Information Security Projects on Upwork

Join our team as a Security Engineer to enhance our AWS and application security. You'll work closely with our DevOps team to implement security best practices, conduct vulnerability assessments, and ensure compliance with security standards. This role requires a proactive approach to identifying and mitigating security risks.

About Us

We are a cloud consulting and technology transformation company that helps organizations modernize applications, data platforms, analytics, and AI solutions on AWS.

Our team works with customers across multiple industries to design, build, and operate secure cloud environments, enterprise data platforms, and AI-powered solutions. As we continue expanding into regulated industries, we are investing in a comprehensive HIPAA compliance program to support healthcare customers while maintaining strong security, governance, and operational standards.

We are looking for an experienced consultant who has successfully guided technology organizations through HIPAA readiness and can help establish a practical, scalable compliance program.

About the Engagement

This is a hands-on consulting engagement where you will assess our current environment, identify compliance gaps, and lead the implementation of the processes, documentation, and security controls required to support HIPAA-regulated customers.

You will work closely with company leadership, engineering, cloud, operations, and HR teams to build a compliance program that becomes part of our day-to-day operations rather than a one-time documentation exercise.

What You'll Do

• Assess how our services, internal operations, and cloud environments align with HIPAA requirements.
• Identify areas where protected health information (PHI) could be created, received, accessed, maintained, or transmitted.
• Conduct a comprehensive HIPAA Security Risk Analysis and develop a prioritized remediation roadmap.
• Design practical governance, security, and operational processes that support long-term compliance.
• Develop the policies, procedures, and documentation required for HIPAA readiness.
• Review our cloud security architecture and recommend improvements aligned with HIPAA safeguards.
• Establish processes for vendor management, Business Associate Agreements (BAAs), workforce training, and compliance monitoring.
• Guide implementation efforts across technical and operational teams.
• Provide executive-level recommendations and validate readiness once remediation activities are complete.

What We're Looking For
• Extensive experience leading HIPAA readiness or compliance programs for technology companies, SaaS providers, consulting firms, managed service providers, or Business Associates.
• Strong understanding of the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.
• Experience conducting HIPAA Security Risk Analyses and translating findings into practical implementation plans.
• Knowledge of cloud security, governance, and modern infrastructure environments, preferably AWS.
• Ability to work comfortably with both executive leadership and technical delivery teams.
• Excellent communication and documentation skills.

Preferred Experience
• AWS cloud security and governance
• Healthcare technology or digital health organizations
• NIST Cybersecurity Framework and NIST guidance for implementing HIPAA security requirements
• SOC 2 implementation or audit readiness
• HITRUST familiarity
• Certifications such as HCISPP, CISSP, CISM, CISA, CHPS, or similar

Expected Deliverables
By the end of the engagement, you should have delivered:
• HIPAA applicability and scope assessment
• HIPAA Security Risk Analysis
• Compliance gap assessment
• Prioritized remediation roadmap
• HIPAA policy and procedure framework
• Vendor and BAA management process
• Workforce training recommendations
• Compliance evidence repository structure
• Executive readiness report with implementation recommendations

Why Join This Project
This is an opportunity to build a HIPAA compliance program from the ground up for a fast-growing cloud consulting organization. You'll work directly with leadership, influence company-wide security and governance practices, and establish a scalable framework that supports future healthcare customers.

Project Overview
We are building a B2B SaaS compliance automation platform for the German Mittelstand. We need an experienced German-native GRC expert to lead the framework interpretation and implementation work that turns regulatory text into machine-readable controls, evidence mappings, GRC workflows and audit-ready product artefacts. This is a mixed engagement combining hands-on authoring, methodology validation and pre-launch sign-off. You will be a core contributor to what ships in the product.

Scope of Work: Framework Interpretation Core
* Decompose the regulatory text of ISO 27001, TISAX (VDA-ISA 6.0), NIS2 (including NIS2UmsuCG) and GDPR into discrete, testable control statements in structured JSON.
* Define evidence-type ontologies specifying what evidence satisfies each control, mapped to standard source systems (Microsoft 365, Entra ID, HRIS, cloud providers).
* Build cross-framework mapping tables so the same evidence can satisfy multiple frameworks at once.
* Author programmatic test procedures for each control (query logic, pass/fail criteria, edge cases, remediation guidance).
Scope of Work · GRC Workflow Modules
* Design risk assessment methodology plus risk register templates (ISO 27001 Clause 6, NIS2 Article 21(2)(a)).
* Design Third-Party Risk Management workflows and vendor risk assessment templates (GDPR Article 28, ISO 27001 A.5.19 to A.5.22, NIS2 supply chain security).
* Author incident response plan templates and reporting timeline workflows (NIS2 24-hour early warning / 72-hour notification / 1-month final report, GDPR 72-hour breach notification).
* Design asset inventory schema plus classification model (ISO 27001 A.5.9, NIS2 asset visibility requirements).
* Design GDPR Article 30 Records of Processing Activities structure, data flow mapping templates and DPIA workflow.
* Author Business Continuity Plan templates and Disaster Recovery test workflows (ISO 27001 A.5.29 to A.5.30, NIS2 Article 21(2)(c)).
* Design training and awareness tracking data model with per-role curricula per framework (ISO 27001 A.6.3, NIS2 Article 21(2)(i)).
* Design internal audit / self-assessment workflows including gap analysis and remediation tracking.

Scope of Work: Product Content
* Draft 15 to 20 core policy templates per framework in native German (DIN 5008 formatting).
* Write native-German UI copy for controls, evidence prompts and remediation guidance.
* Design auditor-facing evidence pack templates (PDF and Excel) formatted for VDA, DEKRA, TÜV and DQS style.

Scope of Work: Validation and Launch
* Validate the framework interpretation with 2 to 3 design partner compliance owners and coordinate an external auditor review.
* Sign off on the methodology for the first production release.
* Establish ongoing regulatory monitoring cadence (BSI, DSK, ENISA, EC delegated acts, VDA publications).
* Support customer success and sales on compliance questions, RFP answers and security questionnaire responses post-launch.

Required Qualifications
* Native German (C2) plus fluent business English (C1 minimum).
* 5+ years hands-on experience in information security compliance in DACH.
* ISO 27001 Lead Auditor certification (mandatory).
* TISAX assessor experience or equivalent VDA-ISA depth (strongly preferred).
* Practical familiarity with NIS2 implementation in Germany (NIS2UmsuCG, BSI KRITIS regulations).
* Solid GDPR technical-controls understanding (data protection by design, Article 32, Article 30 RoPA).
* Experience designing GRC workflows (risk register, TPRM, incident response, BCP) inside a product or ISMS.
* Comfort with structured content authoring (JSON, YAML, control catalogs).
* Excellent use of AI tools.
* Ability to work with product and engineering teams to translate regulation into machine-testable form.

Duration and Commitment
Mixed engagement, project-based deliverables plus ongoing part-time retainer.
* Phase 1 (weeks 1 to 4): Framework authoring.
* Phase 2 (weeks 5 to 11): Product content plus validation.
* Ongoing after launch: retainer for regulatory monitoring, framework updates and customer/sales support.

Rate
Open to discussion based on scope, experience and availability. Please indicate your preferred rate structure in your application: daily rate, monthly retainer or hybrid.

Location and Working Mode
Remote-first, DACH-based preferred. Working language with the engineering team is English. All source material and product content is bilingual (German first, English second).

Confidentiality
NDA required before any specific framework interpretation, product architecture or customer details are shared.

How to Apply
Send a short message including:
1. Which of the four frameworks (ISO 27001, TISAX, NIS2, GDPR) you consider your primary depth.
2. A specific example of a framework interpretation, GRC workflow design or control catalog you have authored (redacted if under NDA).
3. Your availability window and preferred engagement structure.
4. Your rate expectations. Please be very clear about this.

What I need help with:
∙ Technical architecture recommendations for HIPAA compliance
∙ Secure backend/database design
∙ Frontend development (web app, mobile-friendly)
∙ Guidance on BAAs, hosting providers (e.g., AWS/GCP HIPAA-eligible services), and audit logging
∙ Ongoing development support as the product grows
Nice to have: prior experience with EHR-lite tools, patient portals, or scheduling/notes apps for independent practitioners.
Please share relevant experience, examples of past HIPAA-compliant work, and your suggested approach.

The Role
We are seeking an experienced Security Operations Center (SOC) professional and educator to lead our new SOC Analyst training program. This is a unique opportunity for an instructor who has already developed a comprehensive SOC Analyst curriculum and is looking for a platform to deliver it.

You will not be building a course from scratch for us; instead, you will bring your proven, pre-existing training materials, slide decks, and hands-on lab environments to train our students. Your goal is to take professionals from diverse backgrounds and equip them with the practical skills needed to pass interviews and excel as Tier 1/Tier 2 SOC Analysts.

Key Responsibilities
Curriculum Delivery: Utilize your pre-existing, turn-key SOC Analyst training content to instruct cohorts of career-transitioning students.

Hands-on Training: Lead students through practical exercises involving SIEMs (e.g., Splunk, Sentinel), EDR tools, packet analysis (Wireshark), and incident response workflows.

Content Maintenance: Ensure your proprietary curriculum remains up-to-date with the latest threat landscapes, attacker tactics (MITRE ATT&CK), and industry tooling.

Mentorship & Coaching: Provide guidance, feedback, and career advice to students who are navigating the transition into the cybersecurity field.

Assessment: Evaluate student performance through your established quizzes, practical labs, and capstone projects to ensure they are job-ready.

Required Qualifications
Pre-Existing Curriculum: You must have a fully developed SOC Analyst course ready for deployment, including syllabi, lecture materials, and practical lab exercises.

Industry Experience: Minimum of 3+ years of active experience working in a Security Operations Center as a Tier 2/Tier 3 Analyst, Incident Responder, or SOC Manager.

Teaching Experience: Proven track record of teaching, mentoring, or training individuals in cybersecurity concepts, specifically those with non-technical backgrounds.

Technical Proficiency: Deep understanding of network traffic analysis, log aggregation/correlation, phishing analysis, and malware triage.

Communication: Exceptional ability to break down highly technical and complex concepts into digestible, accessible lessons for beginners.

# AI-Powered Customer Operations Coordinator

## Daily Eastern Time Coverage, Weekends and Remote Desktop

I am seeking a highly dependable, detail-oriented **Customer Operations Coordinator** to help manage customer communications, administrative workflows, CRM updates, scheduling, documentation, and other day-to-day operational tasks for my mobile app startup.

This is a long-term role for someone who is exceptionally strong at using **ChatGPT and other AI tools to independently complete business tasks**.

You will often receive a general direction, screenshot, customer thread, transcript, or brief explanation of the desired outcome. You will be expected to use ChatGPT effectively to understand the context, determine the appropriate steps, prepare polished work, and complete the assignment with limited supervision.

This is not a basic data-entry position. The successful candidate will use AI throughout the day as a central part of their workflow while applying strong judgment, attention to detail, and professional communication skills.

## Required Daily Schedule

You must be consistently available during both of the following one-hour working shifts:

* **8:00–9:00 a.m. Eastern Time every day**
* **8:00–9:00 p.m. Eastern Time every day**

This includes Saturdays and Sundays.

During both shifts, you will be expected to actively:

* Review incoming emails and Slack messages
* Check assigned tasks and operational queues
* Complete routine and time-sensitive requests
* Identify matters requiring follow-up
* Escalate questions that cannot be resolved independently
* Confirm that previously assigned work has been completed

These are active working periods, not simply times when you should be reachable.

Additional tasks outside these two daily shifts may generally be completed asynchronously at times convenient for you, provided all deadlines and turnaround expectations are met.

Additional overlap with Eastern Time business hours, particularly **10:00 a.m.–3:00 p.m. Eastern Time**, would be helpful but is not required. The two daily one-hour shifts are mandatory.

## Heavy ChatGPT and AI Usage

A major part of this role involves using ChatGPT to turn brief or incomplete instructions into polished, accurate work.

Examples may include:

* Reviewing a customer email thread and preparing an appropriate response
* Reading a meeting transcript and creating structured CRM notes
* Drafting a follow-up email from a screenshot and limited context
* Preparing an agreement using terms provided in a conversation
* Summarizing meetings and identifying decisions, owners, and action items
* Researching an unfamiliar topic and recommending a practical next step
* Turning a general idea into a complete process, document, message, or plan
* Comparing information across emails, transcripts, spreadsheets, and CRM records
* Improving rough writing so it sounds natural, professional, and persuasive
* Identifying missing details, inconsistencies, or possible errors
* Creating reusable prompts, templates, checklists, and procedures

You should know how to:

* Write effective prompts
* Provide AI with the necessary background and context
* Upload and analyze documents, screenshots, transcripts, and email threads
* Ask ChatGPT to identify contradictions or missing information
* Refine an initial response until it is useful and accurate
* Maintain context across a multi-step assignment
* Verify names, dates, numbers, terms, links, and instructions
* Recognize when an AI response is generic, incorrect, or unsupported
* Adapt communication to the specific customer and situation
* Use AI to solve unfamiliar tasks rather than waiting for detailed instructions

Copying and pasting the first ChatGPT response will not be acceptable.

You must review all AI-generated work, correct mistakes, personalize the content, and ensure the finished result fully addresses the assignment.

## Primary Responsibilities

### Customer Communication

* Review shared Gmail inboxes, text messages, Teams, WhatsApp, and other communication channels
* Process new messages during both required daily shifts
* Draft professional and personalized emails and text messages
* Use ChatGPT to interpret conversation history and prepare suitable responses
* Respond to routine customer questions using approved information
* Follow up with customers and prospects who have not responded
* Prepare polite but firm payment and documentation reminders
* Keep unresolved or actionable communications visible until completed
* Escalate sensitive, unusual, or unclear matters when necessary

### Customer and Sales Operations

* Prepare agreements using the correct services, pricing, discounts, payment schedules, and terms
* Send customers appropriate agreement, scheduling, and payment links
* Coordinate customer introductions, onboarding, and handoffs
* Prepare onboarding communications for customers and internal team members
* Confirm that all required recipients, links, attachments, and sections are included
* Track outstanding agreements, payments, follow-ups, and next steps
* Review available information carefully instead of making unsupported assumptions

### CRM and Administrative Support

* Update HubSpot or similar CRM systems with accurate notes and customer information
* Review call and meeting transcripts and prepare comprehensive summaries
* Maintain spreadsheets, trackers, task lists, and process documentation
* Create and update calendar invitations
* Confirm time zones, attendees, meeting links, and appointment details
* Prepare concise meeting summaries and action items for internal channels
* Assist with research, online forms, recruiting, vendor outreach, and other operational projects
* Complete work through secure remote systems when required

### Writing and Quality Control

* Use ChatGPT extensively to draft messages, summaries, agreements, plans, and documents
* Turn broad instructions into complete deliverables
* Edit and review every AI-generated output
* Write in clear, natural, professional English
* Personalize communications rather than using generic templates
* Proofread names, dates, amounts, recipients, links, punctuation, and formatting
* Follow established procedures and retain corrections
* Avoid repeating previously identified mistakes
* Verify that every part of an assignment has been completed before marking it finished

## Remote Desktop and VPN Access

Some work must be completed through secure company systems accessed remotely.

You must be comfortable:

* Logging into a remote desktop
* Connecting through a VPN
* Using remote-access software to work within another computer environment
* Accessing company systems and accounts securely
* Following confidentiality and information-security procedures
* Troubleshooting basic connection, browser, login, and session issues
* Working efficiently through remotely accessed applications

You must have:

* A reliable computer
* Stable high-speed internet
* A private and dependable work environment
* The ability to protect confidential customer and company information

Previous experience with remote desktops, VPNs, virtual machines, or cloud workstations is strongly preferred.

## Tools You May Use

Experience with some of the following is preferred:

* ChatGPT
* Claude, Gemini, or similar AI platforms
* Remote desktop and VPN software
* Gmail and Google Calendar
* HubSpot or another CRM
* Microsoft Teams
* Google Docs and Google Sheets
* Zoom
* Business texting platforms
* WhatsApp
* Freshdesk or another customer-support platform
* Upwork
* Password-management software

## Ideal Candidate

The right candidate will be:

* An advanced and frequent ChatGPT user
* Resourceful and comfortable solving unfamiliar tasks
* Able to work from general direction rather than step-by-step instructions
* Exceptionally dependable and consistent
* Available for both mandatory Eastern Time shifts every day
* Comfortable working Saturdays and Sundays
* Comfortable using a remote desktop and VPN
* Strong in written English
* Detail-oriented and careful with customer-facing work
* Able to manage numerous small tasks without overlooking them
* Proactive about identifying incomplete or overdue work
* Comfortable exercising reasonable judgment while knowing when to escalate
* Able to learn and retain detailed procedures
* Professional when handling confidential company and customer information
* Experienced in customer operations, sales operations, administration, CRM management, or executive support

This role is not suitable for someone who:

* Cannot consistently commit to both daily working shifts
* Is unavailable on weekends
* Has only basic familiarity with ChatGPT
* Sends AI-generated content without reviewing it
* Requires detailed instructions for every assignment
* Frequently becomes unavailable without notice
* Needs repeated reminders to finish work
* Marks tasks complete without verifying all requested components
* Is uncomfortable using a remote desktop or VPN

## Hours and Compensation

The position includes:

* A minimum of two scheduled working hours each day
* One shift from 8:00–9:00 a.m. Eastern Time
* One shift from 8:00–9:00 p.m. Eastern Time
* Additional asynchronous hours based on workload
* Optional additional overlap between 10:00 a.m. and 3:00 p.m. Eastern Time

Please include:

* Your hourly rate
* Your location and time zone
* The local times corresponding to the two mandatory shifts
* Confirmation that you can work both shifts seven days per week
* Your preferred total weekly hours
* Any additional availability between 10:00 a.m. and 3:00 p.m. Eastern Time
* Any commitments that could interfere with the required schedule

We are seeking someone interested in building a stable, long-term working relationship

## How to Apply

Begin your proposal with the words **“AI Operations Coordinator”** so we know you read the complete posting.

Please answer the following:

1. Can you work from 8:00–9:00 a.m. and 8:00–9:00 p.m. Eastern Time every day, including weekends?
2. What exact times would those shifts be in your location?
3. Are there any days when you could not consistently work these shifts?
4. How much additional overlap can you provide between 10:00 a.m. and 3:00 p.m. Eastern Time?
5. Describe your experience managing email, customer communications, CRM updates, scheduling, agreements, or operational workflows.

## Practical Application Test

A customer has not paid an overdue expense. The company wants to resolve the issue without disrupting the services currently being provided.

Draft a short text message to the customer that is polite, personal, and appropriately firm.

Then briefly explain:

* The prompt you would give ChatGPT
* What you would review or change before sending the message
* What information you would verify first

Applications that do not answer the questions or complete the practical exercise will not be considered.

We are seeking an experienced developer to build a cyber security platform on the Cloud. The ideal candidate will have at least 10 years of experience in cyber security and platform development. Responsibilities include designing and implementing secure cloud infrastructure, conducting penetration testing, and ensuring compliance with security standards. The candidate should be able to work independently.

We are seeking a Claude (Anthropic) Certified Senior AI Automation & Security Architect to enhance our real estate investment and construction company. The role involves utilizing GHL to streamline processes and ensure security. The ideal candidate will have experience in AI automation and security, with a focus on real estate applications.

My WordPress website has been compromised and needs to be restored as soon as possible.

Website: https://advokat-chorney.com/

## Scope of Work

* Restore the website after the hack.
* Remove all malware, backdoors, and malicious code.
* Secure the website to prevent future attacks.
* Perform a comprehensive technical audit of the website.
* Perform a comprehensive SEO audit of the website.
* Verify that the website is fully functional after recovery.

## Deliverables

At the end of the project, I expect a detailed report covering:

* What caused the security breach (if identifiable).
* What malware or vulnerabilities were found.
* What actions were taken to restore and secure the website.
* Results of the technical audit, including issues found and recommendations.
* Results of the SEO audit, including issues found and recommendations.
* Best practices and recommendations for ongoing website maintenance and security.

I will provide the selected freelancer with hosting access (and any additional access required) after hiring.

## Requirements

* Proven experience with WordPress malware removal and hacked website recovery.
* Strong knowledge of WordPress security best practices.
* Experience performing technical and SEO audits.
* Ability to start immediately.

This is an urgent project, so please include your estimated turnaround time in your proposal.

i need to recover account of mine on instagram thank you

Job Description

We are looking for an experienced Meta/Facebook Account Recovery Specialist who has successfully handled hacked Facebook accounts, disabled accounts, Meta Business Manager ownership issues, and verified Facebook Pages.

Background

The original owner of our Meta Business is Yousafzai Mehran.

His personal Facebook account was hacked. After the hack, Facebook permanently disabled his account.

That account was the owner of our Meta Business assets, including:

Verified Facebook Page Inspired Jackets (Blue Tick)
Multiple Facebook Pages
Meta Business Manager
Other business assets

Our Instagram account (Inspired Jackets) is still active and verified with a Blue Tick.

What Happened

I am Rizwan Khan.

Before the hack, I also had admin access to the Inspired Jackets Facebook Page.

After hacking Mehran's account, the hacker removed me from the Facebook Page and Business assets.

The hacker also invited unknown people to our Facebook Page and business assets.

As a result, we lost ownership and admin control of our Facebook assets.

What We Have Already Tried
Reported the hacked account multiple times.
Used Facebook Hacked Account Recovery.
Contacted Meta Verified Support through live chat.
Contacted Meta Support through email.
Submitted multiple recovery requests.

Facebook can locate the original account, but recovery always stops with:

"Try another device to continue."

Later, Meta informed us that the original Facebook account was permanently disabled.

What We Need

We need an expert who can:

Recover the original Facebook owner account (if possible).
Recover ownership of our Meta Business Manager.
Restore admin ownership of our verified Facebook Page (Inspired Jackets).
Remove unauthorized people added by the hacker.
Guide us through the official Meta recovery and escalation process.
Available Evidence

We can provide:

Meta Support email history.
Meta Verified chat history.
Screenshots of recovery attempts.
Business email.
Government ID of the original owner (if required).
Proof that we own the business and brand.

Please apply only if you have successfully recovered similar Meta Business ownership or hacked Facebook account cases through official Meta channels.

We are looking for an experienced fractional CISO to lead our compliance and certification roadmap on a part-time basis.

What You'll Own

ENS (Esquema Nacional de Seguridad) – Nivel Medio and Alto — Gap assessment, remediation roadmap, documentation (Política de Seguridad, Declaración de Aplicabilidad, Plan de Adecuación), coordination with an accredited auditor/ENtidad de Certificación.
ISO/IEC 27001:2022 — ISMS design, risk register, controls implementation aligned to Annex A, readiness for third-party audit.
EU regulatory compliance applicable to a SaaS vendor — NIS2 Directive (as a digital service provider), ENS alignment with CCN-STIC guidelines, GDPR Article 32 technical measures, and emerging DORA/AI Act applicability assessment.
Security policies & documentation — Write or review all required policies, procedures, and evidence artefacts in Spanish and English.
Vendor & supply chain — Review and advise on our Azure-hosted infrastructure, Windows Agent deployment model, and third-party integrations from a compliance posture perspective.
Customer-facing security — Respond to security questionnaires, due diligence requests, and support pre-sales with public-sector and enterprise prospects.


Required Background

Proven experience achieving ENS Nivel Medio or Alto certification for a SaaS or technology product — please describe the engagement in your proposal.
Deep knowledge of CCN-STIC guides (CCN-STIC-804, 808, 809, 821, etc.) and the RD 311/2022 regulatory framework.
ISO 27001 lead implementer or lead auditor certification (or equivalent hands-on track record).
Familiarity with NIS2 transposition in Spain (Real Decreto-ley pending) and obligations for digital service providers.
Experience operating as a fractional/virtual CISO or compliance consultant for software companies.
Fluent in Spanish (all regulatory documentation is in Spanish);

Nice to Have

Experience with ENS certification bodies (AENOR, Bureau Veritas, SGS, etc.) or direct CCN relationships.
Knowledge of GDPR Article 32 technical controls in a SaaS context.
Familiarity with DORA (Digital Operational Resilience Act) or EU AI Act applicability for data classification tools.
CISM, CISSP, or equivalent credential.

In your proposal, please include:

One or two ENS engagements you have led (company type, sector, level achieved — Básico / Medio / Alto).
Your approach to the gap assessment phase for a cloud-hosted SaaS product.
Your availability and preferred retainer structure (hourly vs. fixed monthly).
Any relevant certifications (CISM, CISSP, ISO 27001 LA/LI, etc.).

Proposals without ENS-specific experience will not be considered.

We are looking for an experienced Spanish (Spain) Localization Proofreader to review professionally localized e-learning content focused on corporate training and information security.

The content has already been translated by a professional linguist following the provided localization guidelines. Your role is to perform a final linguistic quality review to ensure the translation is accurate, natural, culturally appropriate for Spanish (Spain), and ready for delivery.

Responsibilities:

Proofread and review localized content for linguistic accuracy, fluency, and readability.
Ensure compliance with the provided localization guidelines.
Check for grammar, spelling, punctuation, formatting, and consistency.
Verify terminology consistency and maintain the intended tone and style.
Ensure the content is culturally appropriate and natural for users in Spain.
Identify and correct any remaining localization or linguistic issues.

Requirements:

Native speaker of Spanish (Spain).
Proven experience in localization proofreading or LQA.
Experience with e-learning, corporate training, or IT/security content is an advantage.
Excellent attention to detail and consistency.
Ability to deliver high-quality work within agreed timelines.

We are looking for an experienced Dutch Localization Proofreader to review professionally localized e-learning content focused on corporate training and information security.

The content has already been translated by a professional linguist following the provided localization guidelines. Your role is to perform a final linguistic quality review to ensure the translation is accurate, natural, culturally appropriate for Dutch, and ready for delivery.

Responsibilities:

Proofread and review localized content for linguistic accuracy, fluency, and readability.
Ensure compliance with the provided localization guidelines.
Check for grammar, spelling, punctuation, formatting, and consistency.
Verify terminology consistency and maintain the intended tone and style.
Ensure the content is culturally appropriate and natural for users in Dutch.
Identify and correct any remaining localization or linguistic issues.

Requirements:

Native speaker of Dutch.
Proven experience in localization proofreading or LQA.
Experience with e-learning, corporate training, or IT/security content is an advantage.
Excellent attention to detail and consistency.
Ability to deliver high-quality work within agreed timelines.

I am a cybersecurity candidate based in India with hands-on portfolio experience in:

SOC operations and alert triage
Wazuh SIEM/XDR
Detection validation and rule tuning
TheHive, Cortex, MISP and n8n SOAR
AWS security monitoring
Linux security
Incident-response workflows
Python automation
AI-assisted SOC projects

I am looking for an experienced reverse recruiter or job-search strategist to manage a targeted, quality-focused job-application campaign.

This is not a bulk-application project. I do not want hundreds of generic or automated applications. I need carefully selected opportunities, truthful résumé tailoring and accurate application submissions.

Initial target roles
Junior SOC Analyst / SOC Analyst L1
Cybersecurity Analyst
SIEM Analyst
Security Monitoring Analyst
Junior Incident Response Analyst
Junior SOC Engineer
Selected Linux security-operations or junior security-automation roles

The freelancer should also advise me if some of these titles are unrealistic or should be deprioritized.

Target markets
India
UAE
Saudi Arabia
Other suitable GCC markets
Legitimate remote or international positions where my location and work authorization are accepted
Responsibilities

The selected freelancer will:

Review my existing CVs, portfolio documentation and professional profiles.
Recommend realistic job titles, seniority levels and application priorities.
Search company career pages and suitable job boards.
Evaluate each opportunity for technical fit, seniority, location and work-authorization compatibility.
Send suitable jobs to me for approval before applying.
Tailor my résumé truthfully for each approved job description.
Prepare accurate application answers and role-specific cover letters when useful.
Maintain a detailed application tracker.
Save a copy of every tailored résumé and submitted document.
Clearly distinguish portfolio, lab and self-directed project experience from paid production employment.
Review campaign results and recommend changes when the applications are not producing responses.

The tracker must include:

Company
Job title
Location
Job-posting link
Job-description copy
Date identified
Date approved
Date applied
Résumé version used
Cover letter used
Important screening answers
Application status
Follow-up status
Notes
Accuracy requirements

The freelancer must never invent, exaggerate or alter:

Employment history
Production experience
Dates
Certifications
Technical skills
Project outcomes
Salary information
Work authorization
Visa or sponsorship status
Years of professional experience

Claims based on labs, simulations, prototypes or portfolio projects must be described as such.

Application method

Applications must be manually reviewed and quality controlled.

Do not use bots, mass-application systems or browser automation without my prior written approval.

Do not apply to a job until I approve it during the pilot.

I will personally complete applications requiring:

LinkedIn account access
Sensitive personal information
Legal declarations
Electronic signatures
Identity verification
Demographic information
Work-authorization declarations that require confirmation
Initial paid pilot

The first milestone will include:

Review of my existing materials
Positioning and target-role recommendations
Ten approved job applications
A customized résumé for each application
Cover letters where useful or required
A completed application tracker
Copies of every submitted document
A short report explaining the strategy and recommended next steps

The pilot should be completed within 7–10 calendar days after the materials and application criteria are finalized.

Quality is more important than speed. The ten-application pilot may take longer if suitable opportunities are temporarily limited, but this must be communicated before the deadline.

Working arrangement

I expect the selected freelancer to perform the work personally.

Do not subcontract, delegate or assign the applications to another team member without my written approval. Any AI assistance used for résumé drafting must be manually reviewed for accuracy and relevance.

Communication, file sharing and payments must remain on Upwork until a contract is active and Upwork permits otherwise.

Required experience
Reverse recruiting or job-application management
Technical or IT résumé tailoring
Strong written English
Understanding of cybersecurity, SOC or IT infrastructure roles
Experience evaluating job-description fit
Experience maintaining application trackers
Manual and quality-controlled application work

Experience with India, GCC/MENA or international technical recruitment is strongly preferred.

Please answer these questions
Which roles would you prioritize for my background, and why?
Which roles would you avoid or treat as stretch opportunities?
How do you determine whether a job is suitable before applying?
How many genuinely researched and tailored applications can you complete per day?
Describe your résumé-tailoring process.
How do you distinguish lab or portfolio experience from production employment?
Share an anonymized technical résumé example and application-tracker sample.
Have you worked with cybersecurity, IT infrastructure or junior technical candidates?
What experience do you have with India or GCC job markets?
Will you personally perform all the work?
Do you use AI tools, automation or subcontractors? Explain exactly how.
Quote separately for the ten-application pilot and ongoing weekly work.

Required Freelance CPA, residence & licensed in Montana State

Company: B4Q Assurance CPA PC

Location: Montana, USA — Fully Remote

Engagement Type: Independent Contractor / Freelance

Work Schedule: Flexible, assignment-based

Compensation: USD 20-40+ per authorized hour

Reporting To: Managing Partner / Authorized Firm Representative

Position Summary
B4Q Assurance CPA PC is seeking a qualified Montana-licensed Certified Public Accountant to provide remote accounting, assurance, taxation, compliance and advisory support on a freelance basis.
The CPA will assist with client engagements, review financial and supporting records, prepare professional workpapers, participate in virtual client meetings and support the firm’s quality-management and regulatory-compliance processes.
This is an independent-contractor engagement. Work will be assigned according to client requirements, and no minimum number of hours or assignments is guaranteed.

Key Responsibilities
• Review financial statements, general ledgers, reconciliations and supporting documentation.
• Assist with audit, review, compilation and agreed-upon procedures engagements.
• Prepare and review engagement workpapers in accordance with firm procedures.
• Support federal and state tax-return preparation and tax-compliance assignments.
• Assist with SOC 1, SOC 2, internal-control and compliance engagements.
• Perform analytical procedures, sampling, testing and documentation review.
• Identify accounting, internal-control, reporting and compliance issues.
• Prepare client queries, adjustment schedules and engagement summaries.
• Participate in virtual meetings with clients and the B4Q Assurance team.
• Review bookkeeping, payroll, accounts payable and accounts receivable records.
• Assist with financial reporting under applicable accounting frameworks.
• Support risk assessments and internal-control evaluations.
• Maintain accurate timesheets, invoices and assignment records.
• Complete work within agreed deadlines and budgets.
• Protect confidential client and firm information.
• Follow professional ethics, independence and information-security requirements.
• Maintain an active CPA licence and required continuing professional education.
• Promptly disclose any actual or potential conflict of interest.
• Cooperate with internal quality reviews, engagement reviews and corrective actions.

Required Qualifications
• Active and unrestricted Montana State CPA licence.
• Bachelor’s or master’s degree in accounting, finance or a related field.
• Practical experience in public accounting, taxation, assurance or financial reporting.
• Knowledge of US GAAP and applicable professional standards.
• Ability to prepare clear, complete and review-ready workpapers.
• Strong analytical, communication and problem-solving skills.
• Proficiency with Microsoft Excel, accounting software and electronic document systems.
• Ability to work independently in a remote environment.
• Reliable internet connection and availability for virtual meetings.
• Good professional standing with no undisclosed disciplinary restrictions.

Preferred Qualifications
• Experience with audit, review and compilation engagements.
• Experience with SOC 1 or SOC 2 examinations.
• Knowledge of internal controls and risk assessment.
• Experience with federal and state business taxation.
• Familiarity with CPA-firm quality-management requirements.
• Experience working with small and medium-sized businesses.

Performance Expectations
The Freelancer CPA will be evaluated on:
• Accuracy and completeness of work.
• Compliance with professional and firm requirements.
• Timely completion of assigned engagements.
• Quality of workpaper documentation.
• Responsiveness to review comments.
• Client communication and professionalism.
• Protection of confidential information.
• Proper recording of authorized working hours.
• Maintenance of professional independence and ethical conduct.

Independent Contractor Terms
• The CPA will provide services as an independent contractor, not as an employee.
• Compensation will be USD 20 per authorized hour.
• Only hours approved under the firm’s assignment process will be payable.
• The contractor will submit

Skills: Accounting, Tax Compliance

Required Freelance CPA, residence & licensed in Washington State

Company: B4Q Assurance CPA PC

Location: Washington, USA — Fully Remote

Engagement Type: Independent Contractor / Freelance

Work Schedule: Flexible, assignment-based

Compensation: USD 20-40 per authorized hour

Reporting To: Managing Partner / Authorized Firm Representative

Position Summary

B4Q Assurance CPA PC is seeking a qualified Washington-licensed Certified Public Accountant to provide remote accounting, assurance, taxation, compliance and advisory support on a freelance basis.
The CPA will assist with client engagements, review financial and supporting records, prepare professional workpapers, participate in virtual client meetings and support the firm’s quality-management and regulatory-compliance processes.
This is an independent-contractor engagement. Work will be assigned according to client requirements, and no minimum number of hours or assignments is guaranteed.
Key Responsibilities
• Review financial statements, general ledgers, reconciliations and supporting documentation.
• Assist with audit, review, compilation and agreed-upon procedures engagements.
• Prepare and review engagement workpapers in accordance with firm procedures.
• Support federal and state tax-return preparation and tax-compliance assignments.
• Assist with SOC 1, SOC 2, internal-control and compliance engagements.
• Perform analytical procedures, sampling, testing and documentation review.
• Identify accounting, internal-control, reporting and compliance issues.
• Prepare client queries, adjustment schedules and engagement summaries.
• Participate in virtual meetings with clients and the B4Q Assurance team.
• Review bookkeeping, payroll, accounts payable and accounts receivable records.
• Assist with financial reporting under applicable accounting frameworks.
• Support risk assessments and internal-control evaluations.
• Maintain accurate timesheets, invoices and assignment records.
• Complete work within agreed deadlines and budgets.
• Protect confidential client and firm information.
• Follow professional ethics, independence and information-security requirements.
• Maintain an active CPA licence and required continuing professional education.
• Promptly disclose any actual or potential conflict of interest.
• Cooperate with internal quality reviews, engagement reviews and corrective actions.

Required Qualifications
• Active and unrestricted Washington State CPA licence.
• Bachelor’s or master’s degree in accounting, finance or a related field.
• Practical experience in public accounting, taxation, assurance or financial reporting.
• Knowledge of US GAAP and applicable professional standards.
• Ability to prepare clear, complete and review-ready workpapers.
• Strong analytical, communication and problem-solving skills.
• Proficiency with Microsoft Excel, accounting software and electronic document systems.
• Ability to work independently in a remote environment.
• Reliable internet connection and availability for virtual meetings.
• Good professional standing with no undisclosed disciplinary restrictions.

Preferred Qualifications
• Experience with audit, review and compilation engagements.
• Experience with SOC 1 or SOC 2 examinations.
• Knowledge of internal controls and risk assessment.
• Experience with federal and state business taxation.
• Familiarity with CPA-firm quality-management requirements.
• Experience working with small and medium-sized businesses.

Performance Expectations
The Freelancer CPA will be evaluated on:
• Accuracy and completeness of work.
• Compliance with professional and firm requirements.
• Timely completion of assigned engagements.
• Quality of workpaper documentation.
• Responsiveness to review comments.
• Client communication and professionalism.
• Protection of confidential information.
• Proper recording of authorized working hours.
• Maintenance of professional independence and ethical conduct.

Independent Contractor Terms
• The CPA will provide services as an independent contractor, not as an employee.
• Compensation will be USD 20 per authorized hour.
• Only hours approved under the firm’s assignment process will be payable.
• The contractor will submit

Skills: Accounting, Tax Compliance

Required Freelance CPA, residence & licensed in Washington State
Company: B4Q Assurance CPA PC
Location: Washington, USA — Fully Remote
Engagement Type: Independent Contractor / Freelance
Work Schedule: Flexible, assignment-based
Compensation: USD 20-40 per authorized hour
Reporting To: Managing Partner / Authorized Firm Representative
Position Summary
B4Q Assurance CPA PC is seeking a qualified Washington-licensed Certified Public Accountant to provide remote accounting, assurance, taxation, compliance and advisory support on a freelance basis.
The CPA will assist with client engagements, review financial and supporting records, prepare professional workpapers, participate in virtual client meetings and support the firm’s quality-management and regulatory-compliance processes.
This is an independent-contractor engagement. Work will be assigned according to client requirements, and no minimum number of hours or assignments is guaranteed.
Key Responsibilities
• Review financial statements, general ledgers, reconciliations and supporting documentation.
• Assist with audit, review, compilation and agreed-upon procedures engagements.
• Prepare and review engagement workpapers in accordance with firm procedures.
• Support federal and state tax-return preparation and tax-compliance assignments.
• Assist with SOC 1, SOC 2, internal-control and compliance engagements.
• Perform analytical procedures, sampling, testing and documentation review.
• Identify accounting, internal-control, reporting and compliance issues.
• Prepare client queries, adjustment schedules and engagement summaries.
• Participate in virtual meetings with clients and the B4Q Assurance team.
• Review bookkeeping, payroll, accounts payable and accounts receivable records.
• Assist with financial reporting under applicable accounting frameworks.
• Support risk assessments and internal-control evaluations.
• Maintain accurate timesheets, invoices and assignment records.
• Complete work within agreed deadlines and budgets.
• Protect confidential client and firm information.
• Follow professional ethics, independence and information-security requirements.
• Maintain an active CPA licence and required continuing professional education.
• Promptly disclose any actual or potential conflict of interest.
• Cooperate with internal quality reviews, engagement reviews and corrective actions.
Required Qualifications
• Active and unrestricted Washington State CPA licence.
• Bachelor’s or master’s degree in accounting, finance or a related field.
• Practical experience in public accounting, taxation, assurance or financial reporting.
• Knowledge of US GAAP and applicable professional standards.
• Ability to prepare clear, complete and review-ready workpapers.
• Strong analytical, communication and problem-solving skills.
• Proficiency with Microsoft Excel, accounting software and electronic document systems.
• Ability to work independently in a remote environment.
• Reliable internet connection and availability for virtual meetings.
• Good professional standing with no undisclosed disciplinary restrictions.
Preferred Qualifications
• Experience with audit, review and compilation engagements.
• Experience with SOC 1 or SOC 2 examinations.
• Knowledge of internal controls and risk assessment.
• Experience with federal and state business taxation.
• Familiarity with CPA-firm quality-management requirements.
• Experience working with small and medium-sized businesses.
Performance Expectations
The Freelancer CPA will be evaluated on:
• Accuracy and completeness of work.
• Compliance with professional and firm requirements.
• Timely completion of assigned engagements.
• Quality of workpaper documentation.
• Responsiveness to review comments.
• Client communication and professionalism.
• Protection of confidential information.
• Proper recording of authorized working hours.
• Maintenance of professional independence and ethical conduct.
Independent Contractor Terms
• The CPA will provide services as an independent contractor, not as an employee.
• Compensation will be USD 20 per authorized hour.
• Only hours approved under the firm’s assignment process will be payable.
• The contractor will submit

Freelance Certified Public Accountant (CPA)
Company: B4Q Assurance CPA PC
Location: Washington, USA — Fully Remote
Engagement Type: Independent Contractor / Freelance
Work Schedule: Flexible, assignment-based
Compensation: USD 20-40 per authorized hour
Reporting To: Managing Partner / Authorized Firm Representative
Position Summary
B4Q Assurance CPA PC is seeking a qualified Washington-licensed Certified Public Accountant to provide remote accounting, assurance, taxation, compliance and advisory support on a freelance basis.
The CPA will assist with client engagements, review financial and supporting records, prepare professional workpapers, participate in virtual client meetings and support the firm’s quality-management and regulatory-compliance processes.
This is an independent-contractor engagement. Work will be assigned according to client requirements, and no minimum number of hours or assignments is guaranteed.
Key Responsibilities
• Review financial statements, general ledgers, reconciliations and supporting documentation.
• Assist with audit, review, compilation and agreed-upon procedures engagements.
• Prepare and review engagement workpapers in accordance with firm procedures.
• Support federal and state tax-return preparation and tax-compliance assignments.
• Assist with SOC 1, SOC 2, internal-control and compliance engagements.
• Perform analytical procedures, sampling, testing and documentation review.
• Identify accounting, internal-control, reporting and compliance issues.
• Prepare client queries, adjustment schedules and engagement summaries.
• Participate in virtual meetings with clients and the B4Q Assurance team.
• Review bookkeeping, payroll, accounts payable and accounts receivable records.
• Assist with financial reporting under applicable accounting frameworks.
• Support risk assessments and internal-control evaluations.
• Maintain accurate timesheets, invoices and assignment records.
• Complete work within agreed deadlines and budgets.
• Protect confidential client and firm information.
• Follow professional ethics, independence and information-security requirements.
• Maintain an active CPA licence and required continuing professional education.
• Promptly disclose any actual or potential conflict of interest.
• Cooperate with internal quality reviews, engagement reviews and corrective actions.
Required Qualifications
• Active and unrestricted Washington State CPA licence.
• Bachelor’s or master’s degree in accounting, finance or a related field.
• Practical experience in public accounting, taxation, assurance or financial reporting.
• Knowledge of US GAAP and applicable professional standards.
• Ability to prepare clear, complete and review-ready workpapers.
• Strong analytical, communication and problem-solving skills.
• Proficiency with Microsoft Excel, accounting software and electronic document systems.
• Ability to work independently in a remote environment.
• Reliable internet connection and availability for virtual meetings.
• Good professional standing with no undisclosed disciplinary restrictions.
Preferred Qualifications
• Experience with audit, review and compilation engagements.
• Experience with SOC 1 or SOC 2 examinations.
• Knowledge of internal controls and risk assessment.
• Experience with federal and state business taxation.
• Familiarity with CPA-firm quality-management requirements.
• Experience working with small and medium-sized businesses.
Performance Expectations
The Freelancer CPA will be evaluated on:
• Accuracy and completeness of work.
• Compliance with professional and firm requirements.
• Timely completion of assigned engagements.
• Quality of workpaper documentation.
• Responsiveness to review comments.
• Client communication and professionalism.
• Protection of confidential information.
• Proper recording of authorized working hours.
• Maintenance of professional independence and ethical conduct.
Independent Contractor Terms
• The CPA will provide services as an independent contractor, not as an employee.
• Compensation will be USD 20 per authorized hour.
• Only hours approved under the firm’s assignment process will be payable.
• The contractor will submit

Skills: Accounting, Tax, Bookkeeping, Tax Compliance, Tax Preparation, Financial Consulting

🧾 Overview

We are seeking an experienced Compliance Consultant / Policy Writer to design and develop a customized compliance framework, including policies, procedures, and audit-ready registers.

The objective is to deliver practical, implementation-ready documentation tailored to our operations—not generic templates.

🎯 Scope of Work
1. Compliance Framework Design
Review business information provided
Propose a comprehensive set of required policies and controls aligned with relevant ISO-based management systems
Deliver a policy/register matrix with clear rationale and structure
2. Policy Development
Draft all agreed policies tailored to the organization
Ensure alignment with ISO-aligned control frameworks and best practices
Ensure documents are clear, practical, and audit-ready
3. Procedures

Develop supporting procedures to enable implementation, including:

Reporting and escalation mechanisms
Investigation process
Approval workflows (e.g., gifts, conflicts of interest)
4. Registers (Audit-Ready)
Design and deliver key compliance registers (e.g., risk, incidents, disclosures)
Ensure registers are usable, structured, and audit-ready
📌 Requirements
Proven experience in compliance, risk, or internal audit
Demonstrated experience developing customized policies, procedures, and registers
Strong familiarity with ISO-based management systems and control frameworks
Ability to design a full compliance framework, not just draft standalone documents
Experience aligning documentation with real-world operations and audit expectations
Strong attention to detail and professional writing skills
⏱️ Timeline
Expected completion: 1 week (please confirm feasibility in your proposal)
💬 Application Requirements

Please include:

Relevant work samples (policies, procedures, or registers)
A brief explanation of your approach to customization and framework design
Confirmation of ability to meet the timeline
⭐ Important Note

The consultant is expected to:

Propose a complete and justified list of required policies and controls
Ensure all deliverables are practical, tailored, and audit-ready

Cloud Network Security Engineer – 100% Remote

Networking:

Equinix: Hands-on experience building out Equinix Fabric (Network edge to CSP, BYOC - BGP service provider level skillsets); Fabric underlay logical resources and overlay virtual device deployments

Firewalls (hands-on build, troubleshooting):

Palo Alto VM/NVA (active/active, active/passive)

Palo Alto PRISMA

Imperva WAF: Configuration and Support for ABP, ATO, CWAF, Policy creation, DDoS mitigation tuning, site onboarding, custom certificate management, CDN



Route/Switch Platforms (hands-on build, troubleshooting):

Cisco Catalyst WAN Edge Routers

Cisco CSR (1000v, 8000v)

Cisco Catalyst Center

Cisco ThousandEyes

Cisco Smart Licensing (8000v)

Arista Spine/Leaf (current h/w)

Juniper MX

Infoblox DDI, vNiOS



MS/Azure:

Azure Advanced Networking - hands-on IaaS build experience (VNet, UDR, NSG, ILB, DNS, NVA's, ExpressRoute/BGP propagation, global peering)

Experience with Azure-native services such as:

Azure API Management (APIM)
Application Gateway (AppGW)
Function Apps with VNet Integration
Azure Data Lake
Private DNS Zones and DNS proxy patterns
Azure Firewall
Azure VWAN (planning, design, implementation)
Private Endpoints
Service Endpoints
Azure Load Balancers


Oracle/OCI – NOT REQUIRED

OCI Advanced Networking - hands-on IaaS build experience (VCN, RT, LPG, DRG Route-Redist, inter-region traffic steering, Layer4/7 LB, OCI private DNS, NVA's, FastConnect/BGP propagation, RPC)
Private DNS Zones and DNS proxy patterns
Oracle App flows and troubleshooting (e.g. OCI DB/Goldengate, AI/ML)
Private Endpoints
Service Gateway
OCI Load Balancer
OCI IAM/Compartments
OCI Landing Zone Architecture


General Cloud Knowledge:

DevOps CI/CD pipelines
Third-party integration/orchestration tools (deployed as PaaS/SaaS)
Understanding of data flows between applications and services (intra/inter-CSP, hybrid/on-prem)
Cloud compute and sizing
Regional Redundancy, Availability Zones and Fault tolerant planning
Knowledge of security best practices across network paths, public endpoints, and service exposure
Collaboration experience with application teams, architects, and security engineers to support scalable cloud deployments.
Understanding of DevOps tooling and pipeline orchestration

I'm looking for an experienced Meta/Facebook account recovery specialist.

Background:

Original owner account: Yousafzai Mehran
The account was hacked and later disabled by Facebook.
It is the owner of our verified Facebook Page Inspired Jackets and multiple Business Manager assets.
I still have limited admin access on some assets but not ownership.

What we've already tried:

Reported the hacked account multiple times.
Contacted Meta Support through email and live chat.
Submitted hacked account recovery requests.
Used the hacked account recovery tool.
Located the correct account, but recovery stops with:
"Try another device to continue. We can't match the device you're using."

What I have available:

Business email access.
Government ID of the original owner (if needed).
Screenshots of Meta emails and recovery attempts.

What I need:

Recover the original Facebook owner account if possible.
Restore ownership of our Meta Business Manager and verified Facebook Page.
Advise on the best recovery strategy if the account cannot be recovered directly.

Please only apply if you have successfully handled similar Facebook/Meta recovery cases before.

Look for someone with experience in:

* WordPress security hardening
* Malware cleanup
* Vulnerability remediation
* Plugin conflict resolution
* PHP
* MySQL
* Apache/Nginx
* Cloudflare
* Linux
* WP-CLI
* OWASP Top 10
* Patch management
* Wordfence (or similar)
* Security headers
* CSP/HSTS
* SSL/TLS

We are seeking a specialist in personal security or cybersecurity who is a phenomenal English speaker and presenter. The role involves presenting security concepts to various audiences, ensuring clarity and engagement. The ideal candidate must be a specialist in personal security hygiene with strong communication skills and the ability to convey complex information effectively, through this podcast. Join Quanta Tech Systems to help us deliver an impactful presentation.

Gmail has recently been hacked and placed into a unauthorized google family link as a child. I have been trying for days to recover account but to no avail. I even have the emails of the people who have my accounts under supervision but have been unable to find help. If anyone can help or offer assistance, please reach out!!

My personal email id got hacked on July 4th 2026.
The login details are not showing in device list in Google account portal.
I have recovered the account but want to know if my account is compromised or not.
Also I want to know from where the account got logged in
This will be useful for me

I need a contract review for the attached contract. It is a co-operation contract between myself and Conovo. Where I am the brains and they are the hands. However, since IP legislation means that if they develop anything based on my ideas, that development will be theirs, and I have nothing to show for it. The contract is our way to stave that. I have, by will, been a bit lenient towards Conovo, with reviews included since they will use their organisation to develop and sell this product.
What I am asking for you is to review the contract and either sign it off as it stands or, if needed, flag for anything that needs to be addressed before signature. Please explain why this is so if that's the case.

I estimate max 2 hours work for this review.

I want to recover my page; a competitor reported me.

I am looking for an experienced Cybersecurity & Account Recovery Specialist to help secure our business accounts, recover compromised accounts, implement secure backup systems, and strengthen our overall cybersecurity.

DO NOT APPLY IF YOU ARE A NEWBIE!!!

Responsibilities
* Recover hacked or compromised accounts
* Secure Google Workspace, and other business platforms
* Set up and verify secure file backups
* Implement and audit 2FA, password management, and access controls
* Review permissions, connected apps, and suspicious login activity
* Develop security best practices and documentation
* Assist with future security incidents when needed

Requirements
* Proven experience with account recovery and cybersecurity
* Strong knowledge of Google Workspace, cloud storage, social media security, and access management
* Experience with backup and disaster recovery
* Excellent communication and documentation skills
* Highly trustworthy and detail-oriented

When Applying, Please Include
* Relevant cybersecurity experience
* Examples of account recovery or security projects (without violating client confidentiality)
* Your hourly rate and availability

IMPORTANT!!! You may be granted temporary administrative access to sensitive business accounts. Confidentiality and professionalism are mandatory. A signed NDA will be required before work begins.

UPWORK JOB POSTING

Comprehensive Security, Vulnerability, and Compliance Testing Engagement

Mobile Application • Website • Financial Infrastructure • Chain of Custody Architecture

ISO 42001 • NIST AI RMF • NIST SP 800 series • OWASP • Federal Digital Evidence Standards

Fixed Price — 9,200 USD • Four Milestones • Milestone Certifications Required

---

READ THIS FIRST — DO NOT APPLY IF YOU CANNOT SATISFY ALL REQUIREMENTS

This engagement requires a REGISTERED BUSINESS ENTITY — not an individual freelancer — that has previously produced security certifications, compliance certifications, and forensic integrity reports that have been accepted in professional, legal, or regulatory contexts.

VENDORS WHO DO NOT MEET ALL OF THE FOLLOWING SHOULD NOT APPLY. YOUR PROPOSAL WILL BE IGNORED:

Your organization holds active CREST, CERT In empanelment, or equivalent nationally recognized cybersecurity accreditation verifiable through a public registry
Your organization holds ISO 27001, SOC 2 Type II, or CMMC Level 2 certification for your OWN operations
Your team includes a named examiner with CFCE, EnCE, ACE, GCFE, or GCFA certification for the forensic integrity report
Your team includes a named examiner with OSCP, CEH, GPEN, or GMOB certification for penetration testing
Your organization has previously issued security certifications and compliance certifications that have been presented in legal proceedings, regulatory submissions, or enterprise procurement processes
Your organization has conducted prior mobile application security assessments on iOS and Android physical devices
Your organization has prior experience with United States federal and state regulatory requirements including COPPA, BIPA, and recording consent law

Vendors who cannot satisfy all of these requirements should not apply. AI-generated proposals that do not answer the competency screening questions with specific, verifiable, experience-based answers will not be reviewed.

---

MILESTONE CERTIFICATION REQUIREMENT — THIS IS NON-NEGOTIABLE

The engagement requires the contractor to issue a written certification on official business letterhead at the completion of each milestone. These are not summary reports. They are formal certifications signed by an authorized officer of the contractor's registered business entity that state specifically what was tested, what passed, and that the tested components are certified as meeting the standards applied in the engagement.

MILESTONE 1 CERTIFICATION IS THE MOST CRITICAL. The platform may receive subpoenas or law enforcement requests for recorded evidence during its beta launch period. Milestone 1 specifically covers the chain of custody architecture, evidence package delivery security, and 51-jurisdiction recording consent compliance. The Milestone 1 certification — issued on official letterhead within 15 business days of engagement start — is the document the client presents if compelled to produce recordings to a court or law enforcement agency during beta. Without it the platform has no independent verification of its forensic integrity.

If a contractor cannot issue an official business letterhead certification with an authorized officer signature, a unique traceable reference number, and independent verification contact information for each milestone that passes — that contractor cannot perform this engagement.

Certifications must be independently verifiable. Law enforcement, attorneys, and courts must be able to contact your organization directly to verify any certification issued under this engagement.

---

1. ENGAGEMENT OVERVIEW

A consumer-facing mobile application operating across all 50 US states and Washington DC requires a comprehensive independent security, vulnerability, and compliance testing engagement before official public launch. The platform is a compliance-grade personal safety and forensic evidence documentation system. Its Evidence Vault stores audio and video recordings made under a 51-jurisdiction recording consent compliance engine. Evidence Packages from the platform are submitted to law enforcement officers, licensed attorneys, private investigators, and courts as forensic evidence in civil and criminal legal proceedings.

This is not a standard mobile application security audit. The platform's outputs will be used as evidence in criminal prosecutions. The certifications produced under this engagement will be presented to District Attorneys, defense counsel, judges, law enforcement agencies, and enterprise procurement officers. The forensic integrity report produced under this engagement is a court-presentation document that must withstand cross-examination by a defense attorney. Every deliverable in this engagement carries legal evidentiary weight. Vendors who approach this as a routine VAPT engagement are not the right fit.

The complete Statement of Work covering all testing requirements, formal test cases, acceptance criteria, milestone deliverables, and contractor qualification requirements will be provided as an attachment to qualified candidates after initial screening. This posting is a summary and screening document only.

---

2. SCOPE SUMMARY — FOUR MILESTONES

MILESTONE 1 IS TIME-CRITICAL AND NON-NEGOTIABLE ON TIMELINE

Milestone 1 must be completed within 15 business days of the written green light from the client. This timeline is a condition of the engagement, not a target. A contractor who cannot commit to 15 business days for Milestone 1 should not apply.

Milestone 1 covers the components required if a court order, subpoena, or law enforcement evidence request arrives during the beta period. The certification issued at Milestone 1 completion is the legal verification document for this scenario.

Milestone 1 — Court-Order Readiness Certification — 2,500 USD — 15 Business Days

Part A Security Testing: Chain of custody architecture security across four flows — inbound vendor certification document upload (9 test cases including dual-authorization model, revocation, APN port access control, and HASH_COMPROMISED status), outbound evidence package transmission to law enforcement, attorneys, and private investigators (6 test cases), outbound certification document request and delivery (8 test cases including 72-hour link expiry and rejection notification), and SHA-256 cryptographic integrity across all flows (7 test cases including rate limiting and end-to-end hash chain)

Part A Security Testing: Evidence Package access and chain of custody penetration testing for all four recipient classes — trusted contacts, licensed attorneys, law enforcement officers, and private investigators — including credential bypass testing and cross-recipient sequential chain integrity

Part B Compliance Verification: 51-jurisdiction Compliance Decision Engine verification — JUR-01 through JUR-04 and REC-01 through REC-05 verified across all 51 US states and Washington DC using simulated GPS on physical iOS and Android devices

Milestone 1 Deliverable: Interim Chain of Custody and Evidence Delivery Certification issued on official business letterhead, signed by authorized officer, unique reference number, stating what was tested, what passed, what was not tested in this milestone, and the platform version tested

---

Milestone 2 — Mobile Application Security Assessment — 2,000 USD — 30 Business Days

Part A: Complete iOS and Android mobile application security assessment on physical devices — VAD acoustic embedding data handling, BIPA and state biometric privacy verification across 11 enumerated states, VAD behavioral accuracy testing across 6 scenarios with 80/85 percent acceptance thresholds, Fake Call compliance testing across 5 formal test cases, VAD session start delay gate across 5 scenarios, COPPA compliance across 11 test items, SOS emergency dispatch sandbox testing across 5 controls, iOS silent mode compliance fallback, website penetration testing, enterprise account security across 6 test areas

Milestone 2 Deliverable: Mobile Application Security and Vulnerability Assessment Report with separate iOS and Android findings for every single test — no combined results accepted — device make, model, and OS version documented, severity ratings, remediation recommendations, on official letterhead

Milestone 2 Certification: Written certification on official letterhead that mobile application security testing for Milestone 2 scope was completed and all Critical and High findings were retested and confirmed resolved

---

Milestone 3 — Infrastructure and Financial Security Assessment — 1,500 USD — 40 Business Days

Part A: Payment and webhook security — Stripe Connect multi-entity isolation, webhook signature validation, replay attack testing, IRS transfer pricing fourteen-field metadata schema integrity, subscription privilege escalation

Part A: Financial infrastructure security — third-party accounting integration injection point and Smart Rules security, six-file multi-entity accounting access isolation, intercompany transaction integrity, financial audit trail immutability and export for CPA review

Part A: GPS, live map, and family location security — simulated GPS jurisdiction detection across all 51 states on physical iOS and Android devices, GPS spoofing resistance, five Profile A and B state border scenarios, on-device reverse geocoding verification, live map access control, family GPS at maximum account member count using mixed iOS and Android device configuration

Milestone 3 Deliverable: Infrastructure and Financial Security Assessment Report with separate iOS and Android results for all GPS and location tests, financial infrastructure findings documented separately, on official letterhead

Milestone 3 Certification: Written certification on official letterhead that infrastructure and financial security testing for Milestone 3 scope was completed and all Critical and High findings were retested and confirmed resolved

---

Milestone 4 Final — Full Compliance Verification and Four Certifications — 3,200 USD — 55 Business Days

Part B: Full 48-control Implementation QA Compliance Checklist verification across all 10 control categories and all account tiers — consumer, professional, and enterprise — with separate iOS and Android results

Part B: BIPA compliance across all 11 enumerated states, VAD behavioral accuracy thresholds confirmation, Washington state announcement-in-recording verification, Delaware profile classification correction, enterprise account compliance, financial compliance including IRS transfer pricing rules and accounting audit trail export, NIST SP 800 series test coverage adequacy gap report

Milestone 4 Required Deliverable 1 — FORENSIC INTEGRITY VERIFICATION REPORT: Court presentation standard. CFCE, EnCE, ACE, GCFE, or GCFA certified examiner. Minimum 500-word methodology. Independent SHA-256 verification table for minimum 10 test files. Minimum 5 WORM mutation attack vectors. Minimum 3 Legal Hold bypass scenarios. Expert conclusion statement. Statement of examiner independence. Official letterhead.

Milestone 4 Required Deliverable 2 — PART A SECURITY CERTIFICATION: All Critical and High vulnerabilities retested and confirmed resolved. Authorized officer signature. Official letterhead.

Milestone 4 Required Deliverable 3 — PART B COMPLIANCE CERTIFICATION: All required controls confirmed operational across all account tiers. Compliance attorney opinion letter reference number cited. Authorized officer signature. Official letterhead.

Milestone 4 Required Deliverable 4 — CERTIFICATE OF STANDING: Complete engagement scope covered. All findings status documented. No Critical or High vulnerabilities remain open. All 48 controls and 51 jurisdictions verified. Authorized officer signature. Unique certificate reference number. Official letterhead.

ALL FOUR MILESTONE 4 DOCUMENTS ARE REQUIRED SIMULTANEOUSLY. Payment releases only when all four are received and accepted. Receipt of three does not trigger payment.

---

3. ENGAGEMENT PROTOCOL

Start-stop engagement: Testing for each milestone begins only upon written green light from the client confirming the development team is ready. Timeline clocks start from the green light date, not the contract start date.

Hold notices: The client may pause any milestone if additional development work is required. The vendor must resume within five business days of the new green light.

Remediation and recheck: When findings are identified the development team remediates and the vendor retests. After all Critical and High findings are resolved the vendor conducts a full recheck of every previously passing test case within that milestone before issuing the milestone certification.

Advancement gate: The vendor may not advance to the next milestone without written client acceptance of the current milestone deliverable, milestone payment released, and written green light for the next milestone.

---

4. CERTIFICATION AUTHORITY REQUIREMENTS

The certifications issued under this engagement will be presented in criminal proceedings, civil litigation, law enforcement investigations, and enterprise procurement processes. A certification from a contractor who lacks institutional standing has no value in these contexts.

Every certification issued under this engagement must: be on official business letterhead with your registered business address and active website address, be signed by a principal or authorized officer of your registered entity, carry a unique traceable reference number, be independently verifiable by contacting your organization directly, include a dedicated verification contact on the certificate face, and state the name and active credential of every examiner who contributed to the assessment.

Your organization must have previously issued certifications that have been accepted in professional or legal contexts. Certifications that have never been presented outside a client's internal files do not satisfy this requirement.

---

5. MANDATORY COMPETENCY SCREENING QUESTIONS

THESE QUESTIONS MUST BE ANSWERED IN FULL. INCOMPLETE OR GENERIC ANSWERS WILL RESULT IN DISQUALIFICATION.

These questions are designed to verify direct hands-on experience and institutional competency. They cannot be answered satisfactorily using general knowledge or AI-generated text. Each answer must be specific, verifiable, and grounded in your organization's actual prior work.

Section A — Forensic Integrity and Chain of Custody

Question 1. Describe a specific prior engagement where your organization produced a forensic integrity report for a digital evidence preservation system that was presented in a legal proceeding. Identify the type of proceeding (criminal, civil, regulatory), the role the report played, and the outcome. Do not identify the client by name if confidential but describe the industry and nature of the system. What specific tests did your examiner conduct and what tools were used to independently verify SHA-256 hashes?

Question 2. Your organization is about to certify a WORM-protected evidence vault for a consumer mobile application. The vault stores audio and video recordings in 5-to-10-second chunks each with an independent SHA-256 hash. A defense attorney challenges the vault integrity by arguing that the hash verification relies on the platform's own tools rather than independent verification. Walk through your methodology for responding to this challenge. What specific independent tools do you use? How do you document the independence of your verification in a way that satisfies a court?

Question 3. Your organization is required to produce a chain of custody log export for a single certification document that was transmitted to a law enforcement officer, then to a District Attorney, then introduced as evidence in a federal criminal proceeding. The export must be suitable for court submission. Describe the format, required fields, and structure of that export document. How does your organization ensure the chain of custody log is append-only and tamper-resistant? What happens to the chain of custody record if the platform is acquired or restructured?

Section B — Mobile Application Security Testing

Question 4. Your team is testing a Voice Activity Detection engine on a physical iOS device. The engine creates ephemeral acoustic embeddings in RAM during a session and is required to destroy them at session end with no persistent storage and no off-device transmission. Describe your methodology for verifying that the embeddings are truly destroyed at session end and that no data remnants exist. What OS-level tools and memory analysis techniques do you use on iOS specifically? How does your approach differ on Android?

Question 5. During a mobile application penetration test you discover that the jurisdiction detection engine — which determines which recording consent profile to apply based on GPS location — can be spoofed by a GPS mock application. The engine defaults to the most permissive recording profile when GPS confidence is low rather than the most restrictive profile. Classify this finding by severity and explain your reasoning. What attack scenarios does this enable? What remediation do you recommend and how do you verify the remediation is effective at the enforcement layer rather than only the UI layer?

Question 6. Describe a prior engagement where your organization tested COPPA compliance controls on a consumer mobile application. What specific tests did you conduct? What is the FTC's current civil penalty exposure for COPPA violations and how does that inform your testing priority? What is the specific legal threshold that triggers COPPA obligations and how do you verify a platform's age gate satisfies it?

Section C — Compliance Verification and Framework Assessment

Question 7. A mobile application operates across all 50 US states and Washington DC. It records audio and video of users and nearby third parties during real-time safety sessions. Different states require different levels of consent — some require only one-party consent, others require all-party consent with an audible notice. The platform has implemented four recording consent profiles driven by a Compliance Decision Engine that detects jurisdiction from GPS. Name three specific states where all-party consent is required, cite the applicable statute for each, and describe what the platform must do technically to satisfy each statute's notice requirements. Then explain what Profile B means in a multi-participant session where participants are in different consent-profile states.

Question 8. Your organization has been asked to verify that a platform satisfies NIST SP 800 series control testing requirements across 48 control IDs spanning 10 compliance categories. The existing automated test suite has 185 tests across 37 suites. Describe specifically how you evaluate whether an existing automated test suite meets NIST SP 800 series adequacy standards. What control families are most commonly under-tested in consumer mobile applications? What does your gap report look like and how do you structure your remediation recommendations so a development team can implement them efficiently?

Question 9. The platform's Voice Activity Detection engine must satisfy the Illinois Biometric Information Privacy Act. The engine creates in-memory acoustic embeddings during recording sessions and destroys them at session end. The embeddings are never written to persistent storage and never transmitted off-device. A plaintiff's attorney argues the acoustic embeddings constitute biometric identifiers under BIPA because they are derived from biological characteristics. Evaluate this argument. Does the ephemeral in-memory implementation trigger BIPA's requirements? What specific statutory language is determinative? How does your organization document the compliance position in a way that would support a motion to dismiss a BIPA class action?

Section D — Certification Issuance and Institutional Standing

Question 10. Provide a description of a prior security certification or compliance certification your organization has issued that was subsequently presented in a legal proceeding, regulatory submission, or enterprise procurement process. Describe the certification's content, who signed it, how it was verified by the receiving party, and what role it played. You may redact client names and case identifiers. The description must include the type of proceeding, the jurisdiction, and the specific compliance or security standards the certification addressed.

Question 11. A law enforcement officer contacts your organization six months after you issued a Milestone 1 chain of custody certification for a mobile platform. The officer is preparing to testify in a federal criminal proceeding and needs to verify that the certification is authentic, that the named examiner held the stated credentials at the time of testing, and that the platform version tested matches the version from which the evidence was produced. Walk through exactly how your organization handles this verification request. What documentation do you maintain, for how long, and through what internal process does a verification request get handled?

Question 12. Your organization has just completed security testing for a milestone and identified three Critical vulnerabilities and four High vulnerabilities. The development team has remediated all seven. You have retested and confirmed all seven are resolved. Before issuing the milestone certification you are required to conduct a full recheck of every test case within the milestone that previously passed. During the full recheck you discover that one remediation introduced a regression — a test case that previously passed now fails. How do you handle this? What does your certification say about the discovered regression? What is your communication process with the client? How do you document the regression discovery in the chain of custody of your own testing records?

Section E — Financial Infrastructure and GPS Security

Question 13. A multi-entity payment platform uses Stripe Connect with a platform master account and connected accounts for multiple operating entities. A security assessment must verify that the connected account architecture does not allow one entity's payment data to be accessed through another entity's credentials. Describe your methodology for testing this isolation. What specific API calls do you make, what attack vectors do you test, and how do you verify that the IRS transfer pricing metadata stamped on PaymentIntents cannot be stripped or modified through any accessible API endpoint?

Question 14. A consumer mobile application must convert GPS coordinates to neighborhood-level descriptors on-device before transmitting location information in SMS alerts. Raw GPS coordinates must never appear in any outbound transmission. Describe your methodology for verifying that raw GPS coordinates are not present in any SMS payload, push notification, or API call under any device state — including degraded GPS reception, background mode, and airplane mode. What tools do you use to intercept and analyze outbound network traffic on physical iOS and Android devices simultaneously?

---

6. PROPOSAL REQUIREMENTS

PROPOSALS MISSING ANY OF THESE ELEMENTS WILL NOT BE REVIEWED

1. Full answers to all 14 competency screening questions above. Answers must be specific and experience-based. Generic or AI-generated answers will be identified and disqualified.
2. Your company's full legal registered name, business registration number, jurisdiction of registration, and active public-facing website address.
3. Your organization's accreditation reference number (CREST registration, CERT In empanelment number, or equivalent) and the public verification registry where it can be independently verified.
4. Your organization's own ISO 27001, SOC 2 Type II, or equivalent certification reference number and issuing body.
5. The full name, active certification name, certificate number, issuing body, and expiry date of the forensic examiner who will produce the Milestone 4 forensic integrity report. Minimum credential: CFCE, EnCE, ACE, GCFE, or GCFA.
6. The full name, active certification name, certificate number, issuing body, and expiry date of the lead Part A penetration testing examiner. Minimum credential: OSCP, CEH, GPEN, or GMOB.
7. A SAMPLE PART A SECURITY CERTIFICATION previously issued by your organization on official business letterhead. Client names may be redacted. Must show authorized officer signature, unique reference number, scope certified, and examiner credentials. Required separately from the compliance certification sample.
8. A SAMPLE PART B COMPLIANCE CERTIFICATION previously issued by your organization on official business letterhead. Must show authorized officer signature, unique reference number, compliance framework and control scope verified, and lead examiner credentials. Required separately from the security certification sample.
9. Part A pricing and Part B pricing as separate line items with a combined total not exceeding 9,200 USD.
10. Written confirmation that your organization can issue a Milestone 1 interim certification within 15 business days of the written green light and that this timeline is a firm commitment, not an estimate.
11. Written conflict of interest disclosure confirming no relationship with any competitive platform in the personal safety application or evidence documentation market.

---

7. COMPLETE SOW PROVIDED TO QUALIFIED CANDIDATES

The complete Statement of Work — covering all formal test cases, acceptance criteria, contractor qualification requirements, milestone deliverable specifications, start-stop protocol, remediation and recheck procedures, chain of custody requirements, and certification issuance standards — will be provided to candidates who pass initial screening.

Initial screening is based on the competency questions above and the proposal requirements above. Candidates who are screened in will receive the full SOW and will be asked to confirm their proposal covers the complete scope before award.

Do not request the full SOW before submitting your proposal. The SOW will not be shared with candidates who have not submitted a complete proposal meeting all requirements above.

We are a 7 person UK technology company, based full time in London, preparing for our first ISO 27001:2022 certification audit. We are supported by an external dev agency and our tech stack is LAMP + Django.

Our ISMS is already implemented. We need an independent, remote internal audit covering Clauses 4-10 and our applicable Annex A controls.

The engagement must provide sufficient documented evidence to satisfy ISO/IEC 27001:2022 internal audit requirements, including the audit scope and criteria, findings and final audit report.

Fixed budget: $1,000.