Optimize Network Security Projects on Upwork

Seeking a professional to help with USA and Schengen visa documentation. The role includes reviewing application materials, identifying missing or incomplete information, and providing clear guidance on next steps. You should be able to communicate effectively, maintain organized records, and support applicants through the submission process. Experience assisting with visa-related paperwork and ensuring documents meet requirements is important. This is a part-time, ongoing project for someone reliable and detail-oriented.

I need my brand-new router set up with an OpenVPN tunnel that terminates in the United States so I can log in to my employer’s systems from Colombia. My minimum connection requirements are 40 Mbps download and 14 Mbps upload once the VPN is running; anything slower will not be workable for my remote-desktop software.

Here is what you should know before we start:
• Preferred protocol: OpenVPN (this is non-negotiable).
• Config files: I don’t have any yet, so you will need to create or source them for a reliable U.S. endpoint.
• Router management is done through a Windows interface.

Deliverables
1. Working OpenVPN configuration installed on the router, showing a U.S. public IP.
2. Verified speed test screenshots proving at least 40 / 14 Mbps while connected.
3. A short, step-by-step document so I can re-apply the settings after a reset or firmware update.

Remote access to the router UI and a fresh speed-test baseline will be provided as soon as we agree on the milestone.

Skills: System Admin, Linux, Windows Server, Network Administration, OpenVPN, Network Security, VPN, Network Monitoring

Seeking a senior Windows engineer/security reviewer for a narrowly scoped independent qualification review. Most design and offline testing is already complete. This review focuses on Windows PowerShell 5.1 AST and Parser.ParseFile, NTFS reparse points, hard links, file identity, TOCTOU/file-substitution risks, SHA-256/artifact identity verification, Windows process timeout/interruption behavior, secure bootstrap/trust-anchor review, and fail-closed Windows behavior. The package includes manifests, hashes, synthetic test fixtures, qualification runbooks, validators, and extensive fuzz/tamper/boundary testing. No production credentials, customer data, or production access are required for the initial review. Please include PowerShell 5.1 AST experience, NTFS/reparse/hard-link experience, TOCTOU/file identity experience, fixed-price estimate for initial review, and turnaround time. A small fixed-scope first milestone is preferred.

I have a series of practical labs in Cengage MindTap for my Computer Science course on Information and Network Security. Each lab must be completed directly inside the MindTap environment and carries a graded checkpoint, so accuracy is more important than speed.

You will receive temporary platform access once we agree to proceed. From there, I simply need every assigned security lab finished by the posted due dates and the grade report captured as proof of completion. No theory questions or case-study write-ups are involved—just the hands-on labs.

Deliverables:
• All MindTap Information & Network Security labs completed
• Screenshot (or PDF) of the grade summary for each lab

A solid grasp of network security concepts and prior experience navigating MindTap will make this straightforward for the right person. Let me know your turnaround time and any similar coursework you’ve handled, and we can get started right away.

Skills: C Programming, Computer Security, Cisco, Network Administration, Internet Security, Computer Science, Network Security, Network Engineering

I’m looking for a highly experienced vulnerability researcher with advanced expertise in web application security, verification mechanisms, and business logic vulnerabilities.

Project Objective

This project is specifically focused on identifying potential vulnerabilities, security weaknesses, and logic flaws within a particular web application verification step.

I’m looking for someone with advanced manual vulnerability research skills, not someone who relies only on automated scanners.

Required Expertise

• Advanced Vulnerability Research
• Web Application Security
• Authentication & Verification Security
• Business Logic Vulnerabilities
• API Security Analysis
• Manual Vulnerability Discovery
• OWASP Testing Methodologies
• Bug Bounty / Red Team Experience

Budget & Milestones – $270 Fixed Price

The project will be divided into 2 milestones:

Milestone 1 – Initial Vulnerability Research ($70)

Conduct an initial security assessment within an authorized testing scope, focusing on the specified verification mechanism.

Milestone 2 – Complete Vulnerability Report ($200)

If a valid vulnerability is identified, provide a comprehensive technical report covering the vulnerability, its technical details, supporting evidence, potential impact, and recommended remediation.

The second milestone will only proceed if a valid vulnerability is discovered and confirmed.

Important Project Conditions

This project is focused exclusively on vulnerability research.

I will only hire candidates whose technical expertise and experience appear to be a strong match for my specific requirements.

I prefer a reasonable fixed-price arrangement because vulnerability discovery is not guaranteed, and I do not want to commit to open-ended hourly testing.

All active testing must be conducted within an authorized scope.

Who Should Apply?

I’m particularly interested in experienced security researchers who have successfully identified complex authentication, verification, API, or business logic vulnerabilities.

Please briefly describe your relevant experience and confirm that you’re comfortable working with the proposed fixed-price milestone structure.

We are seeking an experienced graphic designer and social media advertising specialist to create and publish a professional, visually engaging 10-slide Instagram carousel advertisement promoting our security software.

The advertisement will tell a compelling story about a cybersecurity professional responding to a critical SAP vulnerability known as OVERPASS (CVE-2026-44756).

We have already developed the complete storyline, slide headlines, supporting copy, and initial visual concepts. We need a creative professional to transform this material into a polished, high-quality Instagram carousel advertisement.

The finished campaign should combine realistic corporate imagery, cybersecurity visuals, simulated workplace communications, and authentic product screenshots to create a cohesive and engaging narrative.

1. Creative Design Requirements

The successful freelancer will be responsible for:

Designing a 10-slide Instagram carousel in 1080 × 1350 px (4:5) format.

Creating a consistent visual identity across all 10 slides.

Using high-quality corporate and cybersecurity imagery, including appropriately licensed stock imagery or AI-generated visuals.

Incorporating realistic Microsoft Teams-style message exchanges between the main character, his manager, and technical colleagues.

Integrating screenshots of our security software.

Using typography, colors, icons, and graphic elements consistent with our corporate branding.

Ensuring text remains readable on mobile devices.

Maintaining a consistent main character throughout the story.

Creating a professional, sophisticated design appropriate for an enterprise cybersecurity audience.

The advertisement should have a cinematic storytelling quality rather than resemble a conventional product brochure.

2. Storyline and Content

The carousel follows a cybersecurity professional through the disclosure and remediation of a critical SAP vulnerability.

The 10 slides cover the following stages:

Critical Vulnerability Disclosure: The cybersecurity professional receives notification of SAP OVERPASS.

Management Pressure: His manager requests an immediate impact assessment and remediation plan.

Vulnerability Discovery: He logs into the security software and identifies affected systems.

Risk Analysis: He examines detailed CVE information, SAP Security Notes, and remediation guidance.

Patching Roadblock: His SAP Basis team explains that kernel upgrades cannot be performed until the end of the month.

Virtual Patching: He discovers alternative protective measures and compensating controls using CES.

Coordinated Remediation: He works with network security and Basis teams to restrict access, patch the Web Dispatcher, and implement protective configuration changes.

Threat Monitoring: He monitors CES for signs of potential OVERPASS exploitation.

Management Reporting: He provides his manager with a comprehensive impact and remediation report.

Successful Outcome: His manager congratulates him, concluding with the message that were fortunate to have the security software to help with the vulnerability management.

We will supply detailed copy and visual direction for each slide.

The freelancer may recommend creative improvements, but technical statements and final wording must be approved before publication.

3. Visual and Branding Requirements

The design must reflect a premium enterprise cybersecurity product.

The visual narrative should evolve from urgency and uncertainty in the opening slides to confidence and control in the final slides.

Requirements include:

Consistent characters and corporate office environments.

Realistic cybersecurity interfaces and dashboards.

Authentic security software product screenshots where applicable.

Clear visual hierarchy emphasizing the main headline of each slide.

Professional layouts with minimal clutter.

Consistent brand colors, fonts, and logo placement.

Seamless visual continuity between slides.

Visual assets with appropriate commercial-use rights.

The freelancer must not invent product features, security findings, customer testimonials, or technical claims.

4. Instagram Advertising and Publishing Requirements

The freelancer must have practical experience using Meta Ads Manager.

Responsibilities include:

Preparing the 10 carousel slides in the appropriate format and resolution.

Preparing the accompanying Instagram ad caption and call to action.

Creating the carousel advertisement in Meta Ads Manager using provided access.

Configuring the destination URL and tracking parameters.

Checking formatting and presentation for Instagram mobile placements.

Reviewing all slides for image cropping, text readability, and display consistency.

Submitting the completed advertisement for approval before publication.

Publishing or scheduling the advertisement only after receiving final authorization.

Verifying successful publication and providing confirmation.

Campaign targeting, advertising budget, and duration will be provided separately. No advertising spend should be authorized without written approval.

5. Deliverables

The project must include:

Ten professionally designed Instagram carousel slides.

Final high-resolution PNG or JPG files for all slides.

Fully editable original design files in Figma, Adobe Photoshop, Illustrator, or Canva.

All commercially licensed visual assets, or documentation of licenses where redistribution is restricted.

Final Instagram caption and approved call to action.

A preview of the complete carousel prior to publication.

Configuration and publication of the approved advertisement in Meta Ads Manager.

Confirmation of publication, including screenshots or an appropriate Meta Ads Manager reference.

A final handover of all completed design assets.

The project includes up to two rounds of reasonable design and copy revisions before final approval.

6. Required Freelancer Qualifications

We are looking for candidates with:

Demonstrated experience creating professional Instagram carousel advertisements.

A strong graphic design portfolio, preferably featuring B2B technology, cybersecurity, SaaS, or enterprise software.

Experience developing visual storytelling across multiple slides.

Proficiency with Figma, Photoshop, Illustrator, or Canva.

Experience integrating software UI screenshots into marketing creatives.

Experience creating realistic, consistent visual characters and corporate scenarios.

Familiarity with Meta Ads Manager and Instagram advertising requirements.

Excellent written English and attention to detail.

Experience with cybersecurity or SAP software is an advantage but not required.

7. Project Process

The project will follow four milestones:

Milestone 1 — Creative Concept

Develop a visual direction and complete designs for the first two slides for feedback and approval.

Milestone 2 — Complete Carousel Design

Produce all 10 slides using the approved design concept and supplied content.

Milestone 3 — Final Revisions and Asset Delivery

Complete revisions, provide editable source files, and prepare publication-ready assets.

Milestone 4 — Campaign Publication

Configure the advertisement in Meta Ads Manager, obtain final approval, publish the approved campaign, and provide publication confirmation.

8. Application Requirements

When applying, please provide:

Examples of at least three Instagram carousel advertisements you have designed.

Examples of B2B technology or cybersecurity-related marketing work, if available.

Confirmation of experience publishing paid Instagram advertisements through Meta Ads Manager.

Your preferred creative design tools.

Your proposed fixed-price quote.

Your estimated completion timeline.

Confirmation that editable source files and commercial usage rights are included.

Important: We are not looking for generic social media templates. We want a compelling, professionally executed visual story that highlights the value of enterprise cybersecurity software during a critical security incident.

Using these systems, which needs management and correct setup:
- Office 365
- Windows server
- NAS Server
- Correct email setings (DMARC, SPF) for different domains

# Kinco GH043E HMI & PLC Development — Proprietary Controls, Wireless Customer Access and Remote Commissioning

We are seeking an experienced industrial controls programmer to develop a complete HMI and PLC control system for our proprietary Bud Dryer equipment, including **mandatory customer wireless monitoring, operation and programming capabilities**.

This is a joint project between **TCI Scientific Innovations LLC** and **The Original Resinator LLC**. The project IP will be jointly owned by both companies under our separate written agreement.

**HMI:** Kinco GH043E
**Machine location:** Our partner company’s facility in Santa Rosa, California, USA
**Work arrangement:** Remote development, integration, testing and commissioning on our actual machine
**Required timeline:** **6–8 weeks from the agreed kickoff, including wireless functionality, integration, commissioning and handover**
**PLC:** Hardware details and programming environment will be confirmed during technical scoping.

## Screen designs and graphics

**TCI Scientific Innovations LLC and The Original Resinator LLC are developing the screen designs and graphics.** These assets will be supplied to help expedite programming.

Your scope includes implementing these designs, connecting screen elements to PLC functions, and verifying navigation and touchscreen operation on the GH043E. Identify technical limitations or required design adjustments early.

## Confidentiality and intellectual property

The selected contractor must sign **our own NDA and IP agreement before receiving confidential technical information or beginning development**. Freelancer’s standard confidentiality or IP provisions will not replace our separate agreement.

Our agreement will address:

- Joint ownership by both client companies of the custom software and project deliverables.
- Delivery of complete, editable HMI, PLC and custom wireless-interface source projects.
- Confidential treatment of our recipes, process logic, hardware designs, graphics and documentation.
- Restrictions on unauthorized reuse, disclosure, distribution or sale of our proprietary work.
- Advance disclosure and approval of pre-existing code, third-party libraries, licensed components and other dependencies.

We must receive the files, credentials and documentation needed to maintain, modify and deploy the system across machines sold to our customers.

## Scope of work

### 1. Technical discovery and architecture

Review our process specification, hardware, sensors, actuators and equipment configuration. Establish:

- I/O, communications and register maps.
- Machine states, control architecture and equipment protections.
- Wireless hardware and connectivity architecture.
- Customer access and authorized service/programming permissions.
- Required hardware, software, licenses and ongoing operating costs.

Identify missing information, limitations and schedule dependencies before implementation.

### 2. Kinco GH043E HMI programming

Implement our supplied designs, including:

- Standard production recipe selection.
- A custom recipe editor supporting 1–30 stages.
- Named recipe saving and retrieval.
- Timed, Probe Only, and Probe + Recipe endpoint modes.
- Live temperatures, chamber pressure, recipe stage and elapsed/remaining time.
- Equipment states, protection countdowns, alarms and alarm mute.
- Loading, pause/resume, product-check, hold, defrost and next-batch workflows.
- Controls appropriate to VPC-equipped and non-VPC machines.

### 3. PLC programming

Develop:

- Refrigeration, vacuum pump, heating and valve sequencing.
- Temperature and vacuum control.
- Recipe execution and stage transitions.
- Product-probe validation and endpoint evaluation.
- New-batch initialization without a physical power cycle.
- Active-batch recovery following mains power loss.
- Continued PLC execution during HMI reboot or communication interruption.
- Equipment protections, interlocks and fault handling.

Detailed process rules and recipes will be supplied after execution of our NDA/IP agreement.

### 4. Mandatory customer Wi-Fi/Bluetooth functionality

**Wireless customer access is a required part of the completed system and acceptance testing. It cannot be deferred to a future development phase.**

Customers purchasing our machines must have a wireless interface providing the full applicable operator functionality, including:

- Live monitoring of temperatures, pressure, machine state, recipe progress and timers.
- Viewing alarms and protection countdowns.
- Selecting, creating, editing, naming and saving recipes.
- Selecting endpoint strategies.
- Performing permitted operating actions, including start, pause, resume, added drying time and deliberate completion.
- Accessing run history and exported data.

The system must also support **authorized remote programming, diagnostics and software updates**. Distinguish customer recipe programming from service-level changes to HMI/PLC software, with appropriate access permissions.

The connectivity design must address **Wi-Fi remote/network access and Bluetooth nearby wireless access**. Explain how each will be implemented and identify any required gateway, wireless module, controller, application or hosted service. Do not assume the HMI alone provides every required capability.

Your proposal must describe:

- The customer interface and supported devices.
- Pairing, network setup, authentication and access revocation.
- Separation of access between different customers’ machines.
- Remote command confirmation and enforcement of PLC interlocks.
- Behavior during wireless connection loss.
- Update installation, interrupted-update recovery and version management.
- Any hosting, subscription, licensing or recurring charges.

The PLC must continue controlling an active batch independently of the customer’s wireless connection.

### 5. Remote integration and commissioning

**Complete machine commissioning and wireless commissioning must be included within the 6–8-week timeline.**

Work remotely with our team and the machine in Santa Rosa to:

- Establish HMI/PLC communications.
- Verify sensor scaling and equipment outputs.
- Load, test and debug the software.
- Tune applicable control loops.
- Validate recipes, endpoints, alarms, recovery and consecutive batches.
- Demonstrate customer wireless monitoring, operation and recipe programming.
- Demonstrate authorized remote software updates and connection-loss recovery.

We will coordinate on-site support. Identify required technician assistance, access tools, cables and test equipment. Testing sessions must be coordinated around Pacific Time.

## Required deliverables

- Complete, editable source projects for all custom-developed components.
- Deployable files, build instructions and tool/version information.
- Hardware bill of materials and wiring/connection documentation.
- I/O, register, recipe, state, alarm and retained-memory documentation.
- Customer wireless setup and operating instructions.
- Service access, update, backup and recovery instructions.
- Run-data logging/export functionality.
- Commissioning records and acceptance-test results.
- Handover session and a defined post-delivery bug-fix period.

## Proposal requirements

Please provide:

1. Relevant Kinco, PLC and wireless machine-control experience.
2. Examples of remote commissioning and customer connectivity projects.
3. Confirmation that you will sign our separate NDA/IP agreement.
4. A milestone schedule completing the **entire scope within 6–8 weeks**.
5. Pricing, required hardware and all recurring costs.
6. Required client inputs and machine-access windows.
7. All exclusions and third-party dependencies.

**Explicitly confirm that your bid includes HMI/PLC development, implementation of our supplied graphics, full customer Wi-Fi/Bluetooth functionality, authorized remote programming, and successful commissioning on the actual machine.**

Skills: Technical Support, Debugging, Software Development, Programming, Embedded Systems, Technical Documentation, Network Security, Automation, PLC, Firmware Development

My personal iCloud account was recently accessed without permission and I need a seasoned, ethical security specialist to get to the bottom of it and then help me lock everything back down. The primary goal is to trace the origin of the breach and understand exactly who viewed or extracted my data.

Here’s what I expect:
• Collect and analyse every available iCloud login record, extracting IP addresses, device details and timestamps.
• Correlate that data to reveal the most precise location possible for each suspicious login and, if feasible, any individual or organisation behind it.
• Deliver a clear, human-readable report summarising findings: access timeline, geolocation results, device fingerprints and a confidence level for each conclusion.
• Recommend and, if I approve, implement concrete steps to harden the account—2FA review, password hygiene, backup verification, and any additional measures you see fit.

Please outline your relevant experience with Apple/iCloud incident response, the tools you will leverage (e.g. Graylog, Splunk, Wireshark, OSINT frameworks) and the estimated turnaround time for an initial findings report.

Skills: Penetration Testing, Security, Data Analysis, Network Security, Digital Forensics, Risk Assessment, Data Protection, Incident Response

We are looking for a reliable remote CCTV live monitoring operator to watch existing store cameras during business hours. The role involves observing live camera feeds, identifying suspicious activity, and sending a clear report at the end of each shift.

We are looking for a reliable remote CCTV live monitoring operator to watch existing store cameras during business hours. The role involves observing live camera feeds, identifying suspicious activity, and sending a clear report at the end of each shift.

Hello!

My instagram account was deactivated for intellectual property infringement. Would you be able to recover the account. And if so how long would it usually take ?

I am looking for projects related to your infrastructure requirements, ranging from hardware needs to maintenance services.

Scope of work
• CCTV untuk keamanan – supply, mount, cable, and configure cameras with recording and remote-view access.
• Access Point deployment – place and tune APs so employees and guests enjoy stable, building-wide Wi-Fi.
• Server dasar on VMware – install ESXi, create initial VMs, configure and test the RAID array, then document the build.
• Router and Switch setup – rack, cable, and configure routing, VLANs, and essential firewall rules.

Manage service requirement
I want ongoing monitoring, preventive maintenance, and rapid troubleshooting for every installed device. Please outline the tools you use for 24/7 alerting and how you handle incident response.

Deliverables
1. Fully installed and tested hardware with clean cable management.
2. Documentation for CCTV layout, AP placement, server configuration, and network topology.
3. Monitoring dashboard handed over, alerting enabled for all devices.
4. Monthly maintenance checklist plus contact procedure for on-demand support.

Tell me about your experience with CCTV brands, Unifi or similar APs, VMware ESXi, and enterprise switches/routers, and propose a start date once hardware is on site. Let’s make the workspace secure, connected, and worry-free.

Skills: Troubleshooting, Technical Support, VMware, Network Administration, Documentation, CCTV, Network Security, System Administration, Incident Response

We are looking for a skilled penetration tester to conduct a basic security assessment of our website or web application. The goal is to identify potential security vulnerabilities, evaluate security risks, and provide actionable recommendations to improve the overall security posture.

**Scope of Work:**
- Conduct authorized web application penetration testing.
- Identify common vulnerabilities, including those covered by the OWASP Top 10.
- Assess authentication, access controls, and input validation.
- Document findings with supporting evidence and risk ratings.
- Provide a professional report with remediation recommendations.

**Deliverables:**
- Penetration testing report.
- Summary of identified vulnerabilities and their severity.
- Practical recommendations for fixing security issues.

I have a MikroTik router with two independent internet links already patched into separate interfaces. What I still need is a clean RouterOS configuration that turns those links into a single, seamless connection for my network. The primary objective is true load balancing so both circuits are utilised simultaneously; automatic fail-over is welcome as a by-product but not the main focus.

You are free to apply the strategy that best suits this hardware and firmware version—whether that ends up being PCC, ECMP, NTH, or another proven approach—so long as the result spreads sessions reliably across both WANs without creating routing loops, asymmetric return paths or noticeable latency spikes for end-users.

Here’s what I expect when we are done:

• A working configuration pasted or imported into my MikroTik and demonstrated live over a brief remote session.
• A short, plain-English note explaining what was changed so I can maintain it later (interfaces, mangle rules, routing tables, health checks, etc.).
• Optional tweaks you think would harden the setup, such as connection tracking or simple monitoring scripts.

When you send your offer, highlight any previous MikroTik dual-WAN or multi-WAN experience you have tackled; that practical background will weigh more heavily than a generic proposal. We will schedule a time for remote access (WinBox or SSH), you apply the config, we test with speed-tests and session-based checks, and once traffic is balancing correctly I release the milestone.

Skills: Network Administration, Network Security, Network Engineering, Network Monitoring

I’m a senior network security engineer based in Bulgaria. I provide remote technical support for complex client escalations involving firewalls, VPN, AAA and network infrastructure.

I’m looking for an experienced B2B appointment setter to introduce me to IT service providers, MSPs, system integrators and cybersecurity companies in the UK, US, Canada or Europe. The goal is to discuss whether I could support their team as an external technical specialist when they need additional expertise or capacity.

Payment is per meeting held with a qualified lead - 50$

The more meetings you can bring me the more money I will pay!

A meeting qualifies when:

It is with an owner, technical director, service delivery leader or another person involved in choosing external specialists.

Their company serves business clients and could use remote network security expertise.

The person knows the meeting is about a potential subcontracting partnership, not a job application.

The person attends the meeting.

No-shows, duplicate contacts, existing contacts and meetings outside these criteria do not count. Please share your proposed target list and outreach message for approval before contacting prospects.

In your application, tell me which similar B2B campaigns you have run, which outreach channels you would use, and whether you are comfortable with this pay-per-meeting structure.

Also I don't mind AI generated cover letters but if someone sends me a personalised loom video it will be prioritised!

Hands-on experience with Burp Suite for web application security testing.
Strong understanding of penetration testing methodologies and OWASP Top 10 vulnerabilities.
Ability to debug applications, analyze HTTP/HTTPS requests and responses, and troubleshoot security issues.
Experience identifying, analyzing, and reporting security vulnerabilities.
Knowledge of authentication, authorization, session management, and API security testing.
Familiarity with tools and techniques used in ethical hacking and vulnerability assessment.

We are looking for an experienced IT Security Expert / Penetration Tester for a long-term collaboration, supporting us with both technical execution and security assessments.

We are seeking someone with strong hands-on cybersecurity expertise who can independently identify, validate, and assess security vulnerabilities while leveraging automation and modern technologies to improve efficiency.

Requirements
- Several years of hands-on experience in IT Security, particularly Penetration Testing and Vulnerability Assessments

- Strong knowledge of Web Application Security, Network Security, and common attack vectors

- Experience with security tools such as Nmap, Burp Suite, Nessus, or similar

- Proficiency in Python and/or Bash for scripting and automation

- Ability to independently validate vulnerabilities, assess risks, and produce clear, actionable security reports

- Experience with automated security assessments and vulnerability scanning

- Ideally, experience integrating AI into security workflows

- Strong analytical skills and a pragmatic, solution-oriented mindset

- Ability to work independently and communicate technical findings clearly


Responsibilities
- Conduct authorized security assessments and vulnerability analyses

- Identify, validate, and prioritize security vulnerabilities

- Develop and optimize automated security assessment workflows

- Prepare structured, actionable security reports

- Provide technical recommendations and support remediation efforts

- Collaborate on improving security assessment processes and tools


What We Offer
- Long-term collaboration with recurring projects

- Flexible, remote work

- Clear project scopes and responsibilities

- Opportunity to contribute technical expertise and shape processes

- Potential for increasing project volume over time


How to Apply
Please include:

- A brief overview of your cybersecurity background and relevant experience

- Examples of previous penetration testing or vulnerability assessment projects

- Your experience with Python, automation, and AI-assisted security workflows

- Your hourly rate and current availability

We are looking for someone who combines deep technical security expertise with a strong automation mindset, rather than someone focused exclusively on compliance or theoretical security consulting.

I already use SuiteDash for my business, but I want the platform to feel more like our own branded system.
I need someone to configure our custom URL, remove SuiteDash branding from client-facing links where the platform supports it, customize the login page, and apply our company branding consistently.
I would also appreciate a review of the account creation and client portal pages to make sure they match the overall look and feel of our business.
Experience with SuiteDash white-label configuration is important. Please explain what you can configure natively and what information or access you would need from me.
Looking forward to hearing from you.

I need a seasoned VAPT professional to conduct a full-scope penetration test on my production web-based SaaS platform and issue an official compliance certificate—all within 7 calendar days from project kick-off.

Scope of work
• Perform an external, black-box web application penetration test that fully covers the OWASP Top 10 and any SaaS-specific attack vectors.
• Use widely accepted tooling (e.g., Burp Suite, OWASP ZAP, Nmap, metasploit) and clearly reference methodology in the final report.
• Supply a concise executive summary for leadership, a detailed technical report with proof-of-concept exploits, CVSS risk ratings, and actionable remediation guidance.
• Issue a signed compliance certificate attesting that the application was tested and found to be free of critical or high-risk vulnerabilities as of the report date.

Acceptance criteria
1. All test activities conclude and the full documentation—including the compliance certificate—reaches me no later than Day 7.
2. Reports are reproducible: any finding must be verifiable on request.
3. Confidential data gathered during testing is securely deleted and not disclosed.
4. One complimentary retest of patched items is included if initiated within 30 days.

Environment access and scheduling details will be provided immediately after contract award so you can start without delay.

Skills: Compliance, Penetration Testing, Network Security, Risk Assessment, Data Protection, Incident Response, Security Auditing

Instagram Account Recovery Specialist Needed – TruBandzTV

Project Title: Instagram Account Recovery – Permanently Disabled Business Account

Project Description:

I am looking for an experienced Instagram/Meta account recovery specialist who can help me recover my permanently disabled Instagram account, TruBandzTV.

My Instagram account was disabled on February 24th for an alleged violation of Instagram’s hate speech policies. The situation arose after I posted content criticizing businesses that were selling counterfeit liquor. My intention was to call attention to these businesses, not to promote hate speech.

This account was built over approximately 5–6 years and had a significant following, with approximately 23,000 followers. It was also monetized and connected to my Facebook account, making it an important part of my media business and a source of income.

Since the account was disabled, I have submitted appeals through Instagram and attempted to resolve the issue through Meta/Facebook support. I also contacted the Georgia Attorney General’s Office, which reached out regarding the matter, but my account has still not been restored.

What I Need:

* An experienced specialist with a proven track record of recovering disabled Instagram accounts.
* Assistance identifying legitimate escalation channels and submitting an effective recovery request.
* Help reviewing the circumstances of the suspension and determining the best approach for requesting reinstatement.
* Assistance navigating Meta Business Support and any other appropriate official appeal processes.
* Clear communication, realistic expectations, and updates throughout the process.

Ideal Candidate:

You should have previous experience with permanently disabled Instagram accounts, Meta appeals, business account recovery, and escalations involving monetized creator or media accounts.

Please explain your experience with similar cases, your recovery process, and any relevant examples of successful account reinstatements.

Important: I am looking for a legitimate recovery specialist. I will not work with anyone who uses unauthorized access, hacking, or methods that violate platform security.

My goal is to have my original TruBandzTV Instagram account reinstated so I can recover my audience and continue operating my media business.

Please contact me with your experience, proposed strategy, estimated timeline, and pricing.

I need a full-scale technical audit of all Plomerocancun digital properties with the initial spotlight on our Google Cloud Platform stack and Google Business Profile integrations. The goal is to surface every place data enters, moves, and exits so I can close gaps, harden security, and document processes for the team.

Scope
Start with GCP and GMB, detailing how each piece ties into our website, call-tracking numbers, and WhatsApp endpoints. Within GCP, the investigation must cover:
• Compute Engine
• Cloud Functions
• BigQuery
• API SQL and any related micro-projects that were spun up during past experiments

Follow every request/response path, note authentication methods, and screenshot or export configs so the report remains actionable even if services change UI.

Deliverables
1. Network map of all client-side calls, third-party scripts, and hidden trackers.
2. GCP/GMB architecture diagram showing resources, roles, and data flow between Compute Engine, Cloud Functions, BigQuery, and connected APIs.
3. Lead-journey trace that ties UTM parameters to call logs and form submissions.
4. Risk list of potential data leaks or over-permissioned keys, each with severity and a clear fix or mitigation.
5. Consolidated PDF report plus all raw capture files (HAR, pcap, or similar) and annotated screenshots.

Acceptance
The report must let a non-technical business owner see where every customer interaction lands inside our tech stack and what can be improved or locked down. Any undocumented endpoint or credential discovered should be clearly flagged.

Send a concise note outlining past work in web packet inspection, GCP audits, and API tracing, and indicate how you would approach the first 48 hours of this assignment.

Skills: Google Cloud Platform, Data Analysis, Network Security, API Development, API Integration, BigQuery, Data Management, API Testing

I'm looking for an experienced VPN/network engineer to help me establish a fast, stable, and reliable long-term environment for using Claude Code from Shenzhen, China.

I use Claude Code extensively every day for business operations, automation, marketing, and development. It worked well for several months, but I've recently experienced connectivity issues and account interruptions.

I've tried multiple VPNs and proxy configurations, and I'm looking for someone who understands China's networking environment and can identify and implement a dependable solution.

What I'm looking for:
- Diagnose and resolve VPN, proxy, DNS, and connection stability issues.
- Optimize performance for Claude Code on Windows and macOS.
- Evaluate local versus remote infrastructure where appropriate.
- Help establish a setup that remains reliable during heavy daily use.
- Provide follow-up troubleshooting if problems arise after implementation.

Ideally, you've personally used Claude Code from mainland China or helped others maintain a stable setup over an extended period.

This is an implementation project, not just a consultation. I'm looking for someone who can take ownership of the technical problem, implement the solution, and help validate its reliability over time.

If the initial project goes well, I'm open to working together again whenever technical issues arise.

**When applying, please answer:**
1. Have you worked with Claude Code from mainland China?
2. What experience do you have troubleshooting VPNs and proxies in China?
3. How would you approach diagnosing a setup that works intermittently?
4. What would you need to examine before recommending a solution?

I'm looking for someone with practical experience, clear communication, and a proven approach to troubleshooting complex connectivity problems.

Project Overview
We are seeking a highly qualified Cybersecurity Penetration Tester or professional cybersecurity service provider to conduct a comprehensive Vulnerability Assessment and Penetration Test (VAPT) across our IT infrastructure.

The primary objective is to identify and validate internal, external, network, application, and cloud security weaknesses; simulate realistic attack scenarios within an explicitly authorized scope; and provide actionable recommendations to strengthen our security posture.

We are looking for a professional with recognized cybersecurity certifications, practical penetration-testing experience, and a proven ability to deliver detailed technical reports that management and IT teams can use to remediate identified risks.

Scope of Work

1. Vulnerability Assessment and Penetration Testing (VAPT)
• Conduct an authorized assessment of in-scope systems and infrastructure.
• Identify vulnerabilities, insecure configurations, exposed services, and potential attack paths.
• Perform controlled exploitation where explicitly authorized and safe.
• Assess authentication, access controls, privilege escalation risks, and network segmentation.
• Validate findings manually where practical to reduce false positives.
• Classify findings by severity: Critical, High, Medium, Low, and Informational.

2. External Security Assessment
• Assess the organization's authorized public-facing IP addresses, domains, and services.
• Identify exposed ports, unnecessary services, and insecure configurations.
• Review TLS/SSL configuration and relevant security headers.
• Evaluate the external attack surface and potential entry points.
• Identify risks associated with internet-facing applications and remote-access services.

3. Internal Network Penetration Testing
• Assess authorized internal network segments and systems.
• Review Windows and Linux system security, where applicable.
• Evaluate network segmentation, administrative access, and privilege management.
• Identify weaknesses in authentication, patching, and access control.
• Assess potential lateral movement and privilege escalation paths using controlled testing.
• Review network device and firewall configurations when access is provided.

4. Cloud Security Assessment
Assess applicable cloud environments and integrations, including:
• Identity and access management (IAM).
• User privileges, administrative accounts, and MFA enforcement.
• Storage permissions and data exposure risks.
• Cloud network security rules and exposed services.
• Audit logging, monitoring, and alerting.
• Secrets management and credential exposure.
• Secure connectivity between cloud services and on-premises infrastructure.
• Cloud application integrations and data pipelines.
The consultant must clearly identify the cloud platforms and services covered in the proposed assessment.

5. Web Application and API Security
Where included in the agreed scope:
• Test authentication and authorization controls.
• Assess session management and access restrictions.
• Evaluate common web application vulnerabilities using the OWASP framework.
• Test API authentication, authorization, and input validation.
• Identify injection risks, insecure data handling, and security misconfigurations.
• Provide reproducible evidence and remediation guidance.

6. Remediation and Security Hardening
We require more than an automated vulnerability scan. The selected consultant must help us understand how to address identified weaknesses.
Expected activities include:
• Prioritizing vulnerabilities according to severity and business impact.
• Recommending configuration changes, patches, and security controls.
• Assisting with remediation implementation where agreed.
• Advising on firewall rules, access controls, MFA, monitoring, and endpoint protection.
• Conducting a follow-up validation test to confirm whether remediated findings have been resolved.

Remediation implementation must be separately identified and priced if it is not included in the original assessment.

Required Certifications
Applicants must hold at least one relevant, verifiable cybersecurity certification. Preference will be given to candidates with multiple certifications, such as:
• OSCP — Offensive Security Certified Professional.
• CEH — Certified Ethical Hacker.
• CISSP — Certified Information Systems Security Professional.
• PNPT — Practical Network Penetration Tester.
• CompTIA PenTest+.
• GPEN — GIAC Penetration Tester.
• OSWE — OffSec Web Expert.
• Relevant cloud security certifications from AWS, Microsoft Azure, or Google Cloud.

Applicants should identify their exact certification names, issuing organizations, and current status. Certifications are important, but practical experience and the quality of previous assessment reports will also influence selection.

Required Experience and Technical Skills
The ideal candidate should demonstrate experience with:
• Internal and external penetration testing.
• Vulnerability discovery and manual validation.
• Network and infrastructure security testing.
• Web application and API penetration testing.
• Cloud security assessments.
• Tools such as Nmap, Burp Suite, Nessus, Greenbone/OpenVAS, and appropriate exploitation frameworks.
• OWASP testing methodologies and recognized penetration-testing practices.
• Professional security reporting and risk-based remediation.
• Safe testing practices that protect production systems and business data.

Candidates must be able to explain their methodology, distinguish confirmed vulnerabilities from potential findings, and provide clear supporting evidence.

Required Deliverables
The selected service provider must deliver:
1. Assessment scope, methodology, and testing plan.
2. Executive summary of the overall security posture.
3. Detailed technical report documenting each finding.
4. Evidence supporting findings, including relevant screenshots or sanitized command output.
5. Severity ratings and an explanation of business impact.
6. Reproduction steps for validated findings, where safe and appropriate.
7. Recommended remediation actions for each finding.
8. Prioritized remediation roadmap.
9. Summary of confirmed vulnerabilities, potential findings, and informational observations.
10. Final presentation or review meeting with our team.
11. Follow-up validation report for remediation work included in the agreed contract.

Rules of Engagement and Authorization
All testing must be performed only against systems and assets explicitly authorized by the client.
Before testing begins, the consultant must agree to:
• Document the approved targets, scope, and testing windows.
• Avoid denial-of-service testing, destructive actions, and unnecessary access to sensitive data unless separately approved in writing.
• Protect client credentials, evidence, and confidential information.
• Notify the client promptly if a critical exposure or active compromise is discovered.
• Obtain written approval before expanding scope or implementing production changes.
• Securely handle and delete client data according to the agreed engagement terms.

Application Requirements

When submitting your proposal, please provide:
1. A brief introduction and summary of your penetration-testing experience.
2. Your relevant certifications and verification details.
3. Examples of similar VAPT engagements you have completed, with confidential information removed.
4. Your proposed assessment methodology and testing tools.
5. Your estimated project duration.
6. Your proposed hourly rate and/or fixed-price fee.
7. A clear breakdown of what is included in your fee.
8. Any additional charges for cloud assessments, remediation assistance, retesting, or reporting.
9. Your availability and expected start date.

Please do not include confidential information from previous clients in your application.

What Is Your Rate?

Please submit your most competitive professional rate for this engagement.

We are open to hourly or fixed-price proposals. We will evaluate candidates based on qualifications, technical capability, methodology, deliverables, and overall value—not price alone.

We are looking for a reliable, ethical, and technically proficient penetration tester or cybersecurity firm capable of helping us identify security weaknesses and improve our defenses.

I am looking for someone with the skill set to work with my telegram username in order to give me access through the email and locate my phone that was left in the wilderness. It is a new phone and dont have any more information on it, such as the phone number and dont remember which email is linked to the number.

Position Summary - Palo Alto Prisma Access Engineer - (Strata Cloud Manager)

We are seeking a highly specialized Senior Palo Alto Prisma Access Deployment Engineer with 5+ years of experience to drive the end-to-end implementation and architecture of our Secure Access Service Edge (SASE) environment.

Prisma Access Deployment: Hands-on experience building and launching Prisma Access for Mobile Users and Remote Networks from scratch.

Strata Cloud Manager: Expertise using Strata Cloud Manager (SCM) for cloud-managed SASE configuration, folder hierarchies, and unified policy management.

Core SASE Components: Proficiency configuring ZTNA 2.0, Secure Web Gateway (SWG), CASB, and Cloud-Delivered FWaaS.

Palo Alto Core Tech : Deep knowledge of cloud-managed Next-Generation Firewalls (NGFW), User-ID, App-ID, and GlobalProtect clients.

Enterprise Routing: Strong command of BGP peering, policy-based routing, and building secure IPsec/GRE tunnels to the SASE backbone.

SSL/TLS Decryption: Practical experience designing and deploying cloud-managed traffic decryption strategies and URL filtering.

Identity Integration: Experience connecting Prisma Access to IdPs like Okta, Azure AD/Entra ID, or Ping via SAML 2.0.

Advanced Troubleshooting: Skill in isolating routing, security policy, and client connectivity issues using SCM dashboards, logs, and packet captures.

Preferred Qualifications & Certifications Palo Alto Networks Certified SASE Expert (PCSAE) or Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred.

Skills: Linux, Cloud Computing, Cisco, Network Administration, Cloud Security, Network Security

We’re a consulting firm standing up a small Microsoft 365 GCC High enclave to handle CUI for client engagements and meet CMMC Level 2 equirements. We need an experienced professional to design, build, and document the environment. The enclave will be small (about 5 users) and isolated from our commercial tenant.

Scope of work:
• Configure the GCC High tenant, including domain, licensing, and admin roles
• Set up Entra ID with MFA, Conditional Access, and break-glass accounts
• Deploy virtual desktops (Windows 365 Cloud PCs, or Azure Virtual Desktop if better suited) as the only access path to CUI
• Enroll and manage the virtual desktops in Intune with a hardened baseline (CIS/DISA STIG-aligned)
• Configure Exchange Online, SharePoint, and Teams with sensitivity labels and DLP
• Apply Purview audit and retention settings, and configure Defender for Endpoint/Office
• Restrict data movement (clipboard, drive, and printer redirection, external sharing, USB) between the virtual desktops and local devices
• Set up logging to Log Analytics/Sentinel and alerting to support audit requirements
• Deliver documentation: architecture diagram, configuration baseline, and evidence/screenshots mapped to CMMC level 2 controls to support our SSP
• Hold a knowledge-transfer session with our admins

Required experience:
• Hands-on GCC High deployments (not just commercial M365 or GCC)
• Working knowledge of CMMC Level 2 assessment objectives
• Experience with Intune, Entra ID, Conditional Access, and Windows 365 or AVD
• Familiarity with FIPS 140-validated encryption requirements
• U.S. person (required for access to a GCC High tenant)

Nice to have: prior work with a C3PAO assessment or an RPO/RP, plus CMMC-AB/Cyber AB certifications (CCP/CCA) or Security+/CISSP.

Deliverables and timeline: Working enclave, documentation, and handoff.

Looking for a company that can do managed services for servers, cloud for Windows and security.
Professionals who monitor, manage, and optimize the servers, cloud, and networks — ensuring performance, security, and complete management for dedicated servers including VM's.
our servers are generally issue free. we just need to make sure someone is watching since we cannot.

So during our working hours if anything is slowing things down or server has speed issues or anything we will need someone to be on it, look and advise and fix and then update us and document it.

I need this service on 3 servers hosted in the cloud to be watched.
Of course regular maintenance, checks during our off hours, backups, monitoring & stuff like that will need to happen on a regular basis.

You have to understand, servers of this nature dont go down just like that, but monitoring is key and if anything goes wrong or an update didnt happen or anything like that, your team should be the one's coming in to tell us and not the other way round.

That will be what we will be looking for more than anything else.

It could be windows update or SQL server service or MySQL service or a IIS or Apache issue - anything of that nature. When you apply, make sure to share your pricing per month per server or however you do your pricing.

Skills: System Admin, Web Security, Computer Security, Cloud Computing, IIS, Windows Server, Virtual Machines, Cloud, Cloud Security, Network Security

We are looking for an experienced WordPress Security Expert to address and resolve malware issues across multiple websites under our management, ensuring the restoration of access and security to all affected sites. The ideal candidate will have a strong background in identifying, cleaning, and preventing malware on WordPress platforms, along with extensive experience in web security best practices.

Responsibilities:

Conduct thorough malware scans across all affected websites.
Identify and remove all instances of malware and any vulnerabilities that could lead to future infections.
Restore access to all websites where access has been blocked due to security concerns.
Update and secure WordPress, including all themes and plugins, to the latest versions.
Implement robust security measures to prevent future attacks, such as setting up security plugins, firewalls, and regular scanning schedules.
Provide a detailed report for each website detailing the malware removed, actions taken, and recommendations for future security measures.
Ensure that all websites are fully functional and monitor them for a set period to ensure no recurring security issues.

Requirements:

Proven track record of successful malware removal and security enhancement in WordPress.
Deep understanding of common WordPress vulnerabilities and their solutions.
Ability to work efficiently under pressure to restore service quickly and securely.
Excellent communication skills to report back on progress and provide clear maintenance and prevention guidelines.

Contract Details:

This is a fixed-price contract. Please provide your total bid for the complete recovery and securing of all sites.
Expected turnaround time for initial malware removal and restoration is ASAP.
Further monitoring and maintenance may be negotiated separately based on initial outcomes.

Application Process: Please submit your proposal with the word ALPHA with a breakdown of your strategy for tackling this project, your fixed bid, and examples of similar work you have performed. Include any certifications related to cybersecurity or web administration.

Those who don't follow directions with the keyword will not be reviewed.

We are looking for an engineer who can manage the infrastructure, network, security, and
DevOps environment for our AI / IoT products.
You will work closely with the Japan-based technical team. For further details please see the attached file below

I'm looking for motivated outreach specialists who can help me find and connect with businesses that need penetration testing (pentesting) and cybersecurity assessment services.

Your role will be to:

Find businesses that may need cybersecurity or pentesting services.
Reach out to potential clients through email, LinkedIn, or other professional channels.
Qualify interested prospects and introduce them to me.
Help schedule meetings or hand over qualified leads.
Compensation

Commission only.

You'll receive a commission for every client you bring in who successfully purchases my services. This is a performance-based opportunity with uncapped earning potential.

Ideal Candidate
Experience with B2B outreach, lead generation, or sales.
Good written English and communication skills.
Able to find decision-makers such as founders, CTOs, or IT managers.
Self-motivated and results-driven.
Experience selling IT, SaaS, or cybersecurity services is a plus but not required.
Services Offered
Web Application Penetration Testing
API Security Testing
Network Security Assessments
Vulnerability Assessments
Security Consulting
To Apply

Please include:

Your experience with outreach or lead generation.
The channels you plan to use (LinkedIn, email, cold calling, etc.).
Any previous results you've achieved.
Why you'd be a good fit.

I'm looking for long-term collaborators who can consistently generate qualified business opportunities.

Skills: Project Management, Sales, Business Analysis, Market Research, Email Marketing, Technical Documentation, Lead Generation, B2B Marketing, User Experience Research, Cold Calling