Optimize Network Security Projects on Upwork

I’m looking for a seasoned Google Workspace administrator who can step in and take full ownership of our environment. The immediate focus is on tightening security settings, streamlining user and group management, and making sure our domain configuration follows best practice. Day-to-day tasks will include creating, deleting, and assigning roles to users as our headcount changes.

A second priority is an internal email migration (moving mailboxes within the same Google Workspace domain). I’ll supply the account map; you’ll plan the cut-over, run the data moves, and confirm that labels, filters, and aliases stay intact with zero mail loss.

Beyond Google Workspace, I’d like the same person to provide light-touch MacBook support, keep our Slack workspace healthy, and help us maintain an MDM profile for our fleet. If you have hands-on experience with tools like Jamf, Kandji, Google Endpoint Management, or comparable platforms, please mention it.

Deliverables
• Hardened Google Admin Console: security, user/group, domain settings fully documented
• Automated workflows for user creation, deletion, and role assignment
• Completed intra-domain email migration with verification report
• Ongoing MacBook, Slack, and MDM support (hourly or per-ticket, to be agreed)

Acceptance criteria
– No open security recommendations in the Admin Console
– All planned mailbox moves finish with 100 % data integrity and confirmed user sign-off
– Documentation stored in our shared Drive, clear enough for another admin to follow

Timeline is flexible but I’m aiming to wrap the initial setup and migration inside two weeks, then move to ad-hoc support. If this matches your skill set, let’s talk.

Skills: Technical Support, Documentation, Account Management, Slack, Network Security, System Administration

We are seeking an experienced Cybersecurity Subcontractor to assist with client engagements on a project-by-project basis. In this role, you will execute technical security assessments, vulnerability testing, and deliver detailed client-facing remediation reports under our master services framework.

Buscamos un especialista senior en Ciberseguridad e Inteligencia Artificial para realizar un informe técnico estructurado sobre el estado del arte (2023–2025) en Ataques Adversariales Evasivos contra Sistemas de Detección de Intrusiones basados en Aprendizaje Profundo (DL-IDS). El objetivo del proyecto es analizar y sistematizar de forma clara y directa las principales técnicas de evasión (white/black/gray-box), las métricas de evaluación clave (tanto de efectividad del ataque como de validez del tráfico de red) y la efectividad real de las contramedidas actuales (adversarial training, filtrado, etc.) frente a su impacto en el rendimiento. Si cuentas con experiencia demostrable en Adversarial Machine Learning, dominio de datasets del sector (como CICIDS o UNSW-NB15) y capacidad para redactar síntesis ejecutivas de alto nivel técnico sin relleno teórico, por favor postúlate incluyendo un resumen de tu trayectoria en el área, ejemplos de informes o proyectos similares y tu estimación de tiempo y costo.

Skills: Technical Writing, Risk Management, Penetration Testing, Data Analysis, Deep Learning, Network Security, Incident Response, Security Auditing

I need someone who can complete a network security project. I'm facing cybersecurity issues on my hosting server and require an expert to resolve these problems. The ideal candidate will have experience in penetration testing, security analysis, and network administration to ensure the security of my server.

I need a thorough vulnerability assessment and penetration test against our corporate network infrastructure. The scope includes our core routers and switches, Windows/Linux servers, representative employee endpoints, and the firewalls and other security appliances that sit at the perimeter.

The primary objective is simple: uncover and safely validate every weakness so I have clear, prioritised actions to improve our overall security posture. I will provide network diagrams, asset lists, and maintenance windows once an NDA is in place. Testing must be low-impact on production; out-of-hours work is fine and can be scheduled together.

Deliverables
• Executive summary for leadership
• Detailed technical report mapping each finding to its asset, risk rating, and exploit narrative
• Practical, prioritised remediation guidance
• Proof-of-concept evidence (screenshots, command output, packet captures) for validated exploits
• Brief debrief call or video walk-through of results

Acceptance criteria
• Every in-scope device is scanned and manually verified
• Critical and high-risk issues are demonstrated exploitable or clearly shown to be so
• Report is free of false positives and delivered in both PDF and editable format within the agreed timeline

When you bid, outline your methodology—reconnaissance, Nmap/Nessus scans, manual enumeration, Metasploit-based exploitation, privilege-escalation testing, Wireshark packet captures, etc.—and highlight any relevant certifications or case studies. I look forward to tightening our defences with your expertise.

2 x Firewalls
4 x L3 Switches
6 x Cisco Access Points
2 x Physical Servers
~25 User Laptops


Deliverables:
Detailed VAPT Report including
Identified vulnerabilities (CVSS scoring)
Risk classification (Critical/High/Medium/Low)
Proof of Concept (PoC)
Remediation recommendations
Executive Summary (for management)
Compliance mapping (ISO 27001 / basic best practices)
Re-test report after remediation

Skills: Computer Security, Cisco, Network Administration, Internet Security, Penetration Testing, Network Security, Risk Assessment, Security Auditing

I need a developer for Instagram API integration — specifically for content scheduling and analytics. Can you share your experience with Meta APIs, timeline, and pricing? Let me know if you're available. Thanks!

We are seeking an experienced security consultant to conduct a comprehensive vulnerability assessment and penetration testing on our software site. The goal is to identify potential security weaknesses and provide a detailed report outlining findings, risks, and recommendations for remediation. Ideal candidates will have a strong background in cybersecurity, with knowledge of common vulnerabilities and testing methodologies. Please provide examples of previous assessments performed.

# Job Title

**Optimize CI/CD Pipeline Performance for .NET Application (GitHub Actions, Docker)**

## Job Description

We are looking for an experienced DevOps engineer with strong expertise in **.NET, GitHub Actions, Docker, and CI/CD pipeline optimization** to review and optimize our existing CI/CD pipeline.

Our pipeline is fully implemented and functional, but the overall execution time is longer than expected. We need an expert to analyze the current implementation, identify performance bottlenecks, and recommend or implement improvements while ensuring that all existing validations and quality checks remain intact.

## Current Environment

* .NET solution with approximately 20 projects
* GitHub Actions
* Docker
* Automatic build, validation, testing, and publishing
* Multiple validation steps before deployment
* CI/CD pipeline execution currently takes approximately **45 minutes**

## Scope of Work

* Review the existing CI/CD pipeline
* Analyze the current workflow and identify performance bottlenecks
* Optimize build, restore, test, validation, Docker build, and publishing stages
* Recommend best practices for faster incremental builds
* Improve dependency caching and artifact management
* Optimize Docker image creation and publishing
* Suggest opportunities for parallel execution where appropriate
* Ensure all existing validations and quality gates are maintained
* Document the recommended changes and explain the improvements

## Required Skills

* Strong experience with .NET and ASP.NET Core
* GitHub Actions
* Docker
* CI/CD pipeline design and optimization
* Performance tuning
* Build optimization
* DevOps best practices

## What We Expect

Please include the following in your proposal:

1. A brief overview of your experience with similar CI/CD optimization projects.
2. Your approach to identifying performance bottlenecks.
3. Examples of similar work you have completed.
4. Your estimated effort and timeline.
5. Any recommendations or ideas based on the information provided.

We are looking for someone who can not only optimize our current pipeline but also recommend best practices for maintaining a fast, scalable, and reliable CI/CD process as our project continues to grow.

Hi,

I have two issues that I need your help with.

1. Gmail Recovery Issue

- I lost access to my old Gmail account.
- I no longer have access to the recovery email.
- Whenever I try to recover the account, Google doesn't give me a successful recovery option.
- This Gmail account is very important because it is linked to my TikTok account.

2. TikTok Ads Manager Verification Issue

- My TikTok account is already logged in on my mobile phone, and I can use the TikTok app normally.
- The problem is only with TikTok Ads Manager.
- When I try to register or log in to TikTok Ads Manager, it sends the verification code to my old Gmail address, which I no longer have access to.
- Because of this, I cannot complete the Ads Manager registration.
- I need help recovering my old Gmail account or finding a way to update/change the email used for TikTok Ads Manager verification.

Please let me know what information or access you need from me to resolve these issues.

Hey there!

We're developing a new pre-employment skills test and need real cloud security professionals to help write the questions, so we can be confident the test holds up to expert scrutiny before it goes live.

This is a short, remote, one-time project. You'll help us build the multiple choice question bank for one test, 104 questions across four skill areas, working to a brief and a question format we provide.

What you'll do

- Help write 104 multiple choice questions for our Cloud Security Posture Management test, pitched at intermediate to senior level, covering CSPM platforms, misconfiguration detection, compliance monitoring and remediation workflows
- Make sure every keyed answer is correct and the distractors are clearly wrong to someone with real expertise, with a one line rationale explaining why each option scores as it does
- Quality check the bank before handing it over, so every question is on topic, unambiguous and at the right difficulty

What we're looking for

- 5+ years of hands-on experience in cloud security, including a CSPM platform used in a professional setting, such as Prisma Cloud, Wiz, Defender for Cloud or Security Hub used for posture management
- Familiarity with CIS Benchmarks, NIST CSF or SOC 2 and how they translate into cloud control implementation
- Practical experience with remediation workflows and CSPM integrations into ticketing, CI/CD or SOAR tooling
- A strong eye for detail and a solid command of English
- Multi-cloud exposure across AWS and Azure is a plus, since the test covers both
- A cert like CCSK, CCSP, AWS Security Specialty or AZ-500 is a plus, not a must

We estimate under 15 hours of focused work. If this sounds like you, we'd love to hear from you!

Join our team as a Red Team Blackbox Pentester to simulate real-world attacks and enhance our security posture. You'll conduct thorough network and system assessments, identifying vulnerabilities and providing actionable insights. Your expertise will help us strengthen our defenses and protect against potential threats.

I'd likGood evening. Can you find out if a Facebook profile is fake? And how much would that job cost?
I think I've been scammed.
I need to find out if a Facebook profile is fake.
Can you find that out?

We are seeking an expert to remove a one-star review from Yelp. The ideal candidate will have experience in managing online reputation and understanding Yelp's policies. Responsibilities include analyzing the review, identifying potential violations, and interacting with Yelp support to facilitate removal. The goal is to improve our online presence by addressing this negative feedback.

We need an independent penetration test of a SaaS web application, its API, and the cloud infrastructure supporting it.

The goal is a thorough, manually driven assessment with a report we can act on internally and share with external stakeholders. We are not looking for automated scan output.

Environment
Web application : SaaS platform, React frontend, REST API backend
Hosting : AWS
Test environment : a staging environment mirroring production

Test scope
Grey-box assessment

External network testing : perimeter enumeration, exposed services, misconfigurations, known vulnerabilities
Web application testing : authenticated and unauthenticated, following OWASP WSTG; injection, authentication and session handling, business logic flaws, file upload handling, client-side issues
Authorization testing : horizontal and vertical privilege escalation, cross-tenant data access
API testing : REST endpoints, rate limiting, input validation, authorization enforcement at the API layer

Deliverables
Test execution : following a recognized methodology (PTES, OWASP WSTG or equivalent)
Written report including:
Executive summary written for a non-technical audience
Scope, methodology, tooling, and timeframe
Findings ranked by severity (CVSS v3.1 or v4.0), each with description, affected assets, evidence/proof of concept, business impact, and actionable remediation guidance
Positive observations / controls that held up
Attestation or summary letter suitable for sharing with external stakeholders such as customers, partners, or auditors
Remediation retest of fixed findings, with an updated report (typically within 30 days)

Report quality matters as much as testing depth. Findings must be clear, reproducible, and free of unfiltered scanner output.

Requirements
- 2+ years of hands-on professional penetration testing experience
- At least one relevant certification: OSCP, OSWE, OSEP, GPEN, GWAPT, CREST CRT/CCT, or equivalent
- Strong command of manual testing techniques
- Proficiency with standard tooling (Burp Suite Professional, Nmap, Metasploit, ffuf, sqlmap, cloud security tooling) - you must have your own licensed tools
- Demonstrated report-writing ability in professional English
- Reliable availability and communication during the agreed testing window (some overlap with North American business hours preferred)

Nice to have
- Depth in AWS security and cloud-native attack paths
- Experience testing multi-tenant SaaS platforms and tenant isolation specifically
- Familiarity with common compliance-driven testing expectations and reporting formats

We are seeking a skilled freelancer to conduct a penetration test and provide a comprehensive report suitable for an ISO 27001 audit. The report should detail vulnerabilities, risks, and recommendations for improvement. The ideal candidate will have experience in security testing and auditing, particularly with ISO 27001 standards.

Report *MUST* be backed by a company that we can verify operates in this space.

----

Our platform provides configuration management, CI/CD and configuration auditing for contact centre platforms. We are undergoing ISO/IEC 27001 certification and require an independent penetration test. This is a defined-scope engagement, not an open one. The methodology, the required test coverage, and the tests we do not want performed are all specified below. Please read them before quoting — your quote should be based on the coverage matrix, not on a general impression of the application.

# What the platform is
* Frontend: Ember.js single-page application, served via Nginx
* Backend: RESTful JSON API, which the SPA consumes. Every frontend action maps to a documented API endpoint. Swagger/OpenAPI documentation is served by the application itself.
* Data layer: PostgreSQL (configuration data and change audit history), Redis, Celery asynchronous task queue
* Tenancy: multi-tenant. Customers are separated logically within a deployment.
* Hosting: Kubernetes on cloud infrastructure

# The most sensitive asset in the system:
each customer configures one or more "Environments," which store an OAuth client ID and client secret for that customer's external contact center organisation. Those credentials carry create/update/delete permissions over the customer's contact centre configuration. A flaw that exposes those secrets, or that lets a user act against an Environment they should not have access to, is the highest-impact outcome in this system. This is the primary threat model.

# Two further design features warrant deliberate attention:

* Server-side JavaScript execution. Platform supports user-supplied JavaScript code blocks that execute server-side. Sandbox escape is a named objective of this engagement.
* Outbound request generation. Change automation can trigger API calls to user-specified external endpoints, and Environments are configured with a user-supplied API base URL. SSRF is a named objective.

I'm looking for an experienced Linux system administrator to set up a DNS and DHCP server on Ubuntu for a lab environment. This setup is primarily for learning and homework. The work is done I just need real screen shots of VM. the homework is complete just need the screen shots to look real.

Requirements:
- Configure DNS services (functions to be discussed)
- Set up DHCP server
- Documentation of the setup process

Ideal Skills & Experience:
- Proficiency in Linux, particularly Ubuntu
- Expertise in DNS and DHCP configuration
- Strong documentation skills

Skills: System Admin, Linux, Technical Support, DNS, Ubuntu, Network Administration, Virtual Machines, Documentation, Network Security, System Administration

We are seeking a skilled Fortinet NS7 Engineer to assist with the implementation and support of Fortinet solutions in El Salvador. The ideal candidate will have experience in network security and be able to work independently to ensure the smooth operation of our systems. This is a part-time role with a project scale of small, expected to last less than a month.

Our staff and students cannot open a brand-new educational website when they are connected to the school’s office Wi-Fi. Every device—laptops, tablets and phones—shows the same “error connection loading” message, so the problem is clearly network-side rather than user-side. The site works perfectly once we switch to mobile data or an external network.

I need a network specialist who can quickly diagnose why this single educational domain is being blocked or timing out inside our LAN/WLAN and apply a clean, permanent fix. Whether it involves firewall rules, DNS filtering, SSL inspection, proxy settings or VLAN segmentation, I’m looking for clear root-cause identification and a working solution that lets the page load normally on all devices while keeping our existing security policies intact.

Deliverables:
• Identify the exact point of failure (router, firewall, DNS, content filter, etc.).
• Implement or guide us through the corrective change.
• Provide a short write-up so we can document the adjustment for future reference.

If remote access to our controller or firewall is required, I can arrange that immediately. Let me know your preferred troubleshooting tools and an estimated timeframe, and we’ll get started right away.

Skills: Linux, Web Security, DNS, Network Administration, Internet Security, Network Security, Network Engineering, Firewall

Description

I need an experienced DFIR practitioner to perform a read-only forensic extraction from a preserved Ubuntu server snapshot (~100 GB) held in DigitalOcean, following a security incident.

This is an evidence-gathering engagement only. No remediation, no system administration, no development work.

Critical safety constraints — please read before applying

A live malware payload is present in the image. It sits in build-configuration files and executes when the project is built or run.

The installed operating system must not be booted. Use a recovery environment or attach the disk to a separate clean instance, mounted read-only.
No application code may be built or executed.
All outbound network traffic must be blocked before any instance is powered on.
The source snapshot must not be modified. Work from a copy.

Scope of work

Extract a defined list of artefacts, following a detailed brief provided on engagement:

Authentication and system logs, including all rotated copies
SSH authorised-keys files for every user account
Shell histories for every user
Git credential and configuration files, environment files, and any stored access tokens
Cron entries, systemd units and other persistence mechanisms
A filesystem timeline for a specified date range
Evidence of outbound connections to a supplied list of indicators

Compute SHA-256 hashes for every extracted file and provide a manifest.

Deliverables

Extracted artefacts, packaged, with a hash manifest
A written report answering eight specific questions, clearly separating what the evidence establishes from what is inference
A statement of method — what you did, in what order, with what tools
A note of anything you could not determine, and what would be required to determine it

Environment

Access will be provided to an isolated DigitalOcean account under my control. You will not be given access to any production system, and the snapshot will not be transferred to your account.

Requirements

Demonstrable digital forensics or incident response experience on Linux
Working knowledge of chain-of-custody practice and forensic documentation
Experience handling live malware safely
Certification preferred (GCFA, GCFE, EnCE or equivalent)
NDA required before the detailed brief is released

Engagement

Fixed price or hourly — please quote with your proposed approach. Timeline: extraction within one week of access being granted.

Screening questions

How would you examine a cloud VM snapshot without booting the installed operating system? Describe your method and the specific steps.
How do you establish and document chain of custody for extracted artefacts?
Describe a Linux incident you have investigated where you determined who accessed a system and when. What sources did you rely on?
What precautions do you take when handling an image containing live malware?

# Network & Infrastructure Consultant (Fortinet / Hyper-V / HPE Alletra / Veeam) — SaaS Company Serving K-12 Schools

## About Us

We're a small enterprise SaaS company serving K-12 schools with a Student Information System (SIS) platform. Our infrastructure is self-hosted (on-prem/colo) and supports a multi-tenant production environment that schools rely on daily. We're a .NET shop (ASP.NET, IIS, Windows Server, MS SQL Server multi-tenant database).

We're looking for a network and infrastructure expert — individual, small team, or agency — to serve as our ongoing technical authority for our core hardware/network stack, and to guide our onsite engineer through implementation, upgrades, and day-to-day best practices.

## Our Current Environment

- **Firewall/WAF:** Fortiweb (Web Application Firewall)
- **Switching:** Fortinet switches
- **Compute:** 2x Hyper-V servers (host our virtualized Windows Server environment)
- **Storage:** HPE Alletra storage array
- **Backup/DR:** Veeam (backup and restoration)
- **Application stack:** ASP.NET, IIS, Windows Server, MS SQL Server (multi-tenant)

We have an onsite engineer who can execute physical/hands-on work under your direction — you don't need to be local, but you do need to be able to produce clear, actionable guidance and documentation they can follow.

## Scope of Work

**Phase 1 — Assessment & Documentation**
- Conduct a full audit of our current network and hardware environment
- Produce a detailed network/hardware map (topology diagram, IP schema, VLANs, firewall rules/policies, switch configs, storage layout, backup jobs/retention, and how it all interconnects)
- Document current-state configuration for Fortiweb, Fortinet switches, Hyper-V hosts, HPE Alletra storage, and Veeam backup jobs
- Identify single points of failure, security gaps, and configuration risks

**Phase 2 — Recommendations**
- Provide a prioritized list of improvements: security hardening, redundancy/high availability, performance, and scalability
- Recommend capacity planning for growth (storage, compute, bandwidth) given we run a multi-tenant SaaS workload
- Advise on backup/DR strategy adequacy (RPO/RTO) using our existing Veeam setup
- Flag any end-of-life/end-of-support hardware or firmware concerns

**Phase 3 — Execution & Ongoing Support**
- Guide (and where appropriate, remotely execute alongside) our onsite engineer on approved upgrade/improvement projects
- Available for ongoing advisory support as we scale (new hardware procurement guidance, configuration changes, troubleshooting escalations)
- Be a resource we can reach out to for architecture decisions as the business grows

## What We're Looking For

- Proven hands-on expertise with **Fortinet products** (FortiWeb WAF and FortiSwitch, FortiGate/FortiOS knowledge a plus)
- Strong experience with **Microsoft Hyper-V** virtualization (host configuration, clustering/HA, performance tuning)
- Experience with **HPE Alletra** (or comparable enterprise SAN/storage platforms — HPE Nimble, 3PAR experience relevant too)
- Deep familiarity with **Veeam Backup & Replication** (backup strategy, job configuration, restoration testing, DR planning)
- Solid understanding of enterprise networking fundamentals: VLANs, routing, firewall policy design, network segmentation, security best practices
- Experience working with environments running **Windows Server, IIS, and MS SQL Server** (understanding how infrastructure decisions affect a .NET/SQL Server application stack is a big plus)
- Experience supporting SaaS or other environments where uptime and data integrity are business-critical
- Comfortable creating clear, professional documentation (network diagrams, runbooks, config docs) that a less-senior onsite engineer can follow
- Strong communication skills — able to explain technical tradeoffs to a non-network-specialist stakeholder

## Nice to Have

- Experience in education technology (EdTech) or other regulated/compliance-sensitive SaaS environments
- Relevant certifications (Fortinet NSE, VMware/Hyper-V, HPE storage certifications, Veeam VMCE)
- Prior experience as a fractional/virtual infrastructure lead for a small company

## Engagement Details

- **Engagement type:** Project-based to start (assessment + documentation), with strong potential for an ongoing retainer/advisory relationship
- **Team size:** Open to individual consultants, small teams, or agencies — please indicate which you are
- **Remote:** Yes — work will be guided remotely, executed onsite by our engineer, with occasional coordination calls
- **Timeline:** Looking to begin the assessment phase as soon as possible

## To Apply, Please Include

- Relevant experience with Fortinet, Hyper-V, HPE storage, and Veeam specifically
- An example of network documentation or an infrastructure assessment you've produced (redacted is fine)
- Whether you're applying as an individual, team, or agency, and your general availability
- Your proposed approach to Phase 1 (assessment) and a rough estimate of time/cost for it

I'm seeking a cybersecurity expert to review historical audit logs. The goal is to validate past security breaches and provide insights and 3rd party validation.

Key Tasks:
- Thorough review of historical audit logs
- Evaluate past forensically documented records
- Identify types of cyberattacks executed based on preserved data

Ideal Skills:
- Expertise in cybersecurity
- Familiarity with audit logs
- Experience with frameworks like NIST, ISO 27001, or CIS Controls

Your insights will be crucial in enhancing our security posture.

Skills: Computer Security, Technical Writing, Research Writing, Audit, Internet Security, Security Systems, Data Analysis, Network Security, Security Auditing

We are looking for an experienced Data Center Sizing, Design & Architecture Engineer to design and optimize enterprise data center solutions. The ideal candidate should have hands-on experience in infrastructure sizing, server and storage architecture, virtualization, networking, cloud integration, and disaster recovery planning.
Key Responsibilities
Design scalable, secure, and highly available data center infrastructure.
Perform server, storage, compute, and network sizing based on customer requirements.
Prepare High-Level Design (HLD), Low-Level Design (LLD), and technical documentation.
Design rack layouts, power, cooling, and cabling plans.
Plan and implement virtualization solutions using VMware, Hyper-V, or Nutanix.
Work with cloud platforms such as AWS, Azure, or GCP for hybrid cloud deployments.
Conduct capacity planning and infrastructure performance analysis.
Design backup, disaster recovery (DR), and business continuity solutions.
Collaborate with infrastructure, network, security, and application teams.
Prepare technical proposals, BOMs, and solution recommendations.
Ensure compliance with industry standards and best practices.
Required Skills
Data Center Design & Architecture
Capacity Planning & Infrastructure Sizing
VMware/Hyper-V/Nutanix
Windows & Linux Server Administration
SAN/NAS Storage
Cisco Networking (LAN/WAN, Routing & Switching)
AWS, Azure, or GCP
Disaster Recovery & Backup Solutions
HLD/LLD Documentation
Excellent troubleshooting and communication skills

Skills: System Admin, Troubleshooting, Technical Writing, Cisco, Network Administration, Virtualization, Technical Documentation

Description:

We are looking for an experienced cybersecurity consultant or digital forensics specialist to help us analyze a series of suspicious online activities affecting our business.

We have received repeated fraudulent online requests that appear to be connected and contain details that suggest familiarity with our company. We're looking for someone who can perform a technical analysis of the available information and help us better understand the activity.

Responsibilities:

Analyze the available evidence and identify patterns.
Review technical indicators associated with the submissions.
Conduct OSINT (Open Source Intelligence) research where appropriate.
Identify potential security risks or vulnerabilities.
Document findings and provide recommendations for next steps.
Recommend measures to help prevent similar incidents in the future.

Requirements:

Experience in cybersecurity, digital forensics, incident response, or OSINT.
Strong analytical and documentation skills.
Experience investigating online abuse, fraudulent submissions, or similar technical incidents.
Ability to maintain strict confidentiality.

I’m looking for a specialist to run a full health-check on my Local Area Network. The priority is to verify that everything works as intended and to pinpoint any performance bottlenecks that might slow users down. Security is being handled separately, so your focus will be strictly on functionality and performance.

The job involves testing end-to-end connectivity, measuring throughput and latency at peak and off-peak times, and confirming that current configurations on switches, routers, and access points align with best practices. I expect you to use industry-standard network diagnostic tools—think Wireshark, iPerf, or SolarWinds—but you’re free to bring in any utilities you trust as long as the results are clearly documented.

Deliverables
• A concise report outlining the tests performed and their results
• A performance baseline with clear numbers (e.g., bandwidth, packet loss, jitter)
• Actionable recommendations ranked by impact and effort so I can prioritise fixes

I’d like the initial findings within a week; if deeper optimisation is needed we can discuss an extension or a follow-up project.

Skills: Computer Security, Network Security, Network Engineering, Network Monitoring

## Job Description

We are seeking an experienced security consultant to perform an independent audit of a client's Claude Enterprise environment. The client is seeking a third-party review to assess whether the environment is configured appropriately and aligned with enterprise security best practices. This is primarily a configuration, governance, and access control review, not a traditional penetration test.

### Scope of Work

We are looking for someone who can review the client’s Claude Enterprise setup and evaluate areas such as:

- organization and administrator configuration
- SSO / identity configuration
- user provisioning and deprovisioning
- role-based access and administrator permissions
- group and workspace governance
- data handling and retention settings
- file upload and sharing controls
- auditability and logging considerations
- integration and connector risk
- overall alignment with security best practices for enterprise AI / SaaS environments

### Deliverables

We expect the consultant to provide:

- a review of the current-state configuration
- identification of security gaps, risks, or questionable configuration decisions
- prioritized remediation recommendations
- a written summary report
- an optional follow-up call to review the findings

### Ideal Background

We are looking for someone with experience in one or more of the following:

- SaaS security architecture
- enterprise security assessments
- IAM / SSO / SCIM / RBAC reviews
- AI security or GenAI platform governance
- enterprise tenant configuration reviews
- security consulting for tools such as Claude Enterprise, ChatGPT Enterprise, Microsoft Copilot, or similar enterprise AI platforms

### Important Notes

- This is an independent review, so prior involvement in the original setup is not relevant.
- We are looking for someone who can assess configuration quality, governance, and security posture, not just run generic security scans.
- Experience reviewing enterprise SaaS environments is more important than generic infrastructure or network security experience.

### When Applying, Please Include

- a brief summary of similar security review or audit work you have completed
- any direct experience with Claude Enterprise or similar enterprise AI platforms
- your approach to reviewing SaaS security configuration and governance
- examples of the deliverables you typically provide for this type of assessment

This will likely begin as a short expert engagement, with the potential for limited follow-on advisory work, depending on the findings.

We're looking for an experienced Penetration Tester and Ethical Hacker to assess the security of our web applications, APIs, and network infrastructure. You'll identify vulnerabilities before attackers do and help us strengthen our overall security posture.

What you'll do:
- Conduct penetration tests on web applications, APIs, and network infrastructure
- Identify, document, and prioritize vulnerabilities based on risk and impact
- Perform manual and automated testing (OWASP Top 10, API security, network scanning)
- Deliver clear, actionable reports with remediation recommendations
- Retest fixes to confirm vulnerabilities are properly resolved

What we're looking for:
- Proven experience in penetration testing and ethical hacking across web, API, and network environments
- Strong knowledge of OWASP Top 10, common attack vectors, and security frameworks
- Hands-on experience with tools like Burp Suite, Nmap, Metasploit, and similar
- Ability to write clear, professional reports for both technical and non-technical audiences
- Relevant certifications preferred (OSCP, CEH, or similar)

Nice to have:
- Experience testing SaaS platforms or cloud environments (AWS, Azure, GCP)
- Familiarity with compliance frameworks like SOC 2 or ISO 27001

To apply, please share relevant experience, certifications, and a sample report or case study if available.

I need ScreenConnect (ConnectWise Control) installed and fully configured on our Windows server so my team can start using it every day without hiccups. Once the core installation is in place, security is the next priority—I want SSL enabled, Two-Factor Authentication active, and sensible role-based access controls so only the right people get into the right machines.

After deployment, please walk us through full administration: creating users, spinning up sessions, updating certificates, tweaking policies—everything a small in-house IT team should know. A short video call is fine for the initial hand-over, but I’d like the session recorded so staff who miss it can catch up later.

Here’s what I’m expecting from you:
• Clean installation on our Windows server
• SSL certificate applied and trusted
• 2FA and access controls verified with test accounts
• Remote access confirmed from multiple endpoints
• One live training session covering full administration, recorded for replay

If you’re an individual (no agencies) with proven ScreenConnect/ConnectWise experience, fluent English, and you can hop on a quick introductory call, let’s get started. Ongoing support after the hand-over would be appreciated and can be arranged separately.

Skills: PHP, Active Directory, Microsoft, Windows Server, Network Security, SSL, Video Conferencing, System Administration

My friend’s Instagram account was taken over and the attacker replaced the registered phone number and email with his own. I need a licensed or well-credentialed private investigator experienced in Instagram-related cyber incidents who can legally trace the individual behind the new email address and uncover the originating IP or other identifiers I can present in an FIR.

Here is what I can already supply: the replacement email address now attached to the compromised profile, screenshots of the account before and after the breach, and the exact time stamps when control was lost. I have no direct server-side logs, so you may need to rely on OSINT techniques, lawful data-request procedures, or collaboration with Instagram’s security team.

Your work should culminate in:
• A concise written report identifying the likely perpetrator or, at minimum, the IP addresses, geolocation data, or other traceable artefacts that link to the email in question.
• A clear explanation of your methodology so the evidence can be accepted by local law-enforcement agencies.
• Any supporting screenshots, headers, or subpoena-ready documentation.

Please outline your recommended approach, estimated timeline, and any specific information you will need from me beyond what I have listed.

I am uploading the screenshots of the incident when it first happened, when the number & email ID got replaced, when account ID was changed.

Skills: Web Security, Research, Computer Security, Report Writing, Data Analysis, Network Security, Digital Forensics, OSINT, Data Recovery, Incident Response

I have two Sonicwalls with a SSL VPN connection between sites. I can ping in one direction but not the other. I need an expert to resolve this issue and ensure both directions are working smoothly. The ideal candidate will have extensive experience with Sonicwall and VPN technologies.

We are seeking an experienced and highly motivated **Senior Cybersecurity Specialist** to join our growing team and help protect our clients' IT environments from evolving cyber threats. In this role, you will be responsible for securing networks, cloud platforms, endpoints, and business-critical systems while working closely with IT professionals and clients to implement industry best practices. The ideal candidate has a strong background in managed IT services, cybersecurity operations, vulnerability management, and cloud security, with the ability to proactively identify risks and recommend effective security solutions.

Your day-to-day responsibilities will include monitoring and maintaining secure IT infrastructures, performing security assessments and vulnerability scans, configuring and managing firewalls, endpoint protection, VPNs, and multi-factor authentication, and responding to security incidents when they arise. You will also assist with Microsoft 365, Google Workspace, Microsoft Azure, and AWS security, ensuring that client environments remain compliant, resilient, and protected against modern cyber threats. Experience with security monitoring tools, SIEM platforms, identity and access management, disaster recovery planning, and security policy implementation will be highly valued.

We are looking for someone who has at least three years of hands-on cybersecurity experience and is comfortable working in a fast-paced managed services environment. Professional certifications such as CompTIA Security+, CySA+, CEH, CISSP, AZ-500, SC-200, or similar certifications are preferred but not mandatory if you can demonstrate strong practical experience. A solid understanding of Windows Server, Active Directory, Microsoft Entra ID (Azure AD), networking fundamentals, endpoint detection and response (EDR), and common firewall platforms such as Fortinet, SonicWall, Cisco, or Palo Alto is highly desirable.

Success in this role requires excellent analytical and troubleshooting skills, strong written and verbal communication, and the ability to explain technical concepts clearly to both technical and non-technical stakeholders. We value professionals who are proactive, detail-oriented, dependable, and passionate about helping businesses strengthen their cybersecurity posture through preventative measures rather than reactive fixes.

When applying, please include a brief summary of your cybersecurity experience, the security tools and technologies you have worked with, any relevant certifications, examples of similar projects you have completed, your availability, your time zone, and why you believe you would be a great fit for this position. We are looking for someone who is committed to delivering exceptional service, building long-term client relationships, and contributing to a collaborative team focused on security excellence.

We are a cloud-based business phone systems provider headquartered in Spokane, Washington, seeking an experienced Cisco UCCE Engineer to support secure, highly available contact center and network operations. This role will contribute directly to a critical national security mission and requires extensive hands-on expertise in Cisco contact center technologies, and networking.

Key Responsibilities:
- Configure, administer, troubleshoot, and optimize Cisco Unified Communications Manager (CUCM), Customer Voice Portal (CVP), IVR applications, Peripheral Gateways (PGs), and Cisco Finesse desktops.
- Evaluate, design, and implement scalable Cisco UCCE/PCCE architectures based on business, operational, security, and availability requirements.
- Develop and maintain intelligent call-routing strategies, ICM scripts, queue logic, skill-group configurations, failover workflows, and business-hours routing.
- Configure CVP media servers, voice gateways, SIP trunks, dial plans, routing patterns, and call-control integrations.
- Integrate Cisco contact center platforms with third-party CRM systems, databases, APIs, recording platforms, workforce-management tools, and reporting applications.
- Monitor platform health, call quality, capacity, latency, redundancy, and system performance across distributed environments.
- Troubleshoot complex call-routing, CTI, SIP, JTAPI, gateway, database, and application-integration issues.

Required Qualifications:
- Extensive hands-on experience designing, implementing, and supporting Cisco UCCE or PCCE environments.
- Advanced experience with CUCM, CVP/IVR, Peripheral Gateways, Cisco Finesse, Cisco voice gateways, and SIP-based communications.
- Strong understanding of contact center call flows, ICM routing scripts, skill groups, precision queues, dial plans, redundancy, and disaster recovery.
- Experience integrating contact center platforms with CRM systems, databases, web services, and third-party enterprise applications.

Interested? We’d love to hear from you. Please include a brief summary of your relevant experience with your application.