Information Security Projects on Upwork

I need a developer for Instagram API integration — specifically for content scheduling and analytics. Can you share your experience with Meta APIs, timeline, and pricing? Let me know if you're available. Thanks!

We are seeking an experienced security consultant to conduct a comprehensive vulnerability assessment and penetration testing on our software site. The goal is to identify potential security weaknesses and provide a detailed report outlining findings, risks, and recommendations for remediation. Ideal candidates will have a strong background in cybersecurity, with knowledge of common vulnerabilities and testing methodologies. Please provide examples of previous assessments performed.

Hi,

I have two issues that I need your help with.

1. Gmail Recovery Issue

- I lost access to my old Gmail account.
- I no longer have access to the recovery email.
- Whenever I try to recover the account, Google doesn't give me a successful recovery option.
- This Gmail account is very important because it is linked to my TikTok account.

2. TikTok Ads Manager Verification Issue

- My TikTok account is already logged in on my mobile phone, and I can use the TikTok app normally.
- The problem is only with TikTok Ads Manager.
- When I try to register or log in to TikTok Ads Manager, it sends the verification code to my old Gmail address, which I no longer have access to.
- Because of this, I cannot complete the Ads Manager registration.
- I need help recovering my old Gmail account or finding a way to update/change the email used for TikTok Ads Manager verification.

Please let me know what information or access you need from me to resolve these issues.

Hey there!

We're developing a new pre-employment skills test and need real cloud security professionals to help write the questions, so we can be confident the test holds up to expert scrutiny before it goes live.

This is a short, remote, one-time project. You'll help us build the multiple choice question bank for one test, 104 questions across four skill areas, working to a brief and a question format we provide.

What you'll do

- Help write 104 multiple choice questions for our Cloud Security Posture Management test, pitched at intermediate to senior level, covering CSPM platforms, misconfiguration detection, compliance monitoring and remediation workflows
- Make sure every keyed answer is correct and the distractors are clearly wrong to someone with real expertise, with a one line rationale explaining why each option scores as it does
- Quality check the bank before handing it over, so every question is on topic, unambiguous and at the right difficulty

What we're looking for

- 5+ years of hands-on experience in cloud security, including a CSPM platform used in a professional setting, such as Prisma Cloud, Wiz, Defender for Cloud or Security Hub used for posture management
- Familiarity with CIS Benchmarks, NIST CSF or SOC 2 and how they translate into cloud control implementation
- Practical experience with remediation workflows and CSPM integrations into ticketing, CI/CD or SOAR tooling
- A strong eye for detail and a solid command of English
- Multi-cloud exposure across AWS and Azure is a plus, since the test covers both
- A cert like CCSK, CCSP, AWS Security Specialty or AZ-500 is a plus, not a must

We estimate under 15 hours of focused work. If this sounds like you, we'd love to hear from you!

Hey there!

We're developing a new pre-employment skills test and need real cloud security professionals to help write the questions, so we can be confident the test holds up to expert scrutiny before it goes live.

This is a short, remote, one-time project. You'll help us build the multiple choice question bank for one test, 104 questions across four skill areas, working to a brief and a question format we provide.

What you'll do

- Help write the multiple choice questions for our AWS / Azure Security Specialist test, pitched at intermediate to senior level, covering cloud security configuration, IAM policy design and native security services
- Make sure every keyed answer is correct and the distractors are clearly wrong to someone with real expertise, with a one line rationale explaining why each option scores as it does
- Quality check the bank before handing it over, so every question is on topic, unambiguous and at the right difficulty

What we're looking for

- 5+ years of hands-on experience in cloud security on AWS and/or Azure
- Practical experience configuring IAM policies and working with services like GuardDuty, Security Hub, Defender for Cloud or Sentinel
- Working knowledge of encryption and key management on at least one of the two platforms
- A strong eye for detail and a solid command of English
- Experience across both AWS and Azure is a plus, since the test covers both
- A cert like SCS-C02, AZ-500, CCSP or CISSP is a plus, not a must

We estimate under 15 hours of focused work. If this sounds like you, we'd love to hear from you!

We need to help provide a client with a complete WISP package designed to support compliance with the FTC Safeguards Rule, including comprehensive security measures and risk assessments. The ideal candidate will have experience in creating WISP packages and ensuring compliance with regulatory standards specifically IRS Pub 4557 and the FTC Safeguards Rule

I'd likGood evening. Can you find out if a Facebook profile is fake? And how much would that job cost?
I think I've been scammed.
I need to find out if a Facebook profile is fake.
Can you find that out?

We are seeking a skilled freelancer to conduct a penetration test and provide a comprehensive report suitable for an ISO 27001 audit. The report should detail vulnerabilities, risks, and recommendations for improvement. The ideal candidate will have experience in security testing and auditing, particularly with ISO 27001 standards.

Report *MUST* be backed by a company that we can verify operates in this space.

----

Our platform provides configuration management, CI/CD and configuration auditing for contact centre platforms. We are undergoing ISO/IEC 27001 certification and require an independent penetration test. This is a defined-scope engagement, not an open one. The methodology, the required test coverage, and the tests we do not want performed are all specified below. Please read them before quoting — your quote should be based on the coverage matrix, not on a general impression of the application.

# What the platform is
* Frontend: Ember.js single-page application, served via Nginx
* Backend: RESTful JSON API, which the SPA consumes. Every frontend action maps to a documented API endpoint. Swagger/OpenAPI documentation is served by the application itself.
* Data layer: PostgreSQL (configuration data and change audit history), Redis, Celery asynchronous task queue
* Tenancy: multi-tenant. Customers are separated logically within a deployment.
* Hosting: Kubernetes on cloud infrastructure

# The most sensitive asset in the system:
each customer configures one or more "Environments," which store an OAuth client ID and client secret for that customer's external contact center organisation. Those credentials carry create/update/delete permissions over the customer's contact centre configuration. A flaw that exposes those secrets, or that lets a user act against an Environment they should not have access to, is the highest-impact outcome in this system. This is the primary threat model.

# Two further design features warrant deliberate attention:

* Server-side JavaScript execution. Platform supports user-supplied JavaScript code blocks that execute server-side. Sandbox escape is a named objective of this engagement.
* Outbound request generation. Change automation can trigger API calls to user-specified external endpoints, and Environments are configured with a user-supplied API base URL. SSRF is a named objective.

We are seeking an experienced ISO 27001 Trainer to conduct live online implementation workshops. The ideal candidate will have a strong background in information security and compliance, with the ability to engage and educate participants effectively. Responsibilities include preparing and delivering comprehensive training sessions, ensuring participants understand ISO 27001 standards, and providing support in implementing these standards within their organizations.

Description:

We are looking for an experienced cybersecurity consultant or digital forensics specialist to help us analyze a series of suspicious online activities affecting our business.

We have received repeated fraudulent online requests that appear to be connected and contain details that suggest familiarity with our company. We're looking for someone who can perform a technical analysis of the available information and help us better understand the activity.

Responsibilities:

Analyze the available evidence and identify patterns.
Review technical indicators associated with the submissions.
Conduct OSINT (Open Source Intelligence) research where appropriate.
Identify potential security risks or vulnerabilities.
Document findings and provide recommendations for next steps.
Recommend measures to help prevent similar incidents in the future.

Requirements:

Experience in cybersecurity, digital forensics, incident response, or OSINT.
Strong analytical and documentation skills.
Experience investigating online abuse, fraudulent submissions, or similar technical incidents.
Ability to maintain strict confidentiality.

## Job Description

We are seeking an experienced security consultant to perform an independent audit of a client's Claude Enterprise environment. The client is seeking a third-party review to assess whether the environment is configured appropriately and aligned with enterprise security best practices. This is primarily a configuration, governance, and access control review, not a traditional penetration test.

### Scope of Work

We are looking for someone who can review the client’s Claude Enterprise setup and evaluate areas such as:

- organization and administrator configuration
- SSO / identity configuration
- user provisioning and deprovisioning
- role-based access and administrator permissions
- group and workspace governance
- data handling and retention settings
- file upload and sharing controls
- auditability and logging considerations
- integration and connector risk
- overall alignment with security best practices for enterprise AI / SaaS environments

### Deliverables

We expect the consultant to provide:

- a review of the current-state configuration
- identification of security gaps, risks, or questionable configuration decisions
- prioritized remediation recommendations
- a written summary report
- an optional follow-up call to review the findings

### Ideal Background

We are looking for someone with experience in one or more of the following:

- SaaS security architecture
- enterprise security assessments
- IAM / SSO / SCIM / RBAC reviews
- AI security or GenAI platform governance
- enterprise tenant configuration reviews
- security consulting for tools such as Claude Enterprise, ChatGPT Enterprise, Microsoft Copilot, or similar enterprise AI platforms

### Important Notes

- This is an independent review, so prior involvement in the original setup is not relevant.
- We are looking for someone who can assess configuration quality, governance, and security posture, not just run generic security scans.
- Experience reviewing enterprise SaaS environments is more important than generic infrastructure or network security experience.

### When Applying, Please Include

- a brief summary of similar security review or audit work you have completed
- any direct experience with Claude Enterprise or similar enterprise AI platforms
- your approach to reviewing SaaS security configuration and governance
- examples of the deliverables you typically provide for this type of assessment

This will likely begin as a short expert engagement, with the potential for limited follow-on advisory work, depending on the findings.

We're looking for an experienced Penetration Tester and Ethical Hacker to assess the security of our web applications, APIs, and network infrastructure. You'll identify vulnerabilities before attackers do and help us strengthen our overall security posture.

What you'll do:
- Conduct penetration tests on web applications, APIs, and network infrastructure
- Identify, document, and prioritize vulnerabilities based on risk and impact
- Perform manual and automated testing (OWASP Top 10, API security, network scanning)
- Deliver clear, actionable reports with remediation recommendations
- Retest fixes to confirm vulnerabilities are properly resolved

What we're looking for:
- Proven experience in penetration testing and ethical hacking across web, API, and network environments
- Strong knowledge of OWASP Top 10, common attack vectors, and security frameworks
- Hands-on experience with tools like Burp Suite, Nmap, Metasploit, and similar
- Ability to write clear, professional reports for both technical and non-technical audiences
- Relevant certifications preferred (OSCP, CEH, or similar)

Nice to have:
- Experience testing SaaS platforms or cloud environments (AWS, Azure, GCP)
- Familiarity with compliance frameworks like SOC 2 or ISO 27001

To apply, please share relevant experience, certifications, and a sample report or case study if available.

The Security Configuration Engineer is responsible for designing, implementing, and maintaining an enterprise Security Configuration Management (SCM) program. This role ensures systems are securely configured from onboarding through continuous monitoring, drift detection, remediation,
and compliance reporting. Working closely with the Program Manager, Vulnerability & Operations, and the Endpoint Engineer, the Security Configuration Engineer builds the baselines, telemetry logic, enforcement mechanisms, and operational workflows that keep endpoints hardened and compliant with NIST, CIS, SCAP, and internal policy requirements. This position is central to the ability to maintain secure configurations at scale, reduce configuration drift, and ensure systems remain in a hardened, validated state throughout their
lifecycle.

Looking for a CompTIA Security+ trainer or who already understands the certifcation process.

We run an internal operations platform for a tutoring business. It manages students, parents, tutors, scheduling, billing, and AI-assisted session reports. We're looking for an experienced reviewer to give us an honest, independent assessment of two things:

Is the platform architecturally sound and worth continuing to build on, or are there foundational problems that would justify rebuilding parts of it?
Are there security or data-protection gaps we need to address, given that it handles personal information about children, parent contact details, and billing data?

The platform is a modern web application built on Next.js and hosted on Vercel, with Sentry for monitoring.

What we want back:

A clear health assessment of the platform (architecture and code quality at a high level)
A security and data-protection risk review, with issues ranked by severity
A straightforward recommendation: continue as is, fix specific things, rebuild certain parts, or start over, with concrete reasons tied to what you actually find
A written report we can understand and share internally, with a short optional walkthrough if needed

This is a read-only review. Please do not run any active testing, scanning, or probing against our system until we've agreed on scope in writing and given you authorization.

We're open to bids. In your proposal, please include:

Your proposed price and timeline (or an hourly rate and estimated hours)
Your experience with Next.js / Vercel applications
How you'd approach a review like this
Any relevant certifications
A sample redacted report if you have one

Reviewers with experience handling platforms that store sensitive or minors' data are especially welcome.

We are seeking an experienced and highly motivated **Senior Cybersecurity Specialist** to join our growing team and help protect our clients' IT environments from evolving cyber threats. In this role, you will be responsible for securing networks, cloud platforms, endpoints, and business-critical systems while working closely with IT professionals and clients to implement industry best practices. The ideal candidate has a strong background in managed IT services, cybersecurity operations, vulnerability management, and cloud security, with the ability to proactively identify risks and recommend effective security solutions.

Your day-to-day responsibilities will include monitoring and maintaining secure IT infrastructures, performing security assessments and vulnerability scans, configuring and managing firewalls, endpoint protection, VPNs, and multi-factor authentication, and responding to security incidents when they arise. You will also assist with Microsoft 365, Google Workspace, Microsoft Azure, and AWS security, ensuring that client environments remain compliant, resilient, and protected against modern cyber threats. Experience with security monitoring tools, SIEM platforms, identity and access management, disaster recovery planning, and security policy implementation will be highly valued.

We are looking for someone who has at least three years of hands-on cybersecurity experience and is comfortable working in a fast-paced managed services environment. Professional certifications such as CompTIA Security+, CySA+, CEH, CISSP, AZ-500, SC-200, or similar certifications are preferred but not mandatory if you can demonstrate strong practical experience. A solid understanding of Windows Server, Active Directory, Microsoft Entra ID (Azure AD), networking fundamentals, endpoint detection and response (EDR), and common firewall platforms such as Fortinet, SonicWall, Cisco, or Palo Alto is highly desirable.

Success in this role requires excellent analytical and troubleshooting skills, strong written and verbal communication, and the ability to explain technical concepts clearly to both technical and non-technical stakeholders. We value professionals who are proactive, detail-oriented, dependable, and passionate about helping businesses strengthen their cybersecurity posture through preventative measures rather than reactive fixes.

When applying, please include a brief summary of your cybersecurity experience, the security tools and technologies you have worked with, any relevant certifications, examples of similar projects you have completed, your availability, your time zone, and why you believe you would be a great fit for this position. We are looking for someone who is committed to delivering exceptional service, building long-term client relationships, and contributing to a collaborative team focused on security excellence.

We are seeking an experienced Infrastructure Assessment Specialist to evaluate our on-premise and Azure infrastructure. The role involves conducting a thorough assessment of our current infrastructure, identifying potential security risks, and providing recommendations for improvements. The ideal candidate will have a strong understanding of network security and information systems.

We're looking for cybersecurity experts to help create evals to test AI in cybersecurity scenarios

Microsoft 365 Security Review & Hardening
Scope

We are looking for an experienced Microsoft 365 Security Engineer.

Most Microsoft 365 services, Microsoft Intune and Microsoft Defender are already deployed. We require a comprehensive review of our existing environment and implementation of any missing security controls and Microsoft best practices.

Review & Implement (where required)
Microsoft Entra ID
Conditional Access Policies
Microsoft Defender
Exchange Online
Microsoft Intune configuration
SharePoint
OneDrive
Microsoft Teams
Microsoft Loop security
Identity & Access Management
Administrative roles
Device compliance
Browser security
Email authentication (SPF, DKIM, DMARC)
Mail flow rules
Security policies
Audit logging
Microsoft Secure Score recommendations
Security Monitoring & Alerting

Review existing monitoring and implement where missing:

Unusual login alerts
Login from new countries
VPN / Anonymous proxy detection
Impossible travel
Password spray attacks
Risky users & risky sign-ins
Mass outbound email alerts
Mailbox forwarding alerts
Inbox rule alerts
SharePoint external sharing alerts
OneDrive sharing alerts
Admin role changes
Suspicious OAuth application consent
Security dashboards and reporting
Deliverables
Review existing configuration
Implement missing security controls
Optimise existing policies
Security improvement report
Best practice recommendations
Documentation
Administrator knowledge transfer

Microsoft Intune & Endpoint Optimisation
Scope

Review our existing Microsoft Intune deployment and optimise it based on Microsoft and ISO 27001 best practices.

Implement any missing controls where required.

Review & Implement
Windows Endpoint Security
Android MDM
Device Compliance Policies
Microsoft Defender for Endpoint
Security Baselines
BitLocker
Application Protection Policies
Windows Update Policies
Browser Policies
Block VPN browser extensions
Approved browser extensions
Device encryption
Remote wipe
BYOD policies
Mobile application management
Endpoint monitoring
Endpoint reporting
Deliverables
Review current implementation
Optimise existing configuration
Implement missing controls
Documentation
Administrator training
Handover for ongoing management

Hello, I'm looking for assistance with a digital investigation involving an Instagram account that I believe is being used to harass or impersonate someone. I'm not looking to gain unauthorized access to any account. I'm looking for help analyzing publicly available information, documenting evidence, and identifying any legitimate OSINT leads. Please let me know if this is within your area of expertise.

We are seeking an experienced Chief Information Security Officer to guide our company through ISO27001 and SOC 2 Type II compliance. The ideal candidate will have a strong background in information security and compliance, with the ability to lead our team in implementing and maintaining these standards. Responsibilities include conducting risk assessments, developing security policies, and ensuring compliance with regulatory requirements.

We need a full security analysis on a vibe coded app and added guardrails for future developments with Claude.

Ideally looking for someone with certification and who can help develop the document to follow.

We are expanding our technical team and looking for experienced professionals for multiple long-term, full-time remote contract opportunities.

Open Positions
Senior Solutions Architect – Global Payments Platforms
Senior Blue Yonder OMS Developer
Senior AI Engineer – Python, LangChain and LangGraph
Senior ETL Developer – Informatica PowerCenter
Senior Full-Stack Engineer – Java, Node.js and React
Senior Azure Data Engineer
Senior Adobe Developer
Senior Information Security Specialist

General Requirements
5+ years of relevant professional experience
Strong hands-on expertise in your selected role
Experience working on enterprise-level projects
Good English communication skills
Ability to collaborate with distributed international teams
Availability to work during EST business hours
Preference for candidates based in Latin America
Availability for a long-term, full-time engagement

How to Apply
Please include the following in your proposal:

The position you are applying for
Your latest resume
Your current location
Total years of relevant experience
A brief description of your most relevant project
Your expected hourly rate
Your earliest available start date
LinkedIn, GitHub, or portfolio link, where applicable

Please apply only if your experience closely matches one of the listed positions. Shortlisted candidates will be contacted for an initial technical screening and further project details.

m the owner of Sagerlabs, a marketing agency. Our Instagram business account was recently disabled by Meta, which we believe was a wrongful ban — our account was used solely for legitimate professional marketing for global and regional brand clients.

We are looking for someone with proven experience recovering disabled Meta/Instagram business accounts to help us appeal this decision and restore access.

Please only reach out if you have verifiable past success with similar cases. We are happy to discuss your process and fee.

m the owner of Sagerlabs, a marketing agency. Our Instagram business account was recently disabled by Meta, which we believe was a wrongful ban — our account was used solely for legitimate professional marketing for global and regional brand clients.

We are looking for someone with proven experience recovering disabled Meta/Instagram business accounts to help us appeal this decision and restore access.

Please only reach out if you have verifiable past success with similar cases. We are happy to discuss your process and fee.

We are looking for an email security audit for our org. Including comprehensive review of DNS records, DMARC, SPF, DKIM. As well as overall domain and deliverability reviews. This will be a one time audit and short term review.

Program Engineer – Vulnerability & Asset Management is responsible for executing and continuously improving Continuous Threat Exposure Management (CTEM) operations by managing Network Discovery, Asset Discovery, and Vulnerability Assessment activities across the enterprise. This role ensures comprehensive visibility of IT, OT, IoT, cloud, and virtual assets while maintaining accurate asset inventories and validating cybersecurity risks through authenticated and unauthenticated vulnerability scanning.

We are a technology services company seeking an experienced ISO 27001 consultant to help us achieve certification.

We already have some policies in place but need support with the full implementation process, including:

* Gap assessment
* Policy and procedure development
* Internal audit preparation
* Certification audit readiness

The ideal candidate should:

* Have successfully led organizations through ISO 27001 certification
* Hold relevant ISO 27001 qualifications or certifications
* Have experience working with technology or professional services companies

I need someone to recover the password for my own AES-256 encrypted ZIP file.

We are seeking a Senior Network & Information Security Consultant to enhance our security posture. The role involves conducting penetration testing, security analysis, and network security assessments. The ideal candidate will have experience in information security and be able to provide strategic recommendations to improve our security infrastructure.

We are seeking a qualified and currently certified SWIFT Customer Security Programme (CSP) Assessment Provider or Certified Assessor to support an upcoming engagement.

The successful applicant will be expected to conduct or support an independent SWIFT CSP assessment in accordance with the current SWIFT Customer Security Controls Framework (CSCF) and Independent Assessment Framework.

Scope of engagement:

Review the organisation’s SWIFT environment and applicable architecture.

Assess compliance with the current SWIFT mandatory and advisory security controls.

Review relevant policies, procedures, configurations and supporting evidence.

Identify control gaps and recommend appropriate remediation measures.

Prepare a formal SWIFT CSP assessment report and other required deliverables.

Support clarification of assessment findings where necessary.
Provide professional credentials and supporting documentation for inclusion in our tender proposal.