Security Auditing Jobs

experienced security specialist for old yahoo account

I need a mid-level SOC analyst who can jump straight into a lab environment and prove—through real hands-on testing—that our security stack actually works. You will be touching every layer of the platform: the SIEM, EDR, and XDR components that form the core, plus our newer ASM, ITDR, GRC and AI-assisted security modules. The single goal is clear: strengthen and validate our overall security posture. You will design and execute attack scenarios, confirm detections, measure response times, and then report where gaps appear. Expect to work with log forwarding, correlation searches, endpoint telemetry, MITRE ATT&CK mapping, and automated SOAR actions as you go. Deliverables I expect • A concise test plan outlining scenarios, tooling and success criteria • Captu...

I’m planning to stand up an internal public-key infrastructure and need a clear, implementation-ready design for the certificate authority that will sit at its core. The authority must be able to issue two certificate types—SSL/TLS (Domain-Validated) and Client Certificates—and the design has to account for automated certificate management from day one. Scope Please translate my high-level requirements into a detailed blueprint that covers: • A two-tier CA hierarchy with an offline root and online issuing CA(s). • Policies and procedures for issuing DV SSL/TLS certificates as well as client authentication certificates, including enrollment, approval, revocation, and re-issuance flows. • Integration points for automated lifecycle management (ACME or...

My original Facebook Business page and connected Instagram account were restricted and I can no longer access them, so I need a fresh, fully secured setup from scratch. Your mission is to create brand–new Facebook and Instagram pages that highlight product showcases, personal brand updates, and customer testimonials, then link them properly to my WhatsApp number and Gmail address. I also need a new personal Facebook profile that will be the sole admin of these assets. Both new pages and the new profile must have two-factor authentication turned on with passkeys and any other best-practice hardening you recommend to keep future attacks at bay. Because I still see traces of the old assets online, part of the job is reporting and disabling those pages so no one can impersonate the bra...

Job Posting: Security Audit & Remediation – Project: – Security Audit & Remediation We are looking for an independent security-focused developer to verify and complete the security work on our platform (website, backend, iOS app, Android app). What has been done: · A full security audit was completed by a previous freelancer (49 findings – critical, high, medium, low). · Another developer has implemented fixes for many critical and high-severity issues: SQL injection, payment bypass, data leaks, stored XSS, chat access control, invoice IDOR, session cookies, CORS, MD5→bcrypt migration, database/Stripe key consolidation, blocking old code, and more. · These fixes have not been independently verified. What needs to be done: ·...

I have issue with my business advertasing portfolio, the front pages are working fine but the business portfolio has been permenetly restricted after a cyber attack to my account I have full acces to the page No unauthorized people Front pages are working fine the objective lunch ads for sell target with pixel to my site for better conversion MY IDEA TO FIXE THIS Plan A Recover the existing account: You first make a serious attempt to remove the restriction by auditing the hacked account, cleaning up any unauthorized access/assets, reviewing the policy history, and escalating the case with clear evidence of the compromise and the security measures you've since implemented. Plan B Fresh compliant setup: If Meta confirms that the original advertising assets cannot be reinstated, cr...

My Business Manager was permanently restricted from running ads after the account was hacked. I recovered ownership, enabled two-factor authentication, and submitted appeals through Meta Business Suite and Ads Manager, yet Facebook’s support responses have stalled and the restriction is still in place. I need someone who knows the Meta policy-violation appeal flow inside out, can draft the right escalation notes, open live-chat or concierge cases if available, and push the ticket through until the restriction is lifted. You will be asked to: • Review the account for any lingering policy flags or unauthorized assets and clean them up. • Prepare and file a well-structured appeal (or second-level escalation) that references the hack, restoration steps, and current security...

* Develop and improve a cloud-based **Security Operations Center (SOC) home lab**. * Use **AWS** as the primary cloud platform. * Integrate **Wazuh** for security monitoring and threat detection. * Integrate **Shuffle SOAR** for automated incident response. * Implement **AWS IAM** for identity and access management. * Configure security monitoring for AWS resources and services. * Create automated incident response playbooks for security incidents. * Integrate threat intelligence tools for IP reputation and threat analysis. * Develop a SOC dashboard to visualize security alerts and incidents. * Configure real-time alert notifications for detected threats. * Implement incident response workflows for attacks such as: * Brute-force attacks * Unauthorized IAM activity * Malware and rans...

I need a one-time setup for comprehensive cyber security protection for my devices. Devices to be secured: - Computers - Smartphones/Tablets - Smart home devices Required security measures: - Antivirus and malware protection - Network firewall setup - Real-time monitoring Ideal skills and experience: - Proven expertise in cybersecurity - Experience with antivirus and firewall tools - Ability to set up real-time monitoring systems Please provide a detailed plan and ensure a secure environment for my home network.

More details: What type of security testing do you require? Both Which areas of the ecommerce website do you want to prioritize for security testing? Payment gateway, User authentication, Database Do you have any specific compliance standards the website needs to meet? PCI DSS

I need an external, black-box penetration test carried out against three separate /24 IPv4 ranges that power our public-facing web applications, email servers, and SIP services. The exercise must satisfy our compliance requirements, so the methodology, evidence gathering, and final reporting all have to stand up to an audit review. Here’s what I expect: • Reconnaissance, vulnerability discovery, and controlled exploitation performed strictly from an external perspective—no inside credentials will be provided. • Clear scoping and scheduling so the assessment covers every live host across the three networks without disrupting production traffic. • A written report that prioritises findings by risk, maps them to relevant compliance controls, and includes reprod...

I’m ready to move our hybrid DeFi infrastructure from concept to production and need a senior architect who can own the full cross-chain routing stack end-to-end. The core networks in scope are Base (EVM), Solana (SVM) and Sui (Move). On top of that, the platform must expose ERC-4337 account-abstraction rails so we can offer completely gas-free user flows. Key functional pillars • Biometric onboarding through WebAuthn so retail users glide straight from KYC into non-custodial wallets. • True gasless execution driven by ERC-4337 paymaster flows. • Hardware middleware automation via CEN/XFS drivers to let ATMs, kiosks and embedded banking devices push transactions directly into our rails. I already run an AI-native development environment (Cursor, Copilot, GPT-...

正文： 做外贸的朋友，如果碰到客户要求走S2S、KTT或者涉及MT103这类付款方式，自己又没有渠道对接的，可以私信我。 我这边有跨境结算渠道，可以处理这类付款方式的对接和协调。不收前期费用，成不成看具体业务。 有需要的站内私信，或者留个联系方式，我加你。 1 Title: Seeking Elite Cybersecurity Expert – Verifiable Track Record Required Description: We are looking for a top-tier cybersecurity expert for a potential long-term collaboration. Who we are looking for: · Advanced expertise in cybersecurity, penetration testing, or security research · Must be able to provide verifiable case examples, such as: · CVE numbers or published vulnerability research · Bug bounty platform records (HackerOne, Bugcrowd, etc.) · Security conference talks or published technical write-ups · Red team / penetration testing engagements with verifiable references · Relevant...

I'm looking for an experienced website tester for my e-commerce site. The testing should cover the following aspects: User Interface and Experience: - Ensure the site is intuitive and user-friendly - Check navigation, layout, and overall user journey Functionality: - Test all features to ensure they work as intended - Identify any broken links or errors Security: - Assess the site for vulnerabilities - Ensure customer data protection and secure transactions Testing should be done on tablet and mobile devices. Ideal skills and experience: - Proven experience in testing e-commerce sites - Strong understanding of UI/UX principles - Familiarity with security testing tools and methodologies

Software tool for merchandisers I want an app that helps merchandisers find the items they merchandise. The app must accurately display the locations of each item no matter how small or big it is through either its article number or its barcode. I want the app to be able to link to multiple company databases but never without the proper authorisation from the company itself. It must only pick up items once scanned in by that companies stock controller and must work in synchronisation with the company system to track where the stock is at all times up until it is scanned by the till point. Once checked out by the till point, it must no longer display where the item is. The app must be able to work seamlessly with whatever company system it comes into contact with. Your job will be to figu...

We are launching a new web application. It is to help hosts manage events. It is a small application (first release) with a form for host to create, share the link, allowing guests to respond. Also there are email notifications. The requirements are not explicitly specified. Tester will have to understand the functionality and test. There is a SQL server backend application, hosted on Godaddy. Tester must test for security risks, vulnerability, unauthorised access, encryption, confidentiality, leakages, cyber security / penetration. Tester will also have to find out issues with coding standards, cookies, encryption in data exchange to ensure that plain data is not saved or transferred. The application is mobile/desktop/devices compatible. And needs to be tested on those. Tester will ...

Our in-house team is wrapping up a custom lending portal that consolidates every stage of the loan lifecycle and provides separate dashboards for investors, borrowers, and brokers. Because the platform stores and exchanges highly-sensitive documents—personal IDs, financial records, and legal agreements—I need an independent specialist to run a single, thorough security review right before we move to production. My top priority is verifying that data encryption is rock-solid at rest and in transit. In addition, each role (investor, borrower, broker) has its own workflow, so you’ll need to confirm that our access-control logic keeps information strictly segregated. What I expect from you • Pen-test and code-level review focused on encryption implementation (TLS, ke...

I need a review and court admissible report regarding evidence of malware infections obtained through EIFT backups and Amnesty MVT scans, including iOS-specific system files showing Operation Triangulation spyware. Key Requirements: - Analyze executable files (.exe, .dll, .bat) - Focus on spyware detection and analysis - Proficiency in iOS system file interpretation Ideal Skills: - Cybersecurity expertise - Experience with malware and spyware analysis - Familiarity with iOS operating systems and file structures - Strong analytical and reporting skills Please provide samples of previous work in malware analysis and relevant qualifications.

I’m looking for an experienced full-stack developer to help me finish and professionally stabilize an existing SaaS product called Neirom. Neirom is already largely built and live. This is not a project starting from zero, and I do not want a complete rebuild. I need someone who can review the existing codebase, understand what is already working, fix the remaining problems, improve performance and reliability, and bring the product to a professional production-ready standard. Current Stack / Integrations Include: - React / TypeScript - Supabase / PostgreSQL - Lovable - Anthropic AI API - Paddle payments - Resend email - Shopify OAuth, product sync, and webhooks - Etsy OAuth/API integration - GitHub What I Need: 1. Full technical audit of the existing application. 2. Fix bugs and ...

I have built two independent FinTech solutions that I plan to submit to the Bank of Jamaica’s regulatory Sandbox. Before I take that step, I need a fresh set of expert eyes to validate two things: 1. The overall security posture of each application. 2. Their alignment with Jamaican and international regulations covering Data Protection & Privacy, Anti-Money Laundering (AML), and Electronic Payments & Transactions. You will receive architecture diagrams, user flows, API documentation and direct access to a staging environment for both apps. I am specifically interested in whether my encryption strategy, authentication logic and general vulnerability surface meet current industry best practices (OWASP Top 10, ISO 27001, PCI DSS, etc.). On the compliance side, I want a clear...

I have a handful of projects that I'm working on via LLM up to this point, and I've found critical errors in the testing it designed for the debugging process in one, so I need them all audited to make sure they so what they're intended to do and there are no back doors or other issues written into the code that will compromise potential user security or core functionality. I will need to maintain IP ownership of any and all parts of this project in perpetuity, so that will need to be agreed to explicitly in writing. Reviewer will be first choice for any work to be done on the apps. I know the network monitor is fairly buggy, but the anti-surveillance tool appears to be working. Need a second set of eyes though, as my technical acumen is not very advanced, hence using LLM o...

Necesito asistencia de un hacker ético para retirar por completo un software MDM modificado de un teléfono Xiaomi. El dispositivo corre HyperOS 3.0.301.0 y actualmente sufre seguimiento y monitoreo no deseado. Lo que busco: • Análisis del firmware y detección de todos los módulos MDM instalados. • Eliminación segura sin dejar rastros que reactiven el control. • Preservar datos personales, cuentas y funcionalidad de MIUI/HyperOS. • Guía paso a paso para que pueda repetir el proceso en caso de futuras actualizaciones. • Comprobación final: el teléfono no debe comunicarse con servidores MDM ni mostrar certificados, perfiles ni apps ocultas asociadas. Trabajo remoto. Puedo proporcionar acceso ...

Mi móvil Xiaomi presenta signos claros de compromiso. Un informe de seguridad externo confirmó que hay acceso remoto activo, software modificado y un perfil MDM que otorga control total del dispositivo. Busco a un hacker ético que pueda: • Examinar a fondo el firmware, las apps instaladas y los perfiles de administración (MDM) para localizar cualquier puerta trasera. • Eliminar o neutralizar el software modificado y deshabilitar el control MDM sin perder datos críticos. • Cerrarme el acceso remoto y asegurar la integridad del sistema, incluyendo bootloader, recovery y capas de MIUI. • Entregarme un informe claro con hallazgos, pasos realizados y recomendaciones para mantener el teléfono protegido. Trabajo 1...