven experience in network penetration testing - Strong knowledge of security protocols and vulnerabilities - Relevant certifications (e.g., CEH, CISSP) - Ability to provide a detailed report with findings and recommendations Please share your experience and approach to this task.

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

I need a CISA-, DISA- or CERT-In-qualified professional to steer our young insurance brokerage through every stage of the IRDA Cyber Security Audit required for account renewal. At present we have virtually no formal artefacts, so you will be building the full documentation suite from the ground up. Core items include our cybersecurity policies, incident-response plans, access-control procedures and any additional processes the audit checklist demands. You’ll be free to introduce industry-standard frameworks and tooling provided they satisfy IRDA guidelines. Once the documents are in place I also want your guidance during the actual compliance cycle—answering auditor queries, closing gaps, and keeping the material evergreen for future renewals. If you already work with an aut...

Security Audit and Penetration Testing for Web and Mobile Application Project Overview I am looking for an experienced security auditor and penetration tester to perform a comprehensive security audit of a web application and mobile application. The application handles sensitive user and platform data through a backend database. The main objective of this project is to identify security vulnerabilities and, most importantly, verify that unauthorized users cannot access data or functionality that they are not permitted to access. The primary focus is on backend authorization, API security, database access control, authentication, privilege escalation, and protection against unauthorized data access. Main Security Requirement I need to verify that a normal user cannot access another us...