Security Auditing Jobs

I'm the founder of NILQuant, an independent record for NIL deals in college athletics. We're looking for a qualified, independent reviewer for a scoped technical review of our core verification engine before its first production release. Scope (summary; full scope attached): - Rebuild our PostgreSQL database from its migration files on your own machine and repeat our test suite and reproduction kit - Check append-only history, two-person release controls, fingerprinting (SHA-256), school-to-school data isolation and a scoped verification API - Test the hosted demo with six test accounts (no admin access) and try to break the controls - Confirm our outside timestamping and write-once storage settings - Written findings, one retest round and a signed scoped conclusion All data is...

Devo sottoporre la mia rete aziendale a un test di penetrazione esterno per individuare e correggere eventuali vulnerabilità prima che lo facciano i criminali informatici. Cerco un professionista della sicurezza informatica con comprovata esperienza in penetration testing su infrastrutture corporate. Il focus è esclusivamente sul perimetro esterno: firewall, VPN gateway, servizi esposti in DMZ e qualsiasi altra porta o applicativo accessibile da Internet. Mi aspetto che tu: • conduca la fase di information gathering e scanning (ad es. con Nmap, Masscan) • esegua l’exploitation controllata con strumenti come Metasploit, Burp Suite o analoghi, mantenendo traccia di ogni passo • rediga un report tecnico in italiano che includa: descrizione delle vuln...

I’m ready to launch a brand-new cryptocurrency with a fixed maximum supply of 10 billion coins and I don’t want to piggy-back on Ethereum, BSC or Polkadot—I need an independent chain built from the ground up. The core purpose of the coin is to power smart-contract execution, so the chain architecture, virtual machine and fee model all have to be optimized for that use-case. What I already have in mind • Tokenomics: 10 billion total supply, no more, no less. • A smart-contract–friendly environment that can rival EVM chains in speed and cost. • Room to evolve into DeFi utilities later on. Where I need your expertise I’m looking for end-to-end technical guidance and implementation: choosing or designing the right consensus layer, writing ...

Sila Dafter atau Log masuk untuk melihat butiran.

My site is already live and collecting customer information, but the current safeguards are minimal. I need an experienced cybersecurity professional to focus exclusively on data protection: assessing the way customer details are stored and transmitted, closing any gaps you identify, and putting long-term controls in place so the data stays safe even as the site scales. What I expect • A concise risk assessment of my existing environment (server, database, APIs, third-party plugins). • Implementation of best-practice controls—end-to-end encryption (SSL/TLS), database hardening, access-control policies, secure backups, and monitoring or alerting tools you feel are essential. • A short validation report or penetration test summary confirming the fixes are effectiv...

My Shopify store needs a thorough tune-up. I’m looking for someone who can run a complete security and performance audit, then tackle the specific problems I’m facing: • Security: I’m worried about virus or malware infections, possible unauthorized access and any avenue for data breaches. I want the store scanned, cleaned and hardened without disrupting day-to-day trading. • Performance: page-speed has dipped; I’d like clear recommendations and the quick-win fixes implemented. • Metafield cleanup: there are piles of legacy metafields from old apps. Please identify what’s safe to delete and tidy them up so the theme and admin stay lean. • Theme maintenance: several theme sections throw “block reference” errors after a rece...

I have a complete code-base that now needs to live on a cloud server. The immediate goal is twofold: 1) install and configure the application so it runs reliably in the cloud environment I provide, and 2) comb through every file, dependency, and configuration to confirm there are no hidden backdoors, malicious packages, or insecure default settings left behind after development. I’m deploying to a cloud server (provider is flexible, so please be comfortable with AWS, Azure, or GCP). You’ll set up the runtime stack, handle environment variables, connect the database, and push the first production build. While doing so, perform a thorough security audit: manual inspection, automated scanners, and any static-code-analysis tools you trust. If something suspicious appears, docu...

I have a demo SAST web application that needs a third-party review of its security posture. The goal is to measure how well the platform detects real issues, how often it raises false positives, and how effective the built-in AI-assisted remediation suggestions are. I also want an expert perspective on the soundness of the underlying technical architecture. During the assessment, please: • Probe detection quality with well-crafted test cases and known vulnerable samples. • Document every false positive you encounter, explaining why it is incorrect and how it could be avoided. • Stress-test the AI remediation flow, noting accuracy, clarity, and any missing defensive guidance. • Comment on scalability, data flow, and overall architecture from an AppSec best-practic...

JOB OPPORTUNITY – ETHICAL HACKING / CYBERSECURITY We are looking for a skilled Ethical Hacker / Cybersecurity Specialist to help improve and strengthen the security of our website. The main responsibilities include: - Identifying potential security vulnerabilities - Conducting authorized security assessments - Testing website security and identifying weaknesses - Providing recommendations to improve overall cybersecurity - Helping implement appropriate security measures Requirements: - Good knowledge of Ethical Hacking and Cybersecurity - Practical experience in website security and penetration testing - Strong understanding of web application security - Responsible and professional approach to security testing If you have the required skills and experience, please contact us. ...

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside. Here is what I expect: • A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices. • A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework. • A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and sugg...

I have a full-stack Java codebase that I need set up, walked through, and examined from top to bottom. My first priority is uncovering any security vulnerabilities or hidden backdoors, so you will need to comb through the entire stack—server-side, client-side, build scripts, and deployment configs—looking for risky patterns, outdated dependencies, or suspicious commits. Once the security sweep is complete, I also want your eye on execution speed. Any hotspots that slow response times, blocking calls, or inefficient algorithms should be flagged with clear, actionable fixes. You are welcome to profile locally or spin up a test environment; I’ll provide repo access and a clean VM image so you can reproduce the build. Deliverables • Written audit report that lists ev...

I want complete peace of mind that my personal iPhone & android Samsung is fully locked down against hackers. The job is straightforward: audit every setting, app permission, network profile, and cloud-sync option on the device; fix or guide me to fix anything that leaves an opening; and finish with a clear summary of what was changed and why. Because this is for personal use, I’m focused on practical, real-world protection rather than corporate compliance checklists. Expect to work directly with me over a secure video or messaging channel so I can follow along while you adjust settings such as Face ID, two-factor authentication, iCloud Keychain, Wi-Fi/cellular profiles, and any third-party security apps you recommend. Deliverables • A live, step-by-step hardening se...

I want a seasoned penetration tester to put my PHP site through its paces and uncover every weakness, from classic SQL Injection and XSS to more sophisticated remote-code tricks. The public-facing pages matter, but my priority is the admin panel. Within that area I rely heavily on three features—CRUD data operations, role and permission management, and a file-upload module—so those have to be stressed especially hard. Your job is to simulate real-world attacks with tools of your choice (Burp Suite, OWASP ZAP, manual source review, custom exploit scripts—whatever gets the most reliable results) and then document each vulnerability with a clear proof-of-concept, reproducible steps, severity rating, and a practical fix I can hand straight to my developer. Deliverables &b...

I recently replaced my phone and lost the Microsoft Authenticator configuration that protects my Outlook email account. Since the app was my only two-factor method, I’m now locked out. I need someone who knows the ins and outs of Microsoft Authenticator, Outlook sign-in security, and account recovery workflows to guide me through regaining full access. The focus is strictly on recovering the account, not on setting up new devices or general troubleshooting. We’ll work together in real time (screenshare or chat—whatever you recommend) to: • Navigate Microsoft’s recovery pages • Prove ownership with any backup codes or alternative verification routes that may still be available • Re-establish two-factor authentication on my new phone once ac...

I’ve just installed a residential UniFi Dream Machine Pro with Protect and I want the whole environment tightened up before it goes live. Here’s what I need: • Build a solid firewall policy from scratch—block known-bad IP ranges, close unnecessary ports, and create custom rules that fit my lifestyle • Activate and fine-tune UniFi’s Threat Management (IDS/IPS) so intrusion attempts are detected and stopped automatically. • Set up live and historic monitoring for web and email traffic, with clear dashboards and alerting inside the UniFi controller. • Check VLAN design and switch settings to be sure lateral movement is limited. • A short hand-off session so I understand how to review logs, update rules, and keep everything current. A...

About the project: We are looking for an experienced **web application penetration tester** to conduct an independent security assessment of a SaaS platform. The application is a business management platform with authenticated user accounts, document handling, portals, workflows, messaging and APIs. Further details about the application and functionality will be provided to shortlisted candidates. Scope: The assessment should cover the web application and relevant APIs, including authenticated functionality. Areas of interest include: * Authentication and session management * Authorisation and access controls * Horizontal and vertical privilege escalation * IDOR / BOLA vulnerabilities * OWASP Top 10 * API security * Input validation and injection vulnerabilities * Cross-site script...

A recent scan showed a malicious code injection on one of the key pages of my custom-built PHP application, hosted on a dedicated AWS EC2 server. We cleaned the malware and found and patched the loophole. But then it came back and another loophole surfaced. I need an experienced security specialist to scan the entire server for malware and set up ongoing monitoring so this doesn’t resurface. Scope of work • Remove every trace of the current infection from both codebase and filesystem. • Audit the full stack, server configuration, and access logs to pinpoint the exact attack vector. • Patch or re-architect the vulnerable component you identify, then harden the server (SSH, firewall, file permissions, intrusion detection, etc.). • Deploy continuous monitoring and a...

I need help to uncover the identity of a cyberstalker targeting my business and me. This person has been sending harassing emails and messages, creating impersonation or fake accounts, and gaining unauthorized access to my data. Their actions are severely impacting my business, causing financial loss, damaging my reputation, disrupting operations, and inflicting mental anguish. Ideal Skills and Experience: - Expertise in cybersecurity and digital forensics - Experience with investigating online harassment and impersonation - Ability to trace unauthorized data access - Strong analytical skills to compile evidence - Knowledge of relevant laws and regulations - Prior experience working with victims of cyberstalking is a plus I'm looking for a professional who can take this seriously an...

FREELANCER MILESTONE: Global Kirtan App — Flutter Code Audit PROJECT OVERVIEW: We need an experienced Flutter developer to perform a thorough audit of our Kirtan App's source code. The project is built with Dart/Flutter and is live on Android. The review must cover platform-specific nuances, the shared Flutter codebase, and the supporting backend. --- SCOPE OF AUDIT: **1. Code Quality & Maintainability** - Structure, readability, and design patterns - State management choices and widget tree optimization - Test coverage and overall maintainability - Dependency management and library versions - Technical debt and refactoring priorities **2. Security Vulnerabilities** - Insecure storage and data handling - Improper network calls and API security ...