Security Auditing Jobs

I need a reliable WordPress specialist to keep my site healthy and running smoothly on a quarterly basis. The immediate focus is on routine security updates and staying on top of general plugin updates, with special attention to the existing security plugin and an image-optimization tool that helps keep media lean. Two issues require prompt resolution: 1. Slow-loading pages that are hurting user experience and SEO. 2. Intermittent error messages that appear on a few key pages. Your work will involve: • Applying the latest WordPress core, theme, and plugin updates without breaking existing functionality. • Auditing and tightening security settings, particularly within the current security plugin. • Optimizing performance—caching, image compression, or other best-p...

I want a teacher for me who can teach me ethical hacking from start to end . Daily 1 hrs class via the online mode . Most importantly at the cheapest price from start to end . I will participate in ethical hacking competitions so you have to train me for that . If he will be an indian then perfect it would be best for me

I need an experienced security professional to bring our organisation fully in line with GDPR, HIPAA and CCPA. My immediate priorities are strengthening data-encryption practices, tightening access controls and formalising an incident-response process. The end goal is clear: demonstrable, audit-ready compliance. Current status • A mix of on-prem and cloud workloads (M365, AWS) with basic policies in place. • No formal gap analysis, limited documentation, and no rehearsed breach-response run-book. What I’m expecting from you 1. Conduct a comprehensive compliance gap assessment across our systems and third-party services. 2. Design and, where possible, implement technical controls for encryption at rest/in transit, role-based access and log monitoring. 3. Draft or...

I’m looking for a cybersecurity specialist who can zero-in on data protection, specifically the customer information our business holds. My main priorities are: • Assessing how and where customer data is collected, stored, and transmitted across our systems • Identifying current vulnerabilities or gaps in encryption, access control, and retention practices • Recommending and helping implement concrete safeguards—whether that means stronger database encryption, revised access policies, or automated monitoring and alerting • Delivering clear, step-by-step documentation so my team can keep everything compliant after your engagement ends Please outline the tools and frameworks you typically rely on (e.g., ISO 27001 controls, NIST CSF, OWASP, Splunk, SIEM...

I need an experienced ethical hacker to conduct thorough penetration testing on my mobile applications. The sole focus of this engagement is to simulate real-world attacks, uncover security flaws, and document practical remediation steps. Scope of work • Plan and execute a full penetration test tailored to mobile environments—covering authentication, data storage, API calls, transport security, reverse engineering, and runtime manipulation. • Use industry-standard methodologies such as the OWASP Mobile Security Testing Guide and well-known tools (e.g., Burp Suite, Frida, MobSF, Wireshark, Kali). • Provide a clear, reproducible report that ranks vulnerabilities by severity, explains exploitation paths, and recommends fixes that developers can act on immediately...

My site is already on Cloudflare, but the security section is still at its default settings. The immediate priority is to turn on and correctly tune Cloudflare’s DDoS protection so it works 24/7 without affecting legitimate traffic. Key tasks I need completed: • Enable and verify Cloudflare’s DDoS protection on the zone • Set sensible sensitivity levels and rate-limiting thresholds for both Layer 3/4 and Layer 7 attacks • Create at least one custom Firewall Rule to block obvious malicious patterns while allowing normal visitors and known search-engine bots • Produce a brief hand-off document outlining the settings changed, why they were chosen, and how to monitor the dashboard going forward I already have full access to the Cloudflare dashboard...

I need a thorough network-level penetration test carried out entirely with Kali Linux. The goal is to identify and validate every exploitable weakness on my production subnet, show me clear proof-of-concept for each finding, and give me a remediation-focused report I can hand straight to my infrastructure team. You will work from your own Kali box—feel free to lean on Nmap, Metasploit, Wireshark, or any other native toolkit you trust—as long as the methods remain ethical and fully documented. Scope is limited to the IP range I supply once we start; no social-engineering or physical testing is required. Deliverables • Executive summary written for non-technical leadership • Detailed technical report listing vulnerabilities, risk ratings, step-by-step reproduction, ...

I am looking for an experienced ethical hacker or cybersecurity professional to conduct a comprehensive security assessment of my mobile devices, Laptops, online accounts. I have reason to believe that my phone and company data may be monitored or accessed without my authorization. I need an expert who can investigate professionally, identify any potential security risks, and recommend remediation steps. Scope of Work The selected professional should be able to: Perform a complete mobile device security assessment (Android or iPhone). Check for spyware, malware, stalkerware, or unauthorized monitoring software. Review device settings, permissions, and installed applications. Analyze network traffic for suspicious activity. Check for unauthorized logins or compromised credentials. Ident...

I'm seeking detailed insights into social engineering tactics used by hackers. The information will be used to enhance personal cybersecurity measures. Key Areas of Interest: - Phishing schemes and variations - Pretexting and impersonation techniques - Baiting and quid pro quo methods - Tailgating and physical security breaches - Psychological manipulation strategies Ideal Skills and Experience: - Background in cybersecurity - Expertise in social engineering - Ability to provide real-world examples and scenarios - Strong analytical and research skills - Clear and concise communication

A recent Wordfence scan flagged a card-skimming script on my WooCommerce store, and I have not touched anything yet. I need a specialist who can dive in immediately, locate every trace of the malicious code, and clean it out without disrupting live sales. Please investigate the entire stack—WordPress core, themes, child themes, all plugins, and the database—then eliminate the skimmer, patch any other vulnerabilities you uncover, and harden the site so this does not recur. Once finished, I expect the next Wordfence scan (or a tool of your choice) to come back completely clean and for test purchases to process safely. Deliverables: • Full removal of the card-skimming script. • Clean security report confirming no malware remains. • Brief walkthrough of what wa...

I need a seasoned technical-SEO professional to run a full audit of my website and carry out the resulting fixes. The audit must dig into four specific areas—performance, user experience, security and overall SEO health—so I understand exactly what is slowing the site down, where visitors may be dropping off, and which security gaps or search-visibility weaknesses still exist. Once the report is complete, I want you to implement (or clearly document, if server access is restricted) every high-impact recommendation so the site loads faster, feels smoother to users, passes standard security checks and earns higher visibility in Google. My ultimate goals are straightforward: climb the rankings, pull in more qualified traffic and strengthen online visibility across the board. Del...

I am building the first release of Luminous Cleaning Singapore’s digital platform and need a complete, production-ready solution that covers both the customer experience and my internal administration. Scope of this phase • A native-like customer app for both iOS and Android that lets users register or log in, choose a cleaning service, schedule a time, pay online, receive push notifications, view past bookings, and leave ratings or reviews. • A web-based admin dashboard where my team can see every order in real time, edit schedules, update prices or service details, and respond to customer feedback. Key requirements • Solid, secure user authentication with social login as a plus. • Payment gateway integration (credit/debit cards at minimum, with the arc...

I run a blog-style content website and need a focused penetration test on its user-login area. The goal is to uncover any weaknesses that could allow unauthorized access through the regular sign-in form. Scope • Target: publicly facing web application (content/blog platform). • Focus: user login security only—credential handling, session management, brute-force protections, and related OWASP Top 10 items. • Excluded for now: password-reset flow and admin control panel, though I may extend testing later. Expectations 1. Perform both automated and manual testing using recognised tools such as Burp Suite, OWASP ZAP, Hydra, or similar. 2. Attempt common password-based attacks (e.g., dictionary, credential stuffing, session fixation) in a controlled manner that ...

My primary Google account—home to all of my YouTube channels and therefore my livelihood,was hijacked yesterday. The intruder replaced both the password and the 2-Step Verification settings, leaving me completely locked out. My one and only goal is to regain full access as quickly as humanly possible and then harden the account so this never happens again. Here’s what I have already done: - Used Google’s account recovery page - Contacted Google’s support team - Tried recovering via the linked phone and email I don’t have any backup codes or recovery keys saved. I need an expert who knows the inner workings of Google’s security and escalation paths, understands YouTube channel ownership disputes, and can either guide me step-by-step or act on m...

I need a cybersecurity professional who can focus specifically on protecting my website data through strong, modern encryption. The site already runs smoothly, but I want every point where data is stored or travels—database, file storage, backups, and all traffic—to be fully encrypted, audited, and documented. Here’s what I’m looking for: • A short assessment of the current architecture, highlighting any weak encryption or plaintext storage. • Implementation or hardening of encryption at rest and in transit (SSL/TLS configuration, database-level encryption, secure key management). • Clear, step-by-step documentation so future updates won’t weaken the protection. • A concise verification report that proves the data is now encrypted ...

My Business Manager was compromised and I’m locked out of the entire account—pages, ad accounts, everything. I have no idea how the intruder got in (Facebook shows no clear trail), and the only step I’ve taken so far is opening a support ticket through Meta’s Help Center. Here’s what I need from you: • Regain full admin-level access to the Business Manager, pages and ad accounts. • Remove any unauthorized users, assets or payment methods. • Document the breach timeline as far as Facebook will reveal it and outline the likely attack vector. • Put clear security controls in place (2FA, password policy, recovery contacts) so this does not happen again. Acceptance is straightforward: once I’m back in as primary admin, al...

I need a thorough vulnerability assessment and penetration test against our corporate network infrastructure. The scope includes our core routers and switches, Windows/Linux servers, representative employee endpoints, and the firewalls and other security appliances that sit at the perimeter. The primary objective is simple: uncover and safely validate every weakness so I have clear, prioritised actions to improve our overall security posture. I will provide network diagrams, asset lists, and maintenance windows once an NDA is in place. Testing must be low-impact on production; out-of-hours work is fine and can be scheduled together. Deliverables • Executive summary for leadership • Detailed technical report mapping each finding to its asset, risk rating, and exploit narra...

I’m locked out of my business Microsoft 365 / Outlook account because I no longer have the authentication app that was linked to the tenant. Standard password reset works, but the two-factor challenge stops me cold, and no verification codes are arriving through any other channel. I need someone who knows the ins and outs of Microsoft 365 security and can: • Regain administrative access without the original authenticator • Re-enable sign-in to Outlook and all linked services • Help me set up a fresh, secure two-factor method (Authenticator, FIDO key, or SMS fallback) • Provide a quick written rundown of what was done so I can repeat the process if this ever happens again You’ll be working with a business subscription, so experience dealing with M...

I'm seeking a cybersecurity expert to review historical audit logs. The goal is to validate past security breaches and provide insights and 3rd party validation. Key Tasks: - Thorough review of historical audit logs - Evaluate past forensically documented records - Identify types of cyberattacks executed based on preserved data Ideal Skills: - Expertise in cybersecurity - Familiarity with audit logs - Experience with frameworks like NIST, ISO 27001, or CIS Controls Your insights will be crucial in enhancing our security posture.

Job Title AWS Infrastructure & Cyber Security Review for Startup Platform Job Description We are an Australian technology startup that has been operating for approximately 12 months and are preparing for the next stage of growth. Following a recent server-related issue, we'd like an experienced AWS infrastructure and cyber security professional (or small team) to review our current environment and provide practical recommendations before we continue scaling the platform. This is not just a penetration test. We're looking for someone with real-world AWS and infrastructure experience who can review our overall setup and tell us whether we're following best practices, where our risks are, and what improvements we should make. Our environment currently consists of an A...

Buscamos un especialista/consultor freelance en Ciberseguridad y Pentesting para colaborar en la ejecución de auditorías técnicas de seguridad dirigidas a Pymes (entornos web, redes e infraestructura Cloud). Nosotros gestionamos la relación comercial y la integración de cumplimiento normativo (LOPD/ISO27001) para nuestros clientes en España. Buscamos un profesional técnico que ejecute las pruebas en modalidad Marca Blanca (White-Label) bajo la marca de nuestra consultora (Vortex Omnia Group). RESPONSABILIDADES DEL FREELANCE: 1. Ejecución de escaneos de vulnerabilidades perimetrales y pruebas de intrusión (Pentesting Web/Red). 2. Redacción de informe técnico detallado (vulnerabilidades encontradas, criticida...