Security Auditing Jobs

I’m looking to strengthen the way my organisation safeguards sensitive data—at rest, in transit, and in use. The immediate goal is to design a clear, end-to-end protection framework that covers discovery, classification, encryption, access control, monitoring, and incident response. Because this project has no rigid deadline, I’d like to work methodically: first by reviewing our current posture, then mapping risks to specific controls, and finally rolling out the agreed-upon solutions. What I value most is proven experience in building or remediating data-centric security programmes. If you have successfully deployed data loss prevention (DLP) tools, implemented strong key-management or tokenisation schemes, aligned environments with GDPR, HIPAA, or ISO 27001, or automat...

I’m ready to build a production-grade, non-custodial crypto wallet that runs smoothly on iOS and Android. Private keys must never leave the user’s device, and the experience needs to feel as simple as any mainstream payments app. Core feature set • Send and receive cryptocurrencies with QR scanning and shareable wallet addresses • Real-time and historical transaction list with clear status indicators • Multi-currency support from day one (Bitcoin, Ethereum/ERC-20 preferred) and an architecture that lets us add new assets quickly Security and recovery • Biometric authentication (Face ID / Touch ID / Android Biometrics) • Optional two-factor authentication before approving a transaction • Passphrase backup that users can export, verif...

My company-owned laptop is still physically with me, but a former employee encrypted its primary SSD with BitLocker and tied the keys to his personal Microsoft account. The machine runs Windows 11 and will boot all the way into Windows; the problem is that every business-critical volume remains locked, leaving me without access to files that are now central to an internal theft investigation. I need an experienced security professional who can: • Bypass or otherwise unlock the existing BitLocker protection without that user’s Microsoft credentials • Extract a full, verified copy of all user data (including deleted items) • Preserve evidence integrity and provide a concise forensic report that could hold up in potential legal proceedings You may guide me through ...

I’m looking for an experienced ethical hacker to probe my hybrid network—both wired and wireless—with the sole aim of uncovering security vulnerabilities. Scope and focus • Map the entire network topology, including any VPN entry points, routers, access points, and key servers. • Perform vulnerability scanning and targeted penetration testing against internal and external segments. • Validate findings through exploit proof-of-concepts where safe and appropriate, ensuring no disruption to production traffic. Deliverables 1. A clear, prioritized vulnerability report that explains each issue, its risk rating, and the affected assets. 2. Screenshots or logs that support every critical or high-risk finding. 3. Action-oriented remediation recommenda...

I need 1–4 high-resolution CCTV cameras professionally fitted in my commercial premises, with coverage split between indoor customer areas and the outdoor entrance/loading zone. The space already has power and basic network points available; however, no cabling or mounts for cameras exist yet. Scope of work • Carry out a quick site survey to confirm the best camera positions for both inside and outside. • Supply and run all required cabling (neat trunking or conduit where visible). • Mount and align the cameras, ensuring weather-proofing for the external unit(s). • Install and configure the DVR/NVR, connect it to my existing router, and set up remote viewing on two smartphones. • Test image quality for daytime and low-light conditions, adjust angle...

I need an experienced CrowdStrike specialist to tighten our security posture. We already run a basic strategy, but it needs refinement and full alignment with CrowdStrike best practices. Your mission is to roll out Falcon across our environment, fine-tune threat detection, stand up solid endpoint protection, and deliver clear, actionable monitoring and reporting. Responsibilities 1. Monitor and manage CrowdStrike Falcon alerts, detections, and notifications. 2. Analyze potential malicious files and suspicious endpoint behavior. 3. Handle quarantine actions and validate safe recovery of affected systems. 4. Support Disaster Recovery (DR) planning and execution. 5. Validate backups, perform test restores, and ensure recovery readiness. 6. Conduct testing of quarantine workflows, alert notif...

Objectives • Obtain an independent, manual penetration test to validate the security of the Selcomm platform and the isolation of customer environments. • Produce a formal report (with a redactable version) to evidence security assurance to enterprise customers. Environment (context) Solution: Selcomm billing platform — dedicated (non-cloud) software; virtualised Windows + Linux/Informix Hosting: Production: NTT data centre. Access/interfaces: Per-customer dedicated VLANs; site-to-site VPN; SSL/TLS and sFTP. No wireless Target list / scope (please price individually and combined) • A — External infrastructure: internet-facing VPN endpoint(s), any public web/portal, mail gateway. • B — Web application: authenticated & unauthenticated test of the Se...

I’m looking for a fresh, expert set of eyes on my already-launched SaaS. The priority is a thorough check of both Security and Performance. I’ll share the exact tooling, checklists, and testing methodologies I currently use so you can step straight into the review process without guessing which scanners, profilers, or penetration-testing suites to run. Here’s how I see the engagement unfolding: you explore every security layer—from authentication flow to data storage—and benchmark performance under realistic load. When you’re done, I’d like a concise report that highlights the key findings, high-impact risks, and the quick wins that will give me the most immediate improvement. No need for a long-form narrative or slide deck; a sharply written summ...

Summary # Migration & Security Handover Brief **Prepared for:** MetaNet --- ## 1. Summary of what I need I want to migrate my web estate from Exoscale to MetaNet **and** perform a security clean-up at the same time, following a parting of ways with the previous contractor who built and had administrative access to these systems. I am not technical, so I need this handled end-to-end, but with **ownership of all accounts remaining under my control** (see section 3). Please treat this as: (a) a **clean migration** of 17 sites, and (b) a **security hardening / access reset** so no prior access survives the move. --- ## 2. The estate - **2 dynamic sites:** RedMontMed () and RedMontActive () — near-identical builds. **No traditional database**; their search is powered **live by ...

I’m building a single cloud solution that lets U.S.-based and foreign entities seamlessly calculate, file, and strategize their taxes. The first release must satisfy the needs of large corporations—complex, multi-state operations with consolidated returns—while remaining expandable to individuals and small businesses later on. Scope of work • Develop calculation engines for income, property, and sales tax that stay current with IRS and state rules. • Integrate e-file workflows that generate ready-to-submit federal and state forms. • Add real-time advisory features: scenario modeling, credit optimization, and audit-trail reporting. • Provide role-based dashboards, multi-entity management, and SOC-2-ready security. Preferred tech (open to sugge...

I’m ready to invest time in practical, one-on-one guidance that demystifies how attacks really unfold and, more importantly, how to spot and stop them. My background is purely beginner, yet my responsibilities will soon include supervising an IT/security team, so I need a clear, experience-based understanding of the attacker’s mindset. Focus areas • Network security: packet sniffing, basic exploitation, lateral movement, and network-level hardening. • Social engineering: phishing set-ups, pretexting scenarios, and the defense playbook that counters them. Learning format We will work inside pre-configured virtual machines you supply, where you walk me through the build-break-fix cycle: launching a representative attack, detecting it with common tools (Wireshark...

I need a VPN setup to enable secure remote work for my employees. The VPN should be both Site-to-Site and Remote Access. Requirements: - Connects securely: Desktops, Laptops, and Servers - Standard encryption Ideal Skills and Experience: - Proven VPN setup experience - Familiarity with various encryption protocols - Ability to configure for multiple device connectivity

My e-commerce site is currently under an active DDoS attack. No protective measures are in place yet, and service interruptions are starting to hurt sales and SEO. I have full administrative access to the Nginx server, so any configuration changes or security software installs can be done immediately. I need an experienced DDoS mitigation specialist to: • Restore site availability quickly by filtering malicious traffic and keeping legitimate customers online • Harden the existing Nginx stack with rate-limiting, connection throttling, and optimized firewall rules • Configure and fine-tune an external protection layer (e.g., Cloudflare, AWS Shield, or comparable scrubbing/WAF service) • Deliver a brief post-incident report outlining what was done, residual risks,...