Security Auditing Jobs

NO PLACEHOLDERS. Do not insert a placeholder: please read the project details carefully because here are all the details you need to make an accurate estimation. I am seeking targeted assistance to install Kalidroid (the Kali Linux environment for Android) on my Google Pixel 10a, which is already running the latest build of GrapheneOS. Objective – Create a stable setup for security testing, with all key Kali tools fully functional, without compromising GrapheneOS's security defenses. What I expect 1. A step-by-step guide (or video-call support) for flashing or importing the Kalidroid image. 2. Configuration of network settings, permissions, and repositories to ensure penetration testing packages update correctly. 3. Final verification: running specific utilities (e.g., nmap,...

**Title: Seeking a Senior Full-Stack Engineer to Review and Secure Our Claude-Built CRM & Websites** We're looking for an experienced full-stack engineer to review, test, and improve an existing CRM and multiple websites developed with Claude Code. The code is largely prepared, and we want an experienced engineer to help us identify issues, validate the architecture, and ensure the applications are reliable and secure before production deployment. **Scope of work:** - Review the existing codebase, architecture, and database design. - Identify bugs, security vulnerabilities, and architectural weaknesses. - Audit authentication and role-based access controls. - Validate privacy and data isolation between owners, admins, agents, callers, and sub-agents. - Review API endpoints, dat...

Looking for a cyber security data breach researcher and OSINT expert.

cybersecurity advisor to setup cyber security environment for website and employees

The two apps, shared backend and admin portal are already built, working and functionally complete. We need an experienced engineer or accountable team to perform final hardening, verify release readiness and complete a controlled release. SYSTEM - Two apps: customer-facing and sales/service. - One shared Node.js/Express + PostgreSQL backend with Stripe. - A thin React admin portal using the same backend. - React Native/Expo mobile code is part of the existing system. - Existing source code, automated tests, CI and written release procedures will be provided under NDA. A substantial amount of code was developed with AI assistance and needs independent engineering review. FINAL SCOPE 1. Review the existing code across both apps, backend and admin portal; produce file-specific findings, pr...

My WordPress site is currently offline after malicious files were discovered on the server. I need it cleaned and brought back online, but more importantly I want to stop this from ever happening again. The immediate focus is firewall and server-side security; user authentication tweaks and data-at-rest encryption can follow once the house is no longer on fire. There are no security plugins installed yet, so you’ll be working from a clean slate. Feel free to recommend and configure the tools you trust most—Wordfence, Sucuri, ModSecurity, Fail2Ban, or a custom stack—as long as the final setup keeps attacks out and performance intact. Acceptance criteria • Every malicious file and injected line of code is removed, with the site fully functional and reachable. &bu...

Need an experienced JavaScript / web security developer. We have a complex web page with advanced client-side JS challenge. Require to analyze the JS logic, understand the browser fingerprint mechanism. Need to build a solution that can simulate real browser environment and generate valid tokens. Only developers with Akamai related experience please bid. Please mention your similar past work in your proposal. We can provide test target for qualified candidates.

I’m rolling out a new crypto wallet and need a production-ready smart contract written for Binance Smart Chain. The contract has to handle full token management, cover all transaction handling logic, and include a built-in multi-signature layer for extra security. Here’s how I picture the collaboration: • Token management should support minting, burning, transfers, and allowances in line with the BEP-20 standard (or an equivalent custom approach if you believe a tweak would be safer or more gas-efficient). • Every critical action needs event logging so the front-end can surface real-time status updates to users. • Multi-signature approval must gate high-value actions such as owner transfers or contract upgrades. A simple n-of-m schema is fine as long as sig...

I need a seasoned cloud-security specialist to give my Oracle Cloud Infrastructure and Google Cloud Platform estates a thorough health check, then guide me toward a Zero Trust posture. First, you will assess both environments end-to-end—identity and access, network controls, data-at-rest and in-transit encryption, logging/monitoring pipelines, and workload configuration—mapping every finding to current best practice and the relevant CIS Benchmarks. Next, I expect a concise report that clearly separates quick-win remediations from deeper, strategic fixes. Each item must carry a risk rating, the exact remediation steps, and any references to supporting documentation or Terraform snippets where useful. Finally, translate the recommendations into a phased Zero Trust Network ...

I'm the founder of NILQuant, an independent record for NIL deals in college athletics. We're looking for a qualified, independent reviewer for a scoped technical review of our core verification engine before its first production release. Scope (summary; full scope attached): - Rebuild our PostgreSQL database from its migration files on your own machine and repeat our test suite and reproduction kit - Check append-only history, two-person release controls, fingerprinting (SHA-256), school-to-school data isolation and a scoped verification API - Test the hosted demo with six test accounts (no admin access) and try to break the controls - Confirm our outside timestamping and write-once storage settings - Written findings, one retest round and a signed scoped conclusion All data is...

I’m ready to launch a brand-new cryptocurrency with a fixed maximum supply of 10 billion coins and I don’t want to piggy-back on Ethereum, BSC or Polkadot—I need an independent chain built from the ground up. The core purpose of the coin is to power smart-contract execution, so the chain architecture, virtual machine and fee model all have to be optimized for that use-case. What I already have in mind • Tokenomics: 10 billion total supply, no more, no less. • A smart-contract–friendly environment that can rival EVM chains in speed and cost. • Room to evolve into DeFi utilities later on. Where I need your expertise I’m looking for end-to-end technical guidance and implementation: choosing or designing the right consensus layer, writing ...

Please Sign Up or Login to see details.

My site is already live and collecting customer information, but the current safeguards are minimal. I need an experienced cybersecurity professional to focus exclusively on data protection: assessing the way customer details are stored and transmitted, closing any gaps you identify, and putting long-term controls in place so the data stays safe even as the site scales. What I expect • A concise risk assessment of my existing environment (server, database, APIs, third-party plugins). • Implementation of best-practice controls—end-to-end encryption (SSL/TLS), database hardening, access-control policies, secure backups, and monitoring or alerting tools you feel are essential. • A short validation report or penetration test summary confirming the fixes are effectiv...

My Shopify store needs a thorough tune-up. I’m looking for someone who can run a complete security and performance audit, then tackle the specific problems I’m facing: • Security: I’m worried about virus or malware infections, possible unauthorized access and any avenue for data breaches. I want the store scanned, cleaned and hardened without disrupting day-to-day trading. • Performance: page-speed has dipped; I’d like clear recommendations and the quick-win fixes implemented. • Metafield cleanup: there are piles of legacy metafields from old apps. Please identify what’s safe to delete and tidy them up so the theme and admin stay lean. • Theme maintenance: several theme sections throw “block reference” errors after a rece...

I have a complete code-base that now needs to live on a cloud server. The immediate goal is twofold: 1) install and configure the application so it runs reliably in the cloud environment I provide, and 2) comb through every file, dependency, and configuration to confirm there are no hidden backdoors, malicious packages, or insecure default settings left behind after development. I’m deploying to a cloud server (provider is flexible, so please be comfortable with AWS, Azure, or GCP). You’ll set up the runtime stack, handle environment variables, connect the database, and push the first production build. While doing so, perform a thorough security audit: manual inspection, automated scanners, and any static-code-analysis tools you trust. If something suspicious appears, docu...

JOB OPPORTUNITY – ETHICAL HACKING / CYBERSECURITY We are looking for a skilled Ethical Hacker / Cybersecurity Specialist to help improve and strengthen the security of our website. The main responsibilities include: - Identifying potential security vulnerabilities - Conducting authorized security assessments - Testing website security and identifying weaknesses - Providing recommendations to improve overall cybersecurity - Helping implement appropriate security measures Requirements: - Good knowledge of Ethical Hacking and Cybersecurity - Practical experience in website security and penetration testing - Strong understanding of web application security - Responsible and professional approach to security testing If you have the required skills and experience, please contact us. ...

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside. Here is what I expect: • A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices. • A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework. • A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and sugg...

I have a full-stack Java codebase that I need set up, walked through, and examined from top to bottom. My first priority is uncovering any security vulnerabilities or hidden backdoors, so you will need to comb through the entire stack—server-side, client-side, build scripts, and deployment configs—looking for risky patterns, outdated dependencies, or suspicious commits. Once the security sweep is complete, I also want your eye on execution speed. Any hotspots that slow response times, blocking calls, or inefficient algorithms should be flagged with clear, actionable fixes. You are welcome to profile locally or spin up a test environment; I’ll provide repo access and a clean VM image so you can reproduce the build. Deliverables • Written audit report that lists ev...

Devo sottoporre la mia rete aziendale a un test di penetrazione esterno per individuare e correggere eventuali vulnerabilità prima che lo facciano i criminali informatici. Cerco un professionista della sicurezza informatica con comprovata esperienza in penetration testing su infrastrutture corporate. Il focus è esclusivamente sul perimetro esterno: firewall, VPN gateway, servizi esposti in DMZ e qualsiasi altra porta o applicativo accessibile da Internet. Mi aspetto che tu: • conduca la fase di information gathering e scanning (ad es. con Nmap, Masscan) • esegua l’exploitation controllata con strumenti come Metasploit, Burp Suite o analoghi, mantenendo traccia di ogni passo • rediga un report tecnico in italiano che includa: descrizione delle vuln...