Optimize Your Internet Security Projects

I want to delete a scam website to help people in future from same problem

Here’s what I already know:
• I have the exact URLs where my content appears.
• The material is plain text (no images, video, or user data involved).

What I need from you:
• A clear plan—whether that involves a DMCA notice to the host, direct server-side takedown, or another legitimate technical path—to get the text pulled down.
• Implementation of that plan and confirmation that the text is no longer publicly accessible.
• A concise hand-off document so I can repeat the process if the site resurfaces.

Experience with WHOIS look-ups, host/registrar escalation, cPanel or FTP intervention, and content-removal best practices is essential. If you’ve successfully removed stolen text from scam sites before, I’d love to hear how quickly you can act and what information you’ll need from me to start right away.

Skills: Web Security, WordPress, Technical Support, MySQL, Website Management, Web Hosting, Internet Security, cPanel

We are seeking a highly skilled, discreet, and expert Cyber Security Specialist / Internal Systems Auditor to monitor platform integrity, investigate staff activities, and ensure strict compliance with company policies. The ideal candidate will operate quietly to identify system abuses, fraudulent activities, and policy violations.

Key Responsibilities
Audit & Investigation: Actively monitor and investigate the activities of all staff members (from new hires to 20+ year veterans).

Threat & Error Detection: Identify system errors, duplicate accounts, fake profiles, and malicious actors within the network.

Account Actions: Permanently block and suspend accounts involved in unauthorized activities, including casino/gambling operations, harmful political agendas, or toxic/aggressive behavior.

Asset Management: Freeze unauthorized accounts, mark balances as non-withdrawable, and securely route recovered company funds to the designated IBBL (Islami Bank Bangladesh PLC) account.

Reporting & Compliance: Compile comprehensive investigative reports. When necessary, file General Diaries (GD) or official reports with local police stations regarding illegal activities.

Client Retention: Discretely connect with the clients of suspended staff members and smoothly transition them to trusted employees.

Direct Reporting: Provide regular, confidential updates on findings directly to the owner via online or direct channels.

Shift & Working Hours
This role requires a dedicated, flexible schedule structured around specific rest periods:

Rest/Off Hours: 10:00 PM to 10:00 AM (Sleeping time), plus 2 hours for meals, 1 hour for rest, and 1 hour for standard breaks.

Working Hours: All remaining hours outside of the specified rest times are dedicated to active monitoring and duties.

Job Requirements & Qualifications
Experience: Proven experience in internet technologies, advanced programming, and network security.

Education: A strong background in the Sciences. A College Certificate/Diploma in a relevant technical field is required. (A D.Sc. / Doctor of Science is not required, but high-level technical capability is mandatory).

Attributes: High integrity, absolute discretion, and the ability to work covertly without disrupting daily operations.

A Quick Note on System Security & Legalities
When hiring for a role with this much power, keep these industry best practices in mind:

Legal Framework: Transferring account balances, blocking funds, and reporting to the police (via GD) must strictly follow Bangladesh’s digital security and financial laws to protect your business from legal liabilities.

Access Control: Do not give a new hire total control over your IBBL bank routing immediately. Use secure, automated payment gateways or multi-signature approvals so funds are transferred safely without relying on a single person's manual intervention.

Skills: Computer Security, Technical Writing, Compliance, Risk Management, Network Administration, Internet Security, Penetration Testing, Network Security, Fraud Detection, Risk Assessment

Our organisation’s digital footprint has outgrown the piecemeal protections we put in place over the past few years, so it is time for a coordinated security overhaul. I want a seasoned cyber-security professional to look holistically at our environment, uncover weak points, and help us close them before they become incidents.

Scope
• Full audit of the current estate—on-prem servers, cloud services, publicly facing web components, internal network segments, and any API endpoints.
• Clear, prioritised report of vulnerabilities with risk ratings and practical remediation steps.
• Hands-on implementation or guidance for fixes (patching, hardening, access-control tweaks, WAF rules, etc.), followed by verification testing to confirm each issue is resolved.
• Optional but desirable: a concise security-awareness briefing for key staff so the improvements stick.

Tools & methods are up to you; I am comfortable with industry standards like OWASP, NIST CSF, Nessus, Burp Suite, Metasploit, Wireshark, or comparable stacks if you prefer.

Deliverables
1. Initial assessment report.
2. Remediation plan with timeline.
3. Evidence of completed fixes (screenshots, logs, or retest output).
4. Final summary and next-steps recommendations.

Please outline your proposed approach, estimated timeframe, and any prerequisites you will need from my side so we can get started quickly.

Skills: System Admin, Web Security, Computer Security, Risk Management, Internet Security, Penetration Testing, Cloud Security, Network Security

My WordPress website has been compromised and needs to be restored as soon as possible.

Website: https://advokat-chorney.com/

## Scope of Work

* Restore the website after the hack.
* Remove all malware, backdoors, and malicious code.
* Secure the website to prevent future attacks.
* Perform a comprehensive technical audit of the website.
* Perform a comprehensive SEO audit of the website.
* Verify that the website is fully functional after recovery.

## Deliverables

At the end of the project, I expect a detailed report covering:

* What caused the security breach (if identifiable).
* What malware or vulnerabilities were found.
* What actions were taken to restore and secure the website.
* Results of the technical audit, including issues found and recommendations.
* Results of the SEO audit, including issues found and recommendations.
* Best practices and recommendations for ongoing website maintenance and security.

I will provide the selected freelancer with hosting access (and any additional access required) after hiring.

## Requirements

* Proven experience with WordPress malware removal and hacked website recovery.
* Strong knowledge of WordPress security best practices.
* Experience performing technical and SEO audits.
* Ability to start immediately.

This is an urgent project, so please include your estimated turnaround time in your proposal.

i need to recover account of mine on instagram thank you

Job Description

We are looking for an experienced Meta/Facebook Account Recovery Specialist who has successfully handled hacked Facebook accounts, disabled accounts, Meta Business Manager ownership issues, and verified Facebook Pages.

Background

The original owner of our Meta Business is Yousafzai Mehran.

His personal Facebook account was hacked. After the hack, Facebook permanently disabled his account.

That account was the owner of our Meta Business assets, including:

Verified Facebook Page Inspired Jackets (Blue Tick)
Multiple Facebook Pages
Meta Business Manager
Other business assets

Our Instagram account (Inspired Jackets) is still active and verified with a Blue Tick.

What Happened

I am Rizwan Khan.

Before the hack, I also had admin access to the Inspired Jackets Facebook Page.

After hacking Mehran's account, the hacker removed me from the Facebook Page and Business assets.

The hacker also invited unknown people to our Facebook Page and business assets.

As a result, we lost ownership and admin control of our Facebook assets.

What We Have Already Tried
Reported the hacked account multiple times.
Used Facebook Hacked Account Recovery.
Contacted Meta Verified Support through live chat.
Contacted Meta Support through email.
Submitted multiple recovery requests.

Facebook can locate the original account, but recovery always stops with:

"Try another device to continue."

Later, Meta informed us that the original Facebook account was permanently disabled.

What We Need

We need an expert who can:

Recover the original Facebook owner account (if possible).
Recover ownership of our Meta Business Manager.
Restore admin ownership of our verified Facebook Page (Inspired Jackets).
Remove unauthorized people added by the hacker.
Guide us through the official Meta recovery and escalation process.
Available Evidence

We can provide:

Meta Support email history.
Meta Verified chat history.
Screenshots of recovery attempts.
Business email.
Government ID of the original owner (if required).
Proof that we own the business and brand.

Please apply only if you have successfully recovered similar Meta Business ownership or hacked Facebook account cases through official Meta channels.

SMM Panel Project Requirements, Security Fixes & Terms

Project Overview:

I have an SMM Panel script that requires complete malware/backdoor removal, dashboard recovery, code optimization, and theme icon repairs. The developer must make the script production-ready, optimize it for a live server, and ensure it complies strictly with the terms below.

Budget: INR 1,000 - INR 2,000 (Fixed Price)

1. Complete Malware, Backdoor & Leak Removal (Strict Policy)

The script currently contains malicious data leak vectors that must be completely wiped out:

Credential & 2FA Leaks: Clean the database queries and controllers where the script attempts to silently email or cURL the Admin Username, MD5/SHA1 Password hashes, and Google Authenticator (6-digit 2FA) secret keys to external networks/addresses.

Zero Hidden Codes: Remove all unauthorized external traffic routing, hidden malicious tracking loggers, or unauthorized callbacks.

Freelancer Support Penalty Policy: The final script must be 100% clean. If any backdoor, remote panel locker, malicious injection, or data leak vulnerability is found during testing, the project will be flagged as incomplete/fraudulent under Freelancer Support terms, and no milestone will be released.

2. Admin Panel Recovery & Broken Code Policy

The admin panel layout/dashboard is currently completely inaccessible or throwing errors (white screen/routing failures).

Audit the main admin controller and routing architecture to restore full super-admin session handling securely.

Strict "No Broken Code" Rule: Every single file must contain fully completed syntax and functional logic. No broken loops, cut-off code blocks, or incomplete operations will be accepted. The project will be deemed incomplete if any page remains non-functional due to partial coding.

3. Core Script Bug Fixing

Authentication Repair: Fix the login structure in auth.php. Resolve the global loop errors outside the POST validation, and fix missing currency cookies during email login flows.

Blog Controller Fix: In the blog system, replace the wrong UPDATE queries with clean SELECT actions to prevent the page from throwing fatal database fetch errors.

Form Validations: Correct structural bugs like the incomplete Drip-feed HTML output array in neworder.php and unhandled variables inside manual order workflows.

4. UI/UX Fixes: Missing Theme Icons (Galti Sudhar Di Gayi Hai)

There are 20 total themes available in the panel to change the website's look. However, the layout change icons for all 20 themes are completely missing or broken.

The developer must fix and integrate all missing theme selection icons, standardizing them using clean FontAwesome tags or responsive SVG/Unicode icons so they display perfectly on both mobile and desktop views.

5. Final Licensing & Full Ownership Rights

Unlimited Multi-Domain Use: The script must not be locked or tied to a single domain name or server IP. I must be able to run this script on any domain name now and in the future without any license restrictions or callback errors.

100% Permanent Ownership: I will hold 100% full, unconditional ownership and legal rights over the entire cleaned codebase. No developer tags, encrypted blocks (IonCube/Zend), or remote dependencies are allowed.

Skills: PHP, Web Security, CSS, MySQL, Internet Security, Web Development, Security, Database Management

Project Overview:

We are looking for an expert, senior-level Enterprise Network Architect/Engineer to lead a multi-vendor project deployment, design review, and the production of final As-Built documentation.
Our current infrastructure environment requires deep architecture alignment across modern software-defined networking (SDN), zero-trust security components, and centralized management fabrics. This is a critical infrastructure project requiring strict adherence to security compliance, high availability, and optimal traffic routing principles.

Scope of Work:

1. Architecture & Design Review

-Conduct a thorough review of the current network topologies, security zones, and high-level designs.
-Identify potential bottlenecks, asymmetrical routing risks, and security gaps before active staging.

2. Multi-Vendor Staging & Deployment Execution

-Palo Alto Networks: Deploy and configure next-generation firewalls (NGFW), including Prisma Access / Prisma SD-WAN architectures and centralized management via Panorama.
-Cisco Systems: Deploy, orchestrate, and validate policy enforcement within a Cisco ACI (Application Centric Infrastructure) environment, alongside core data center Nexus switches (NX-OS mode or ACI leaf/spine fabric integration).
-Fortinet Fabric: Fully configure and deploy FortiGate NGFWs, manage centralized provisioning and policies via FortiManager, and integrate logging/monitoring with FortiSIEM and access control with FortiNAC.

3. Validation & As-Built Documentation

-Perform rigorous post-deployment verification testing (failovers, policy matching, latency checks).
-Produce comprehensive, clear, and professional As-Built Documentation (including accurate Visio diagrams, IPAM registers, policy matrices, and configuration backups).

Required Technical Expertise:
-Palo Alto: Deep operational experience with Panorama, Prisma Access, and NGFW capabilities. PCNSE (Palo Alto Networks Certified Network Security Engineer) highly regarded.
-Cisco Data Center: Demonstrated expertise in Cisco ACI architecture (APIC controllers, tenant/EPG configurations, contracts) and Nexus platforms (9K/7K/5K). CCNP Data Center or CCIE preferred.
-Fortinet Fabric: Solid track record deploying FortiGate, FortiManager, FortiSIEM, and FortiNAC. NSE 7 or NSE 8 certification is a massive advantage.
-Documentation: Exceptional technical writing skills with the ability to map out complex multi-vendor workflows clearly.

Project Details:
-Project Type: Fixed-term / Milestone-based preferred (open to hourly for the right elite candidate).
-Location: Remote, but must be available for overlap during core business hours for sync meetings and deployment windows.
-Duration: 1–3 months

How to Apply:
-Please provide a brief summary of your experience handling multi-vendor deployments of this scale. In your application, please highlight:
-A brief overview of a recent Cisco ACI or Prisma deployment you successfully executed.
-Your availability for scheduled migration windows.
-Optional but preferred: A redacted example of a previous As-Built or network design document you have authored.

Skills: Troubleshooting, Technical Writing, Report Writing, Cisco, Network Administration, Internet Security, Documentation, Network Security, Network Engineering, Firewall

Look for someone with experience in:

* WordPress security hardening
* Malware cleanup
* Vulnerability remediation
* Plugin conflict resolution
* PHP
* MySQL
* Apache/Nginx
* Cloudflare
* Linux
* WP-CLI
* OWASP Top 10
* Patch management
* Wordfence (or similar)
* Security headers
* CSP/HSTS
* SSL/TLS

Need assistance with verifying a GSuite domain and setting up a new website on Netlify. The task requires ensuring that the email services are not disrupted during the process. The budget for this task is $50 per project.

I want to recover my page; a competitor reported me.

A. Using unauthorized versions of Cobalt Strike to brutally force access into victims' computers; using unauthorized versions of Cobalt Strike to operate a global malware and ransomware infrastructure, using unauthorized versions of Cobalt Strike to deploy malware and ransomware to victims' machines; using unauthorized version of Cobalt Strike to offer RaaS to other malicious actors; using the Conti and LockBit ransomware deployed via unauthorized Cobalt Strike to run and add its own protocols to the Microsoft operating system to go through the list of services [*3] and terminates services that are related to backup and recoveries as well as terminating security processes related to operating tool, which causes hundreds of lines of Microsoft's declaring code and the structure, sequence, and organization of that code are copied with and across unauthorized, cracked Cobalt Strike modules and ransomware like LockBit; using the infected victims' computers to send commands and instructions to the infected computing device to control it surreptitiously and deliver malware that, among other things, enables Defendants to take control of the victim's computer and extort money from them. Defendants' primary goal is to deliver ransomware and enable attacks against other computers; or stealing information, money or property from Plaintiffs, Plaintiffs' customers or Plaintiffs' member organizations, or undertaking any similar activity that inflicts harm on Plaintiffs, or the public, including Plaintiffs' customers or associated member organizations

B. Configuring, deploying, operating or otherwise using or unauthorized Cobalt Strike to facilitate the deployment of defendants' malware and ransomware activities described in the TRO Application, including but [*4] not limited to the C2 infrastructure hosted at and operating through the domains and IP addresses set forth herein and through any other deployments of unauthorized Cobalt Strike in any location.

Skills: Web Security, Computer Security, Windows Server, Risk Management, Internet Security, Penetration Testing, Network Security, Digital Forensics, Data Protection, Intellectual Property Law

UPWORK JOB POSTING

Comprehensive Security, Vulnerability, and Compliance Testing Engagement

Mobile Application • Website • Financial Infrastructure • Chain of Custody Architecture

ISO 42001 • NIST AI RMF • NIST SP 800 series • OWASP • Federal Digital Evidence Standards

Fixed Price — 9,200 USD • Four Milestones • Milestone Certifications Required

---

READ THIS FIRST — DO NOT APPLY IF YOU CANNOT SATISFY ALL REQUIREMENTS

This engagement requires a REGISTERED BUSINESS ENTITY — not an individual freelancer — that has previously produced security certifications, compliance certifications, and forensic integrity reports that have been accepted in professional, legal, or regulatory contexts.

VENDORS WHO DO NOT MEET ALL OF THE FOLLOWING SHOULD NOT APPLY. YOUR PROPOSAL WILL BE IGNORED:

Your organization holds active CREST, CERT In empanelment, or equivalent nationally recognized cybersecurity accreditation verifiable through a public registry
Your organization holds ISO 27001, SOC 2 Type II, or CMMC Level 2 certification for your OWN operations
Your team includes a named examiner with CFCE, EnCE, ACE, GCFE, or GCFA certification for the forensic integrity report
Your team includes a named examiner with OSCP, CEH, GPEN, or GMOB certification for penetration testing
Your organization has previously issued security certifications and compliance certifications that have been presented in legal proceedings, regulatory submissions, or enterprise procurement processes
Your organization has conducted prior mobile application security assessments on iOS and Android physical devices
Your organization has prior experience with United States federal and state regulatory requirements including COPPA, BIPA, and recording consent law

Vendors who cannot satisfy all of these requirements should not apply. AI-generated proposals that do not answer the competency screening questions with specific, verifiable, experience-based answers will not be reviewed.

---

MILESTONE CERTIFICATION REQUIREMENT — THIS IS NON-NEGOTIABLE

The engagement requires the contractor to issue a written certification on official business letterhead at the completion of each milestone. These are not summary reports. They are formal certifications signed by an authorized officer of the contractor's registered business entity that state specifically what was tested, what passed, and that the tested components are certified as meeting the standards applied in the engagement.

MILESTONE 1 CERTIFICATION IS THE MOST CRITICAL. The platform may receive subpoenas or law enforcement requests for recorded evidence during its beta launch period. Milestone 1 specifically covers the chain of custody architecture, evidence package delivery security, and 51-jurisdiction recording consent compliance. The Milestone 1 certification — issued on official letterhead within 15 business days of engagement start — is the document the client presents if compelled to produce recordings to a court or law enforcement agency during beta. Without it the platform has no independent verification of its forensic integrity.

If a contractor cannot issue an official business letterhead certification with an authorized officer signature, a unique traceable reference number, and independent verification contact information for each milestone that passes — that contractor cannot perform this engagement.

Certifications must be independently verifiable. Law enforcement, attorneys, and courts must be able to contact your organization directly to verify any certification issued under this engagement.

---

1. ENGAGEMENT OVERVIEW

A consumer-facing mobile application operating across all 50 US states and Washington DC requires a comprehensive independent security, vulnerability, and compliance testing engagement before official public launch. The platform is a compliance-grade personal safety and forensic evidence documentation system. Its Evidence Vault stores audio and video recordings made under a 51-jurisdiction recording consent compliance engine. Evidence Packages from the platform are submitted to law enforcement officers, licensed attorneys, private investigators, and courts as forensic evidence in civil and criminal legal proceedings.

This is not a standard mobile application security audit. The platform's outputs will be used as evidence in criminal prosecutions. The certifications produced under this engagement will be presented to District Attorneys, defense counsel, judges, law enforcement agencies, and enterprise procurement officers. The forensic integrity report produced under this engagement is a court-presentation document that must withstand cross-examination by a defense attorney. Every deliverable in this engagement carries legal evidentiary weight. Vendors who approach this as a routine VAPT engagement are not the right fit.

The complete Statement of Work covering all testing requirements, formal test cases, acceptance criteria, milestone deliverables, and contractor qualification requirements will be provided as an attachment to qualified candidates after initial screening. This posting is a summary and screening document only.

---

2. SCOPE SUMMARY — FOUR MILESTONES

MILESTONE 1 IS TIME-CRITICAL AND NON-NEGOTIABLE ON TIMELINE

Milestone 1 must be completed within 15 business days of the written green light from the client. This timeline is a condition of the engagement, not a target. A contractor who cannot commit to 15 business days for Milestone 1 should not apply.

Milestone 1 covers the components required if a court order, subpoena, or law enforcement evidence request arrives during the beta period. The certification issued at Milestone 1 completion is the legal verification document for this scenario.

Milestone 1 — Court-Order Readiness Certification — 2,500 USD — 15 Business Days

Part A Security Testing: Chain of custody architecture security across four flows — inbound vendor certification document upload (9 test cases including dual-authorization model, revocation, APN port access control, and HASH_COMPROMISED status), outbound evidence package transmission to law enforcement, attorneys, and private investigators (6 test cases), outbound certification document request and delivery (8 test cases including 72-hour link expiry and rejection notification), and SHA-256 cryptographic integrity across all flows (7 test cases including rate limiting and end-to-end hash chain)

Part A Security Testing: Evidence Package access and chain of custody penetration testing for all four recipient classes — trusted contacts, licensed attorneys, law enforcement officers, and private investigators — including credential bypass testing and cross-recipient sequential chain integrity

Part B Compliance Verification: 51-jurisdiction Compliance Decision Engine verification — JUR-01 through JUR-04 and REC-01 through REC-05 verified across all 51 US states and Washington DC using simulated GPS on physical iOS and Android devices

Milestone 1 Deliverable: Interim Chain of Custody and Evidence Delivery Certification issued on official business letterhead, signed by authorized officer, unique reference number, stating what was tested, what passed, what was not tested in this milestone, and the platform version tested

---

Milestone 2 — Mobile Application Security Assessment — 2,000 USD — 30 Business Days

Part A: Complete iOS and Android mobile application security assessment on physical devices — VAD acoustic embedding data handling, BIPA and state biometric privacy verification across 11 enumerated states, VAD behavioral accuracy testing across 6 scenarios with 80/85 percent acceptance thresholds, Fake Call compliance testing across 5 formal test cases, VAD session start delay gate across 5 scenarios, COPPA compliance across 11 test items, SOS emergency dispatch sandbox testing across 5 controls, iOS silent mode compliance fallback, website penetration testing, enterprise account security across 6 test areas

Milestone 2 Deliverable: Mobile Application Security and Vulnerability Assessment Report with separate iOS and Android findings for every single test — no combined results accepted — device make, model, and OS version documented, severity ratings, remediation recommendations, on official letterhead

Milestone 2 Certification: Written certification on official letterhead that mobile application security testing for Milestone 2 scope was completed and all Critical and High findings were retested and confirmed resolved

---

Milestone 3 — Infrastructure and Financial Security Assessment — 1,500 USD — 40 Business Days

Part A: Payment and webhook security — Stripe Connect multi-entity isolation, webhook signature validation, replay attack testing, IRS transfer pricing fourteen-field metadata schema integrity, subscription privilege escalation

Part A: Financial infrastructure security — third-party accounting integration injection point and Smart Rules security, six-file multi-entity accounting access isolation, intercompany transaction integrity, financial audit trail immutability and export for CPA review

Part A: GPS, live map, and family location security — simulated GPS jurisdiction detection across all 51 states on physical iOS and Android devices, GPS spoofing resistance, five Profile A and B state border scenarios, on-device reverse geocoding verification, live map access control, family GPS at maximum account member count using mixed iOS and Android device configuration

Milestone 3 Deliverable: Infrastructure and Financial Security Assessment Report with separate iOS and Android results for all GPS and location tests, financial infrastructure findings documented separately, on official letterhead

Milestone 3 Certification: Written certification on official letterhead that infrastructure and financial security testing for Milestone 3 scope was completed and all Critical and High findings were retested and confirmed resolved

---

Milestone 4 Final — Full Compliance Verification and Four Certifications — 3,200 USD — 55 Business Days

Part B: Full 48-control Implementation QA Compliance Checklist verification across all 10 control categories and all account tiers — consumer, professional, and enterprise — with separate iOS and Android results

Part B: BIPA compliance across all 11 enumerated states, VAD behavioral accuracy thresholds confirmation, Washington state announcement-in-recording verification, Delaware profile classification correction, enterprise account compliance, financial compliance including IRS transfer pricing rules and accounting audit trail export, NIST SP 800 series test coverage adequacy gap report

Milestone 4 Required Deliverable 1 — FORENSIC INTEGRITY VERIFICATION REPORT: Court presentation standard. CFCE, EnCE, ACE, GCFE, or GCFA certified examiner. Minimum 500-word methodology. Independent SHA-256 verification table for minimum 10 test files. Minimum 5 WORM mutation attack vectors. Minimum 3 Legal Hold bypass scenarios. Expert conclusion statement. Statement of examiner independence. Official letterhead.

Milestone 4 Required Deliverable 2 — PART A SECURITY CERTIFICATION: All Critical and High vulnerabilities retested and confirmed resolved. Authorized officer signature. Official letterhead.

Milestone 4 Required Deliverable 3 — PART B COMPLIANCE CERTIFICATION: All required controls confirmed operational across all account tiers. Compliance attorney opinion letter reference number cited. Authorized officer signature. Official letterhead.

Milestone 4 Required Deliverable 4 — CERTIFICATE OF STANDING: Complete engagement scope covered. All findings status documented. No Critical or High vulnerabilities remain open. All 48 controls and 51 jurisdictions verified. Authorized officer signature. Unique certificate reference number. Official letterhead.

ALL FOUR MILESTONE 4 DOCUMENTS ARE REQUIRED SIMULTANEOUSLY. Payment releases only when all four are received and accepted. Receipt of three does not trigger payment.

---

3. ENGAGEMENT PROTOCOL

Start-stop engagement: Testing for each milestone begins only upon written green light from the client confirming the development team is ready. Timeline clocks start from the green light date, not the contract start date.

Hold notices: The client may pause any milestone if additional development work is required. The vendor must resume within five business days of the new green light.

Remediation and recheck: When findings are identified the development team remediates and the vendor retests. After all Critical and High findings are resolved the vendor conducts a full recheck of every previously passing test case within that milestone before issuing the milestone certification.

Advancement gate: The vendor may not advance to the next milestone without written client acceptance of the current milestone deliverable, milestone payment released, and written green light for the next milestone.

---

4. CERTIFICATION AUTHORITY REQUIREMENTS

The certifications issued under this engagement will be presented in criminal proceedings, civil litigation, law enforcement investigations, and enterprise procurement processes. A certification from a contractor who lacks institutional standing has no value in these contexts.

Every certification issued under this engagement must: be on official business letterhead with your registered business address and active website address, be signed by a principal or authorized officer of your registered entity, carry a unique traceable reference number, be independently verifiable by contacting your organization directly, include a dedicated verification contact on the certificate face, and state the name and active credential of every examiner who contributed to the assessment.

Your organization must have previously issued certifications that have been accepted in professional or legal contexts. Certifications that have never been presented outside a client's internal files do not satisfy this requirement.

---

5. MANDATORY COMPETENCY SCREENING QUESTIONS

THESE QUESTIONS MUST BE ANSWERED IN FULL. INCOMPLETE OR GENERIC ANSWERS WILL RESULT IN DISQUALIFICATION.

These questions are designed to verify direct hands-on experience and institutional competency. They cannot be answered satisfactorily using general knowledge or AI-generated text. Each answer must be specific, verifiable, and grounded in your organization's actual prior work.

Section A — Forensic Integrity and Chain of Custody

Question 1. Describe a specific prior engagement where your organization produced a forensic integrity report for a digital evidence preservation system that was presented in a legal proceeding. Identify the type of proceeding (criminal, civil, regulatory), the role the report played, and the outcome. Do not identify the client by name if confidential but describe the industry and nature of the system. What specific tests did your examiner conduct and what tools were used to independently verify SHA-256 hashes?

Question 2. Your organization is about to certify a WORM-protected evidence vault for a consumer mobile application. The vault stores audio and video recordings in 5-to-10-second chunks each with an independent SHA-256 hash. A defense attorney challenges the vault integrity by arguing that the hash verification relies on the platform's own tools rather than independent verification. Walk through your methodology for responding to this challenge. What specific independent tools do you use? How do you document the independence of your verification in a way that satisfies a court?

Question 3. Your organization is required to produce a chain of custody log export for a single certification document that was transmitted to a law enforcement officer, then to a District Attorney, then introduced as evidence in a federal criminal proceeding. The export must be suitable for court submission. Describe the format, required fields, and structure of that export document. How does your organization ensure the chain of custody log is append-only and tamper-resistant? What happens to the chain of custody record if the platform is acquired or restructured?

Section B — Mobile Application Security Testing

Question 4. Your team is testing a Voice Activity Detection engine on a physical iOS device. The engine creates ephemeral acoustic embeddings in RAM during a session and is required to destroy them at session end with no persistent storage and no off-device transmission. Describe your methodology for verifying that the embeddings are truly destroyed at session end and that no data remnants exist. What OS-level tools and memory analysis techniques do you use on iOS specifically? How does your approach differ on Android?

Question 5. During a mobile application penetration test you discover that the jurisdiction detection engine — which determines which recording consent profile to apply based on GPS location — can be spoofed by a GPS mock application. The engine defaults to the most permissive recording profile when GPS confidence is low rather than the most restrictive profile. Classify this finding by severity and explain your reasoning. What attack scenarios does this enable? What remediation do you recommend and how do you verify the remediation is effective at the enforcement layer rather than only the UI layer?

Question 6. Describe a prior engagement where your organization tested COPPA compliance controls on a consumer mobile application. What specific tests did you conduct? What is the FTC's current civil penalty exposure for COPPA violations and how does that inform your testing priority? What is the specific legal threshold that triggers COPPA obligations and how do you verify a platform's age gate satisfies it?

Section C — Compliance Verification and Framework Assessment

Question 7. A mobile application operates across all 50 US states and Washington DC. It records audio and video of users and nearby third parties during real-time safety sessions. Different states require different levels of consent — some require only one-party consent, others require all-party consent with an audible notice. The platform has implemented four recording consent profiles driven by a Compliance Decision Engine that detects jurisdiction from GPS. Name three specific states where all-party consent is required, cite the applicable statute for each, and describe what the platform must do technically to satisfy each statute's notice requirements. Then explain what Profile B means in a multi-participant session where participants are in different consent-profile states.

Question 8. Your organization has been asked to verify that a platform satisfies NIST SP 800 series control testing requirements across 48 control IDs spanning 10 compliance categories. The existing automated test suite has 185 tests across 37 suites. Describe specifically how you evaluate whether an existing automated test suite meets NIST SP 800 series adequacy standards. What control families are most commonly under-tested in consumer mobile applications? What does your gap report look like and how do you structure your remediation recommendations so a development team can implement them efficiently?

Question 9. The platform's Voice Activity Detection engine must satisfy the Illinois Biometric Information Privacy Act. The engine creates in-memory acoustic embeddings during recording sessions and destroys them at session end. The embeddings are never written to persistent storage and never transmitted off-device. A plaintiff's attorney argues the acoustic embeddings constitute biometric identifiers under BIPA because they are derived from biological characteristics. Evaluate this argument. Does the ephemeral in-memory implementation trigger BIPA's requirements? What specific statutory language is determinative? How does your organization document the compliance position in a way that would support a motion to dismiss a BIPA class action?

Section D — Certification Issuance and Institutional Standing

Question 10. Provide a description of a prior security certification or compliance certification your organization has issued that was subsequently presented in a legal proceeding, regulatory submission, or enterprise procurement process. Describe the certification's content, who signed it, how it was verified by the receiving party, and what role it played. You may redact client names and case identifiers. The description must include the type of proceeding, the jurisdiction, and the specific compliance or security standards the certification addressed.

Question 11. A law enforcement officer contacts your organization six months after you issued a Milestone 1 chain of custody certification for a mobile platform. The officer is preparing to testify in a federal criminal proceeding and needs to verify that the certification is authentic, that the named examiner held the stated credentials at the time of testing, and that the platform version tested matches the version from which the evidence was produced. Walk through exactly how your organization handles this verification request. What documentation do you maintain, for how long, and through what internal process does a verification request get handled?

Question 12. Your organization has just completed security testing for a milestone and identified three Critical vulnerabilities and four High vulnerabilities. The development team has remediated all seven. You have retested and confirmed all seven are resolved. Before issuing the milestone certification you are required to conduct a full recheck of every test case within the milestone that previously passed. During the full recheck you discover that one remediation introduced a regression — a test case that previously passed now fails. How do you handle this? What does your certification say about the discovered regression? What is your communication process with the client? How do you document the regression discovery in the chain of custody of your own testing records?

Section E — Financial Infrastructure and GPS Security

Question 13. A multi-entity payment platform uses Stripe Connect with a platform master account and connected accounts for multiple operating entities. A security assessment must verify that the connected account architecture does not allow one entity's payment data to be accessed through another entity's credentials. Describe your methodology for testing this isolation. What specific API calls do you make, what attack vectors do you test, and how do you verify that the IRS transfer pricing metadata stamped on PaymentIntents cannot be stripped or modified through any accessible API endpoint?

Question 14. A consumer mobile application must convert GPS coordinates to neighborhood-level descriptors on-device before transmitting location information in SMS alerts. Raw GPS coordinates must never appear in any outbound transmission. Describe your methodology for verifying that raw GPS coordinates are not present in any SMS payload, push notification, or API call under any device state — including degraded GPS reception, background mode, and airplane mode. What tools do you use to intercept and analyze outbound network traffic on physical iOS and Android devices simultaneously?

---

6. PROPOSAL REQUIREMENTS

PROPOSALS MISSING ANY OF THESE ELEMENTS WILL NOT BE REVIEWED

1. Full answers to all 14 competency screening questions above. Answers must be specific and experience-based. Generic or AI-generated answers will be identified and disqualified.
2. Your company's full legal registered name, business registration number, jurisdiction of registration, and active public-facing website address.
3. Your organization's accreditation reference number (CREST registration, CERT In empanelment number, or equivalent) and the public verification registry where it can be independently verified.
4. Your organization's own ISO 27001, SOC 2 Type II, or equivalent certification reference number and issuing body.
5. The full name, active certification name, certificate number, issuing body, and expiry date of the forensic examiner who will produce the Milestone 4 forensic integrity report. Minimum credential: CFCE, EnCE, ACE, GCFE, or GCFA.
6. The full name, active certification name, certificate number, issuing body, and expiry date of the lead Part A penetration testing examiner. Minimum credential: OSCP, CEH, GPEN, or GMOB.
7. A SAMPLE PART A SECURITY CERTIFICATION previously issued by your organization on official business letterhead. Client names may be redacted. Must show authorized officer signature, unique reference number, scope certified, and examiner credentials. Required separately from the compliance certification sample.
8. A SAMPLE PART B COMPLIANCE CERTIFICATION previously issued by your organization on official business letterhead. Must show authorized officer signature, unique reference number, compliance framework and control scope verified, and lead examiner credentials. Required separately from the security certification sample.
9. Part A pricing and Part B pricing as separate line items with a combined total not exceeding 9,200 USD.
10. Written confirmation that your organization can issue a Milestone 1 interim certification within 15 business days of the written green light and that this timeline is a firm commitment, not an estimate.
11. Written conflict of interest disclosure confirming no relationship with any competitive platform in the personal safety application or evidence documentation market.

---

7. COMPLETE SOW PROVIDED TO QUALIFIED CANDIDATES

The complete Statement of Work — covering all formal test cases, acceptance criteria, contractor qualification requirements, milestone deliverable specifications, start-stop protocol, remediation and recheck procedures, chain of custody requirements, and certification issuance standards — will be provided to candidates who pass initial screening.

Initial screening is based on the competency questions above and the proposal requirements above. Candidates who are screened in will receive the full SOW and will be asked to confirm their proposal covers the complete scope before award.

Do not request the full SOW before submitting your proposal. The SOW will not be shared with candidates who have not submitted a complete proposal meeting all requirements above.

I am seeking a skilled freelancer to enhance my personal cyber security. The project involves conducting a security analysis, implementing network security measures, and ensuring internet security. The ideal candidate will have experience in information security and be able to provide recommendations for improving my current setup. This is a part-time engagement with a short-term duration.

I need a Meta Support expert to help me recover my Instagram account which was permanently disabled on 29 June 2026.
Here are the exact details of the issue:
1. Status: The account is disabled for "account integrity" violations.
2. Blocked Appeals: The screen explicitly says "You cannot request another review of this decision" on the browser.
3. Identity Verification Issue: When attempting to log in or use recovery options, the app throws a "We couldn't confirm your identity" error.
Since standard forms are blocked, I am looking for someone who can escalate this internally through Meta Pro Support, Meta Verified Support, or active Meta Business Support channels.
Strict Project Terms:
- This is a success-based, Fixed-Price project.
- Payment will ONLY be funded and released from Upwork Escrow once the account is successfully restored and I have full access. No upfront payments or half-milestones.
- No password sharing. If any steps are needed on my end, we will do it via screen-share (Zoom/Google Meet).
Please only apply if you have successfully recovered accounts with the "cannot appeal" status before. Briefly explain your approach (without revealing your secret methods) in your proposal. Thank you!

We need a senior Meta Ads / Meta Business Manager specialist to diagnose an account-level delivery problem.

Our Meta ad account is active, funded with $100 prepaid credit, has no billing alerts, and has no active policy violations. All ads have been approved and are Active. However, a broad Traffic campaign, a Reach campaign, and a newly duplicated campaign have all received exactly zero impressions and zero spend.

This is not a campaign-building, Pixel, Page setup, payment-method, hacked-account, or login-access task. We need someone who has personally handled the specific “active but zero delivery” scenario and can diagnose legitimate internal delivery/account-trust restrictions.

Scope:
- Review our existing Meta Business Portfolio and ad account configuration
- Identify likely account-level delivery restrictions or trust issues
- Advise on Business Verification and account-limit eligibility
- Use an official Meta Partner/agency support escalation route if available
- Provide a written diagnosis and concrete next steps

Requirements:
- Demonstrable experience resolving Meta accounts that are active, funded, approved, but show zero delivery
- Meta Business Partner / agency support access is strongly preferred
- Must work only within our existing Business Portfolio
- No rented, aged, replacement, or agency ad accounts
- No policy evasion, asset transfers, or password sharing

Please explain in your proposal:
1. A comparable case you have personally resolved
2. The likely cause of this condition
3. Whether you have legitimate Meta escalation access
4. Your fixed-price or hourly estimate for an initial 60-minute diagnostic

Google has suspended all of my paid ad campaigns because their scanner detects hidden malware on my WordPress site. I don’t see obvious redirects, pop-ups, or performance issues, yet Google keeps flagging malicious links that I can’t locate. I need a specialist to dig in, eliminate every trace of the infection, and lock the site down so ads get re-approved quickly.

You’ll have WordPress admin, cPanel, and database access. No security plugin is active right now, so you’re free to deploy whichever tools you trust—Wordfence, Sucuri, MalCare, CLI scanners—provided the end result is a clean, secure install that passes Google Safe Browsing.

Deliverables
• Comprehensive scan report detailing every infected file, URL, or database entry
• Complete removal of malware and confirmation that Google Ads & Safe Browsing tests are clear
• Short post-cleanup summary explaining the breach and the fixes applied
• Core, theme, and plugin updates plus file-permission and firewall hardening
• 30-day monitoring setup with alerting so we’re notified instantly of any relapse

Let me know your turnaround time and any prerequisites. I’m ready to start right away and keen to get campaigns back online.

Skills: PHP, Web Security, WordPress, Website Testing, Website Management, Internet Security, Web Development, Website Optimization, Database Management, cPanel

An experienced full-stack developer is required to safely migrate an existing custom-built website from the current service provider to a new hosting environment that is fully owned and managed by the client.

The objective is to complete a seamless migration with minimal or no downtime, ensuring that all website functionality, payment processing(Stripe automatic payment), emails, and data continue to operate exactly as they do today.

This is not a website redesign or redevelopment project. The goal is simply to transfer the existing application to a secure, reliable hosting solution under the client's ownership.

The website is a custom-built application using:

Next.js
React
TypeScript
MongoDB
Stripe API integration
SendGrid

The current service provider will supply:

Complete source code
Database export (MongoDB dump)
Reasonable migration support if required

The client owns the domain name.

Scope of Work
1. Project Review
Review the provided source code and project structure.
Review the database provided by the current service provider.
Identify any requirements needed for a successful migration.
Recommend the most suitable hosting solution based on performance, security, reliability, and cost.

2. Hosting Setup
Recommend an appropriate hosting provider.
Assist with setting up hosting under the client's own account.
Configure the server and hosting environment.
Configure SSL certificates.
Configure DNS if required.

3. Website Migration
Deploy the website to the new hosting environment.
Import the MongoDB database.
Configure all required environment variables.
Ensure the website functions exactly as it currently does.

4. Stripe & SendGrid Configuration
Verify that the existing Stripe integration continues to function correctly.
Ensure payment processing works without interruption.
Configure any required Stripe webhooks.
Verify that SendGrid email functionality continues to operate correctly.

5. Testing- Perform comprehensive testing after migration, including:
Website functionality
User registration/login
Admin Dashboard
Contact forms
Payment processing
Email delivery
Mobile responsiveness
General performance
Resolve any migration-related issues before project completion.

6. Handover - Upon completion, provide:
All hosting credentials
Server access details
Database access details
SSL information
Any deployment instructions
Basic documentation for future maintenance

All accounts should be registered under the client's ownership.

I need an expert to check, fix, and clean up security issues on two websites. The task involves identifying vulnerabilities, resolving security threats, and ensuring the websites are secure and protected. The ideal candidate should have experience in security analysis and network security.

I need someone who doesn't require a lot of oversight and can work independently on this project. I need someone to begin immediately.

We are seeking a skilled freelancer to enhance the security of our WordPress site that was recently hacked. The task involves implementing immediate security measures to prevent future hacking incidents and ensuring the site is fully secure. The ideal candidate will have experience in WordPress security and hacking prevention, and be able to provide long-term solutions to protect the site.

Investigation into 3-5 social media accounts and owner identification, along with possible bot network identification and tracking. I would like to discuss the details and cost in a follow-up email. Thank you.

I want a thorough, professional security check on two devices—one Android and one iPhone. I have seen unexpected apps or activities, rapid battery drain, and the occasional suspicious pop-up, so I need to confirm whether either handset has been compromised and, if so, understand exactly how to fix it. I have never sideloaded software outside the official stores, but I still want everything verified.

Your task is to run a full forensic-level audit: scan for malware or spyware, inspect system logs for unauthorized access, review current privacy and security settings, and highlight every vulnerability you uncover. Please work only under my explicit authorization and within all legal boundaries.

Deliverables
• A clear, step-by-step report explaining findings for both devices
• Screenshots or log extracts that substantiate any red-flags
• Actionable recommendations ranked by urgency, plus a remediation roadmap

In your proposal, outline relevant mobile-security experience, name the primary tools or frameworks you use (e.g., Mobile Security Framework-MOBSF, Cellebrite, MVT, or your preferred alternatives), and provide an estimated cost and turnaround time. I’m ready to begin as soon as I select the right expert.

Skills: Legal, Web Security, Android, Computer Security, Internet Security, Penetration Testing, iOS Development, Network Security, Risk Assessment, Data Protection

We need assistance in ensuring our application is HIPAA compliant and has all necessary security features in place before going live. The ideal candidate will have experience in security analysis and network security to ensure our application meets regulatory standards.

They suspended mainly the Bagsfactorybyemerald1 and then suspended the other 2 ( introvertbyemerald and khandrdanish
And there was a disclaimer on introvertbyemerald that your other account was suspended by Instagram that’s why in connection we are taking down or flagged this as well,kuch Aisa note tha jiska mai screenshot lena bhool gya,and also is wale account k lie unhone mere ID card ki picture and meri picture bhi submit krwai hai

We are looking for an experienced Application Security specialist to perform a high-level security review of our web-based product before the MVP launch.

The objective is to identify major application security gaps, insecure implementation patterns, and launch-critical risks that should be addressed before going live.

Scope may include:

Authentication and authorization flows
Session management and access control
API security and endpoint exposure
Input validation and common injection risks
Sensitive data handling and encryption
Secrets and credential management
Error handling, logging, and information leakage
Dependency and third-party component risks
General alignment with OWASP application security best practices


Deliverables:

High-level gap analysis report
Prioritized list of findings by risk and urgency
Practical remediation recommendations
Clear identification of issues that should be addressed before go-live


Please include relevant Application Security experience, certifications, and examples of similar reviews. We are looking for a practical, MVP-focused assessment rather than a full penetration test or formal compliance audit.

Enterprise AI security, cybersecurity, and compliance execution for a New York–regulated insurtech/MGA under NYDFS 23 NYCRR 500. Compliance workstream: consumer data-access rights (DSAR) intake and fulfillment, cookie/consent management, data inventory and records mapping, retention and destruction execution, privacy program operationalization, AI governance (generative-AI use policy and AI-enabled product privacy review), and vendor privacy/third-party risk true-ups. Security engineering workstream: cloud data-exposure remediation, vulnerability management SLA governance, encryption and key management uplift, and incident response/recovery readiness. Every item carries a named executor, approver, §500 mapping, target date, and defined evidence artifacts. Work concludes in a diligence-ready evidence package. Scope note: this contract covers compliance and security engineering execution only. The designated CISO function under 23 NYCRR 500 §500.04 is maintained under a separate, pre-existing agreement and is expressly excluded here.

My friend's WhatsApp account has been hacked, and we need assistance to recover it. The ideal candidate will have experience in network security and internet safety to guide us through the process. Responsibilities include assessing the situation, providing recovery steps, and ensuring future security measures are in place.

We are seeking a Cyber Security trainer to educate a 14-year-old on the basics of Cyber Security. The ideal candidate will have experience in teaching or training, particularly with teenagers, and be able to create engaging and age-appropriate content. The role involves developing a comprehensive curriculum that covers essential Cyber Security topics and providing hands-on training sessions.

I need someone who can quickly repoint my .com.au domain registered with TPP Wholesale so that any visitor is taken to a different *exact URL* for the product supplier . The site itself runs on a private server, so the job is limited to updating the DNS and confirming that the redirect works across all major browsers once propagation is complete.

e.g. www.example.com.au points to https://09808098.sites.co/

I will give you access to the TPP Wholesale control panel as well as to the server’s virtual host file if an on-server 301 is the cleaner route. As long as the end result is a seamless, permanent redirect *without breaking any existing email records* - I’m happy.

Please let me know how soon you can start, what information you’ll require from me first, and roughly how long you expect DNS propagation to take in your experience.

ALSO note that I need someone familiar with doing this with .com.au names as some processes need to be altered - include this in your bid so I know you have this experience
"I have worked with repointing .com.au names before"

Thanks! :)

Skills: Linux, Technical Support, DNS, Website Management, Web Hosting, Network Administration, Internet Security, Web Development, Website Optimization, cPanel

We are looking for an experienced Sophos Firewall specialist to provide ongoing technical support, maintenance, security optimization, reporting, and troubleshooting for two Sophos XGS firewalls.

The environment includes two Sophos XGS appliances, including a Sophos XGS 2100. We are seeking a reliable specialist for long-term cooperation who can support both day-to-day operations and continuous improvement of the firewall environment.

A key requirement is the configuration and maintenance of a controlled WAN failover scenario. When the primary internet connection fails and the backup WAN connection becomes active, only predefined business-critical services should remain available.

Key Objectives

The initial and ongoing focus will include:

Review and optimization of both Sophos firewall configurations
Review of firewall rules, routing, SD-WAN policies, gateway monitoring, and failover behavior
Control of non-business and high-risk traffic
Implementation of a restricted backup WAN policy
Regular security and traffic reporting
Recurring optimization and review meetings
Documentation and validation of all changes
Ongoing operational support for both firewalls
WAN Failover Requirement

The environment has a primary WAN connection and a backup WAN connection.

During normal operation, the regular internet security policies should apply.

When traffic is routed through the failover WAN connection, only defined business-critical services should be allowed, including:

Microsoft Teams
Microsoft Dynamics 365 Business Central SaaS
Microsoft 365 and Office cloud services
Microsoft Entra ID authentication
Exchange Online, where required
DNS and NTP
Sophos security and management services
Other explicitly approved critical services

All other traffic should be blocked or restricted while the failover WAN is active.

This includes, for example:

Streaming services
Social media
Software and operating-system updates
OneDrive and SharePoint synchronization, depending on bandwidth
Non-business web browsing
Torrent and P2P traffic
Unauthorized VPN, proxy, TOR, and tunnelling services
Other bandwidth-intensive or non-critical applications

The specialist should recommend and implement the most reliable Sophos design for this requirement, potentially using:

WAN Link Manager
Gateway health checks
Backup gateway configuration
Gateway zones
SD-WAN policy routes
Application-based routing
Firewall rules linked to the failover gateway or zone
Traffic shaping and bandwidth prioritization
Explicit allow and deny rules
Logging, alerting, and reporting

The solution must ensure that the restricted policy is applied only when the backup WAN connection is in use and does not unnecessarily affect normal operation through the primary WAN.

Traffic Control and Security Scope

The specialist should also review and optimize the handling of:

Unauthorized VPN and proxy services
TOR and anonymization tools
WARP, X-VPN, Freegate, and similar services
Torrent and peer-to-peer traffic
DNS over HTTPS and DNS over TLS
QUIC and HTTP/3
TikTok and other non-business social-media services
Streaming platforms
Adult-content websites
SMB traffic towards the internet
High-risk and non-productive applications
Application Control policies
Web filtering and URL categories
SSL/TLS inspection
IPS and malware protection
Firewall logging and reporting
Initial Assignment

The initial assignment will include:

Review the current configuration of both Sophos XGS firewalls.
Review the installed Sophos Firewall OS versions.
Assess the current Sophos licenses and enabled protection modules.
Review WAN interfaces, gateways, health checks, and failover behavior.
Review existing firewall rules, NAT rules, and SD-WAN routes.
Analyze detected high-risk and non-productive traffic.
Recommend an appropriate application and web-filtering policy.
Design the restricted failover WAN policy.
Implement approved configuration changes.
Perform a controlled failover test.
Verify that Microsoft Teams, Business Central SaaS, Microsoft 365, authentication, and required business services continue to function.
Confirm that non-approved traffic is blocked during failover operation.
Provide concise technical documentation of all changes.
Provide a rollback plan before production changes are made.
Establish a suitable reporting structure and recurring review process.
Regular Reporting

The specialist will be expected to provide regular reports, for example monthly or quarterly, covering:

Firewall availability and system health
WAN uptime and failover events
High-risk and blocked applications
Web-filtering activity
IPS and threat-prevention events
Malware and security detections
Unauthorized VPN, proxy, TOR, P2P, DoH, and DoT activity
Bandwidth usage and top applications
Unusual traffic patterns
Rule usage and potentially obsolete firewall rules
Firmware and security-update status
License status and upcoming renewals
Configuration changes made during the reporting period
Open risks, recommendations, and required decisions

Reports should be concise, understandable for both technical and management stakeholders, and include actionable recommendations rather than raw log exports only.

Recurring Optimization Meetings

We also expect regular optimization and review meetings, initially on a monthly or quarterly basis.

These sessions should include:

Review of the latest firewall and traffic reports
Discussion of detected risks and unusual activity
Review of blocked and allowed applications
Evaluation of whether existing policies remain appropriate
Review of WAN failover performance and test results
Identification of obsolete, redundant, or overly broad rules
Review of new Sophos features, firmware versions, and security recommendations
Discussion of licensing and protection-module requirements
Prioritization of proposed improvements
Agreement on upcoming changes and maintenance activities

The specialist should proactively identify improvement opportunities and not only respond to incidents.

Ongoing Responsibilities

The ongoing support may include:

Firewall rule review and optimization
Application Control policy maintenance
Web filtering and URL category management
WAN failover and SD-WAN troubleshooting
Gateway monitoring and health-check optimization
VPN configuration and troubleshooting
SSL/TLS inspection configuration
IPS and threat-protection policy review
Firmware updates and upgrade planning
Log analysis and incident investigation
Performance and bandwidth analysis
Traffic-shaping configuration
Microsoft 365 and Teams troubleshooting
Business Central SaaS connectivity troubleshooting
Backup and restore procedures
Configuration documentation
Security hardening
Regular reporting
Recurring optimization meetings
Emergency support for firewall-related incidents
Coordination with our internal IT team
Required Experience

Applicants should have:

Strong hands-on experience with Sophos Firewall and Sophos XGS appliances
In-depth knowledge of Sophos Firewall OS
Experience managing redundant WAN connections
Experience with Sophos WAN Link Manager
Experience with gateway health checks and failover configuration
Experience with SD-WAN policy routing
Experience applying different security policies depending on which WAN gateway is active
Experience with Application Control and Web Protection
Experience with IPS and SSL/TLS inspection
Experience troubleshooting Microsoft 365 and Microsoft Teams traffic
Experience with Microsoft Dynamics 365 Business Central SaaS connectivity
Experience creating meaningful firewall and security reports
Ability to explain technical findings to non-technical stakeholders
Good understanding of DNS, DoH, DoT, QUIC, HTTP/3, VPNs, proxies, and network security
Experience working carefully in production environments
Ability to prepare clear documentation and rollback procedures
Good written and spoken English
Reliable availability for ongoing support

Sophos certifications are preferred but not mandatory if substantial practical experience can be demonstrated.

Working Model

This is intended as a long-term cooperation, not only a one-time configuration task.

Support will be provided remotely and on demand. The workload may vary, but we are looking for a specialist who can respond reliably when assistance is required and who can support a structured continuous-improvement process.

All access will be provided through an approved secure remote-access process. All production changes must be coordinated, documented, and approved before implementation.

Please Include in Your Application

Please provide:

A summary of your Sophos Firewall experience
Relevant Sophos certifications
The number and type of Sophos XGS firewalls you currently support
Examples of similar WAN failover or SD-WAN projects
Examples of firewall or security reports you have created
Experience with Microsoft 365, Teams, and Business Central SaaS environments
Your normal availability
Your expected response time
Your hourly rate
Your preferred support process
Your recommended reporting frequency
Your approach to recurring optimization meetings
Your documentation and change-management approach

We are seeking a Kajabi expert to establish and monetize a Kajabi website. The ideal candidate will have experience in setting up and optimizing Kajabi sites, as well as implementing effective marketing strategies to drive engagement and sales. Responsibilities include designing visually appealing pages, integrating payment systems, and ensuring seamless user experience. If you have a proven track record in Kajabi and a passion for digital marketing, we would love to hear from you!