Security Auditing Jobs

The two apps, shared backend and admin portal are already built, working and functionally complete. We need an experienced engineer or accountable team to perform final hardening, verify release readiness and complete a controlled release. SYSTEM - Two apps: customer-facing and sales/service. - One shared Node.js/Express + PostgreSQL backend with Stripe. - A thin React admin portal using the same backend. - React Native/Expo mobile code is part of the existing system. - Existing source code, automated tests, CI and written release procedures will be provided under NDA. A substantial amount of code was developed with AI assistance and needs independent engineering review. FINAL SCOPE 1. Review the existing code across both apps, backend and admin portal; produce file-specific findings, pr...

My WordPress site is currently offline after malicious files were discovered on the server. I need it cleaned and brought back online, but more importantly I want to stop this from ever happening again. The immediate focus is firewall and server-side security; user authentication tweaks and data-at-rest encryption can follow once the house is no longer on fire. There are no security plugins installed yet, so you’ll be working from a clean slate. Feel free to recommend and configure the tools you trust most—Wordfence, Sucuri, ModSecurity, Fail2Ban, or a custom stack—as long as the final setup keeps attacks out and performance intact. Acceptance criteria • Every malicious file and injected line of code is removed, with the site fully functional and reachable. &bu...

Need an experienced JavaScript / web security developer. We have a complex web page with advanced client-side JS challenge. Require to analyze the JS logic, understand the browser fingerprint mechanism. Need to build a solution that can simulate real browser environment and generate valid tokens. Only developers with Akamai related experience please bid. Please mention your similar past work in your proposal. We can provide test target for qualified candidates.

I’m rolling out a new crypto wallet and need a production-ready smart contract written for Binance Smart Chain. The contract has to handle full token management, cover all transaction handling logic, and include a built-in multi-signature layer for extra security. Here’s how I picture the collaboration: • Token management should support minting, burning, transfers, and allowances in line with the BEP-20 standard (or an equivalent custom approach if you believe a tweak would be safer or more gas-efficient). • Every critical action needs event logging so the front-end can surface real-time status updates to users. • Multi-signature approval must gate high-value actions such as owner transfers or contract upgrades. A simple n-of-m schema is fine as long as sig...

I need a seasoned cloud-security specialist to give my Oracle Cloud Infrastructure and Google Cloud Platform estates a thorough health check, then guide me toward a Zero Trust posture. First, you will assess both environments end-to-end—identity and access, network controls, data-at-rest and in-transit encryption, logging/monitoring pipelines, and workload configuration—mapping every finding to current best practice and the relevant CIS Benchmarks. Next, I expect a concise report that clearly separates quick-win remediations from deeper, strategic fixes. Each item must carry a risk rating, the exact remediation steps, and any references to supporting documentation or Terraform snippets where useful. Finally, translate the recommendations into a phased Zero Trust Network ...

My production site runs on the React JS on the client, a Node.js/Express API, and MongoDB for persistence. After an external audit with another freelancer I now have a clear list of security weaknesses and several functional bugs that escaped earlier testing. Most of the issues sit in server-side logic: exposed endpoints that bypass auth checks, insecure data validation, and some race-condition edge cases that crash certain requests. On the client, a few components render unpredictable states after failed API calls, so error boundaries and tighter state management will need attention as well. I will share the exact findings (code snippets, Postman collections, and a short Loom walkthrough) at project start. All fixes must be applied directly to the production branch via fork-and-PR so I...

I'm the founder of NILQuant, an independent record for NIL deals in college athletics. We're looking for a qualified, independent reviewer for a scoped technical review of our core verification engine before its first production release. Scope (summary; full scope attached): - Rebuild our PostgreSQL database from its migration files on your own machine and repeat our test suite and reproduction kit - Check append-only history, two-person release controls, fingerprinting (SHA-256), school-to-school data isolation and a scoped verification API - Test the hosted demo with six test accounts (no admin access) and try to break the controls - Confirm our outside timestamping and write-once storage settings - Written findings, one retest round and a signed scoped conclusion All data is...

I’m ready to launch a brand-new cryptocurrency with a fixed maximum supply of 10 billion coins and I don’t want to piggy-back on Ethereum, BSC or Polkadot—I need an independent chain built from the ground up. The core purpose of the coin is to power smart-contract execution, so the chain architecture, virtual machine and fee model all have to be optimized for that use-case. What I already have in mind • Tokenomics: 10 billion total supply, no more, no less. • A smart-contract–friendly environment that can rival EVM chains in speed and cost. • Room to evolve into DeFi utilities later on. Where I need your expertise I’m looking for end-to-end technical guidance and implementation: choosing or designing the right consensus layer, writing ...

Please Sign Up or Login to see details.

My site is already live and collecting customer information, but the current safeguards are minimal. I need an experienced cybersecurity professional to focus exclusively on data protection: assessing the way customer details are stored and transmitted, closing any gaps you identify, and putting long-term controls in place so the data stays safe even as the site scales. What I expect • A concise risk assessment of my existing environment (server, database, APIs, third-party plugins). • Implementation of best-practice controls—end-to-end encryption (SSL/TLS), database hardening, access-control policies, secure backups, and monitoring or alerting tools you feel are essential. • A short validation report or penetration test summary confirming the fixes are effectiv...

My Shopify store needs a thorough tune-up. I’m looking for someone who can run a complete security and performance audit, then tackle the specific problems I’m facing: • Security: I’m worried about virus or malware infections, possible unauthorized access and any avenue for data breaches. I want the store scanned, cleaned and hardened without disrupting day-to-day trading. • Performance: page-speed has dipped; I’d like clear recommendations and the quick-win fixes implemented. • Metafield cleanup: there are piles of legacy metafields from old apps. Please identify what’s safe to delete and tidy them up so the theme and admin stay lean. • Theme maintenance: several theme sections throw “block reference” errors after a rece...

I have a complete code-base that now needs to live on a cloud server. The immediate goal is twofold: 1) install and configure the application so it runs reliably in the cloud environment I provide, and 2) comb through every file, dependency, and configuration to confirm there are no hidden backdoors, malicious packages, or insecure default settings left behind after development. I’m deploying to a cloud server (provider is flexible, so please be comfortable with AWS, Azure, or GCP). You’ll set up the runtime stack, handle environment variables, connect the database, and push the first production build. While doing so, perform a thorough security audit: manual inspection, automated scanners, and any static-code-analysis tools you trust. If something suspicious appears, docu...

JOB OPPORTUNITY – ETHICAL HACKING / CYBERSECURITY We are looking for a skilled Ethical Hacker / Cybersecurity Specialist to help improve and strengthen the security of our website. The main responsibilities include: - Identifying potential security vulnerabilities - Conducting authorized security assessments - Testing website security and identifying weaknesses - Providing recommendations to improve overall cybersecurity - Helping implement appropriate security measures Requirements: - Good knowledge of Ethical Hacking and Cybersecurity - Practical experience in website security and penetration testing - Strong understanding of web application security - Responsible and professional approach to security testing If you have the required skills and experience, please contact us. ...

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside. Here is what I expect: • A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices. • A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework. • A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and sugg...

I have a full-stack Java codebase that I need set up, walked through, and examined from top to bottom. My first priority is uncovering any security vulnerabilities or hidden backdoors, so you will need to comb through the entire stack—server-side, client-side, build scripts, and deployment configs—looking for risky patterns, outdated dependencies, or suspicious commits. Once the security sweep is complete, I also want your eye on execution speed. Any hotspots that slow response times, blocking calls, or inefficient algorithms should be flagged with clear, actionable fixes. You are welcome to profile locally or spin up a test environment; I’ll provide repo access and a clean VM image so you can reproduce the build. Deliverables • Written audit report that lists ev...

I want complete peace of mind that my personal iPhone & android Samsung is fully locked down against hackers. The job is straightforward: audit every setting, app permission, network profile, and cloud-sync option on the device; fix or guide me to fix anything that leaves an opening; and finish with a clear summary of what was changed and why. Because this is for personal use, I’m focused on practical, real-world protection rather than corporate compliance checklists. Expect to work directly with me over a secure video or messaging channel so I can follow along while you adjust settings such as Face ID, two-factor authentication, iCloud Keychain, Wi-Fi/cellular profiles, and any third-party security apps you recommend. Deliverables • A live, step-by-step hardening se...

I want a seasoned penetration tester to put my PHP site through its paces and uncover every weakness, from classic SQL Injection and XSS to more sophisticated remote-code tricks. The public-facing pages matter, but my priority is the admin panel. Within that area I rely heavily on three features—CRUD data operations, role and permission management, and a file-upload module—so those have to be stressed especially hard. Your job is to simulate real-world attacks with tools of your choice (Burp Suite, OWASP ZAP, manual source review, custom exploit scripts—whatever gets the most reliable results) and then document each vulnerability with a clear proof-of-concept, reproducible steps, severity rating, and a practical fix I can hand straight to my developer. Deliverables &b...

I recently replaced my phone and lost the Microsoft Authenticator configuration that protects my Outlook email account. Since the app was my only two-factor method, I’m now locked out. I need someone who knows the ins and outs of Microsoft Authenticator, Outlook sign-in security, and account recovery workflows to guide me through regaining full access. The focus is strictly on recovering the account, not on setting up new devices or general troubleshooting. We’ll work together in real time (screenshare or chat—whatever you recommend) to: • Navigate Microsoft’s recovery pages • Prove ownership with any backup codes or alternative verification routes that may still be available • Re-establish two-factor authentication on my new phone once ac...

About the project: We are looking for an experienced **web application penetration tester** to conduct an independent security assessment of a SaaS platform. The application is a business management platform with authenticated user accounts, document handling, portals, workflows, messaging and APIs. Further details about the application and functionality will be provided to shortlisted candidates. Scope: The assessment should cover the web application and relevant APIs, including authenticated functionality. Areas of interest include: * Authentication and session management * Authorisation and access controls * Horizontal and vertical privilege escalation * IDOR / BOLA vulnerabilities * OWASP Top 10 * API security * Input validation and injection vulnerabilities * Cross-site script...

A recent scan showed a malicious code injection on one of the key pages of my custom-built PHP application, hosted on a dedicated AWS EC2 server. We cleaned the malware and found and patched the loophole. But then it came back and another loophole surfaced. I need an experienced security specialist to scan the entire server for malware and set up ongoing monitoring so this doesn’t resurface. Scope of work • Remove every trace of the current infection from both codebase and filesystem. • Audit the full stack, server configuration, and access logs to pinpoint the exact attack vector. • Patch or re-architect the vulnerable component you identify, then harden the server (SSH, firewall, file permissions, intrusion detection, etc.). • Deploy continuous monitoring and a...

Devo sottoporre la mia rete aziendale a un test di penetrazione esterno per individuare e correggere eventuali vulnerabilità prima che lo facciano i criminali informatici. Cerco un professionista della sicurezza informatica con comprovata esperienza in penetration testing su infrastrutture corporate. Il focus è esclusivamente sul perimetro esterno: firewall, VPN gateway, servizi esposti in DMZ e qualsiasi altra porta o applicativo accessibile da Internet. Mi aspetto che tu: • conduca la fase di information gathering e scanning (ad es. con Nmap, Masscan) • esegua l’exploitation controllata con strumenti come Metasploit, Burp Suite o analoghi, mantenendo traccia di ogni passo • rediga un report tecnico in italiano che includa: descrizione delle vuln...