Boost Your Security Analysis Freelancing

We are seeking an experienced cybersecurity and IT auditor to conduct an independent security and infrastructure review of our travel technology platform. The engagement will focus on application security, authentication, API and third-party integrations, database and sensitive data handling, hosting and infrastructure configuration, dependencies, vulnerabilities, logging, monitoring, backup readiness, and production operational risks. This is a read-only, non-disruptive audit with no penetration testing, exploitation, production changes, or live transactions unless separately authorized. Please include relevant certifications, audit experience, methodology, estimated timeline, and a fixed-price proposal.

Description:
My WordPress site on Hostinger keeps getting hacked. Malware was found in the index file, and an unknown admin user appeared after I reset passwords. The attacker is getting in through WordPress. Hostinger shows a WordPress core update, a theme update, 13 plugin updates, and 60 vulnerabilities. Hostinger has run a basic malware cleanup, but I need someone to find the entry point and make sure it stays fixed.

Scope:

• Back up the current state, then update WordPress core, the Astra theme, and all plugins
• Remove unused, abandoned, or vulnerable plugins
• Hunt for backdoors (plugins, themes, uploads, mu-plugins, database users and options, wp-config, .htaccess)
• Remove unknown admin users and reset secret keys and credentials
• Check Search Console (both the Domain and URL-prefix properties) for unknown owners,
• Confirm the site and domain settings are correct and working
• Harden the site (firewall, 2FA, auto-updates) and confirm it stays clean for 72 hours
• Send a short written report of what you found and fixed

After the cleanup: monthly maintenance with updates, weekly malware scans, offsite backups, uptime monitoring, and a 24-hour response time.

Requirements:

• WordPress malware cleanup experience
• Hostinger/hPanel experience preferred
• Can start today
• Secure access only (temporary admin user and Hostinger collaborator access, no shared passwords)
• Interested in a long-term working relationship

Please include:

• A similar hack you've cleaned
• How soon you can start
• Your monthly maintenance price

I would like to try to recover money I lost in an online false work involving Telegram tasks. The scam involved a website, where my balance was displayed, but it is currently locked.

We’re exploring a security assessment service for small online businesses and looking for a hands-on technical partner.

You should have strong experience with:

- Penetration testing — finding and validating real vulnerabilities beyond automated scanner reports.
- WordPress, WooCommerce, Shopify apps/integrations and common website technologies.
- Server and cloud security — hosting configurations, APIs, databases and exposed services.
- AI tools and agents for security testing — practical experience building or using these workflows.

We handle marketing and customer acquisition. You bring the technical security expertise.

First step: a paid brainstorming session to assess feasibility before building anything.

We’re particularly interested in candidates based in countries with competitive local costs who can offer strong expertise at a cost-effective rate. This is a remote opportunity, with potential for a long-term, full-time role if the business proves viable.

Future testing will require authorization and an agreed scope covering only systems the customer is entitled to have tested.

Please send your relevant experience, examples of AI/security work, hourly rate and availability.

I am looking for an experienced digital forensics and OSINT professional to help me with two tasks.

Task 1: Unknown device linked to Gmail
A laptop appears in the devices linked to my Gmail account, but I do not recognize it. I want to identify the device and determine whether available Google account activity can provide its IP address or other useful information.

Task 2: Stolen laptop investigation
My laptop was stolen last year. I have some information about the device that may help with the investigation. I want to know whether it can be located or whether any useful leads can be found.

Requirements:

- Explain what is realistically possible.
- Tell me what information you need.
- Provide an estimated price and timeline before starting.
- Use lawful investigation methods and protect my privacy.

Please describe your relevant experience and how you would approach these tasks.

We need a feasibility document for your product from a seasoned Cybersecurity professional. Must be in US. Please let us know if you are interested.

We are building a cloud accounting and stock system for traders in the UAE. Many companies share one PostgreSQL database, so keeping each company's data apart is the most important property of the system.

In short: each company connects as its own database login, every company table uses forced row-level security, and the important checks run inside the database. Privileged actions go through a small set of SECURITY DEFINER functions. The application is TypeScript on Node.js.

How we choose: two or three people each do the same paid, fixed-price trial on one area of the code, about half a day (4 hours). We continue with the strongest written report, for a review of the whole foundation of about 1½–2 days, paid separately.

You get: a code bundle (read-only; no repository access) and steps to build the database locally in Docker. There is never any real customer data.

We're looking for: proven work on PostgreSQL security (row-level security, roles and grants, SECURITY DEFINER and search_path) or on tenant separation in multi-company software; written findings with steps to reproduce; and an NDA signed before anything is shared.

Individuals only, please: no agencies and no subcontracting. Please answer the screening questions.

We are an established finance company with more than 12 years of experience, building secure and scalable applications for individuals and businesses.

We are looking for a versatile technical professional to join our team on a long-term basis. This is a hands-on role covering software development, cloud infrastructure, servers, security, monitoring, and technical operations.

You will work alongside our System Administrator and support our Technical Manager and management team on various technical matters.

We require an organised, proactive, and versatile technical specialist who can comfortably bridge technical operations, cloud infrastructure administration, Microsoft 365 governance, day-to-day remote IT support, and practical application troubleshooting.

---

🤖 AI Tools & Productivity

You should be highly comfortable using modern AI tools such as Claude and Antigravity for development, troubleshooting, code review, documentation, security analysis, and technical research.

You must be able to critically verify, audit, and benchmark AI-generated solutions rather than blindly relying on them. You are expected to harness AI to deliver high-quality, secure results at speed.

---

🧪 Quality Assurance, Self-Testing & Verification Standard

We operate in a regulated financial environment where precision and reliability are paramount:
• Rigorous Pre-Submission Testing: You must thoroughly test, validate, and sanity-check your work end-to-end before submitting it for review to the System Administrator, Technical Manager, or management team.
• Zero "Untested Handovers": Whether running Python automation scripts, reviewing NestJS/Angular code, executing database queries in MySQL, deploying patch scripts in Action1, updating telephony call routing in Teams, or applying Microsoft Purview DLP rules, all changes must be verified in staging/sandbox environments with verified test cases first.
• Self-Reliance & Root-Cause Analysis: When an issue arises, diagnose the root cause and test your remediation completely rather than escalating unverified assumptions.

---

🔧 Key Responsibilities

1. Application Support, Scripting & Codebase Knowledge:
• Understand how our applications work and know how to use and navigate code written in Python, NestJS, TypeScript, Angular, MySQL, and Redis.
• Troubleshoot application faults, inspect logs, trace errors through the codebase, and assist with bug fixes and code updates.
• Write, test, and maintain automation scripts (Python, PowerShell, Bash) and execute database queries, updates, and maintenance routines.

2. Cloud Infrastructure & Cost Governance (Azure & OVHcloud):
• Administer, deploy, and monitor environments across both Microsoft Azure and OVHcloud (VPS, Dedicated Bare-Metal, Public Cloud, and vRack private networking).
• Oversee server availability, health monitoring, disk capacity, automated backup retention, and disaster recovery validation.
• Supervise cloud cost governance: audit, reconcile, and verify monthly OVHcloud billings and resource utilisation.
• Track and optimise monthly AI tool expenditures and API consumption (TK238033 - OpenAI, Claude, Antigravity, etc.).

3. Microsoft 365, Teams Telephony, Outlook & OneDrive:
• Configure and administer Microsoft Teams call queues, auto-attendants, and call routing policies for our primary operational desks: Deal Desk, Trade Desk, and Finance Desk.
• Diagnose and resolve Microsoft Outlook issues (email delivery, profile corruption, mailbox permissions, calendar synchronisation, and connectivity).
• Govern corporate OneDrive for Business storage: directory architecture, sync/hydration resolution, data retention policies, and permission audits.

4. Data Governance, Security Controls & Compliance (Microsoft Purview & ISO 27001):
• Configure and enforce data protection policies via Microsoft Purview (Data Loss Prevention / DLP, sensitivity labels, retention rules, and audit logs).
• Maintain and audit the 28 core organisational security controls from our internal compliance documentation (endpoint encryption, access reviews, MFA / Conditional Access, and password policies).
• Ensure all systems and operational procedures strictly comply with ISO 27001 and GDPR standards.

5. Endpoint Management & Remote IT Helpdesk:
• Administer Action1 RMM across ALL company laptops and workstations globally (centralised patch management, automated software deployment, script execution, and vulnerability remediation).
• Provide hands-on remote IT support for distributed team members (network diagnostics, printer configurations, VPN connectivity, hardware troubleshooting, and Teams/Outlook faults).

6. Technical Operations & Upwork Administration:
• Assist management with Upwork platform coordination, technical contract tracking, milestones, and task deliverables.
• Document technical workflows, standard operating procedures, and incident post-mortems.

---

🎯 Required Skills & Experience

• Technical Stack Working Knowledge: Practical working knowledge of Python, NestJS, Angular, TypeScript, MySQL, and Redis—knowing how to navigate the codebase, understand how components interact, troubleshoot application issues, and execute scripts/queries.
• Dual Cloud Administration: Practical operational experience managing both Microsoft Azure and OVHcloud infrastructure and servers.
• Microsoft 365 & Security Suite: Deep familiarity with Microsoft Teams Voice/Call Routing, Microsoft Outlook administration, OneDrive, and Microsoft Purview (DLP/compliance).
• Endpoint & RMM Management: Proven experience utilising Action1 RMM (or equivalent enterprise RMM tools) for centralised patch deployment and monitoring across Windows/macOS endpoints.
• Security & Compliance: Thorough understanding of ISO 27001, GDPR, BitLocker, IAM least-privilege, and executing structured security control checklists (e.g. 28 security controls matrix).
• Testing Discipline: Uncompromising commitment to testing and validating all technical work and scripts prior to submission to supervisors.
• AI Fluency: Practical proficiency with Claude, Antigravity, and modern AI engineering workflows.
• IT Remote Helpdesk: First-rate troubleshooting capabilities across networking, remote print queues, software installations, and workstation diagnostics.
• Communication & Ownership: High standard of professional English, keen attention to detail, and the autonomy to resolve complex problems without hand-holding.

---

⏱️ Working Hours & Engagement

• Role Type: Full-Time / Long-Term Ongoing Contract.
• Schedule: Monday to Friday, aligned with Irish Business Hours (7:00 AM – 5:00 PM Irish Time ).
Remuneration: USD 800 / month initial base rate (full-time monthly engagement with long-term review based on demonstrated reliability and performance).

---

Please begin your proposal with the word: Credebt

Proposals that do not follow this instruction may not be considered.

We are looking for someone interested in a long-term relationship who can contribute across development, infrastructure, cloud, security, and technical operations.

I’m dealing with persistent interference that is crippling Wi-Fi gear in an outdoor setting. The issue is clearly RF-related, but I haven’t been able to pin down where the unwanted signal originates or which exact frequencies are involved.

Here’s what I need from you: locate and positively identify the interfering digital RF source, document its frequency characteristics, and recommend practical steps to eliminate or work around it so normal wireless-internet performance is restored. I expect you to arrive with the right spectrum-analysis tools (a handheld spectrum analyzer or SDR setup capable of 2.4 GHz / 5 GHz sweeps) and the know-how to perform onsite directional tracing, capture signal snapshots, and log readings for a concise report.

Deliverables
• Field visit and sweep of the affected outdoor area
• Identification of interference frequencies and likely device or phenomenon causing them
• Short technical report outlining measurements, screenshots, and mitigation or compliance actions

The job is complete once the interfering source is clearly located and I can act on your recommendations to restore stable Wi-Fi operation.

Skills: Technical Writing, Signal Processing, Digital Signal Processing, Wireless Site Survey, RF Site Survey, Wireless Coverage Assessment, Wireless Network Security Analysis, Wireless Network Risk Analysis & Reduction

I need a security expert to test my custom radio device. The goal is to ensure my device is secure.

Requirements:
- Test the security of my custom radio device.
- Provide proof that the signal can be copied, replayed, or interfered with.

Ideal Skills:
- Experience with RF signal analysis
- Knowledge of security vulnerabilities in radio communications
- Ability to provide clear, documented proof of findings

Skills: Wireless, Security, Wireless Certification (CSA, FCC, IEC, FAA, IEEE, CE, Atex), RF Site Survey, Wireless Coverage Assessment, Wireless Security Audit, Wireless Network Security Analysis, Wireless Network Risk Analysis & Reduction

We are seeking an experienced SAP Security Consultant / Penetration Tester to support a short-term cybersecurity assessment of a client's SAP landscape, including SAP S/4HANA, SuccessFactors, and SAP Business Technology Platform (BTP) as applicable. Responsibilities include conducting security assessments, identifying vulnerabilities and misconfigurations, reviewing authentication, authorization, privileged access, and security configurations, and documenting findings with risk ratings and remediation recommendations. The role also includes supporting technical and executive-level reporting. This is a remote engagement of approximately 70 hours, starting ASAP, with hourly compensation based on experience. Please include relevant SAP security assessment experience, certifications, hourly rate, and availability.

Summary
We are an established finance company with more than 12 years of experience, building secure and scalable applications for individuals and businesses.

We are looking for a versatile technical professional to join our team on a long-term basis. This is a hands-on role covering software development, cloud infrastructure, servers, security, monitoring, and technical operations.

You will work alongside our System Administrator and support our Technical Manager and management team on various technical matters.

We require an organised, proactive, and versatile technical specialist who can comfortably bridge technical operations, cloud infrastructure administration, Microsoft 365 governance, day-to-day remote IT support, and practical application troubleshooting.

---

🤖 AI Tools & Productivity

You should be highly comfortable using modern AI tools such as Claude and Antigravity for development, troubleshooting, code review, documentation, security analysis, and technical research.

You must be able to critically verify, audit, and benchmark AI-generated solutions rather than blindly relying on them. You are expected to harness AI to deliver high-quality, secure results at speed.

---

🧪 Quality Assurance, Self-Testing & Verification Standard

We operate in a regulated financial environment where precision and reliability are paramount:
• Rigorous Pre-Submission Testing: You must thoroughly test, validate, and sanity-check your work end-to-end before submitting it for review to the System Administrator, Technical Manager, or management team.
• Zero "Untested Handovers": Whether running Python automation scripts, reviewing NestJS/Angular code, executing database queries in MySQL, deploying patch scripts in Action1, updating telephony call routing in Teams, or applying Microsoft Purview DLP rules, all changes must be verified in staging/sandbox environments with verified test cases first.
• Self-Reliance & Root-Cause Analysis: When an issue arises, diagnose the root cause and test your remediation completely rather than escalating unverified assumptions.

---

🔧 Key Responsibilities

1. Application Support, Scripting & Codebase Knowledge:
• Understand how our applications work and know how to use and navigate code written in Python, NestJS, TypeScript, Angular, MySQL, and Redis.
• Troubleshoot application faults, inspect logs, trace errors through the codebase, and assist with bug fixes and code updates.
• Write, test, and maintain automation scripts (Python, PowerShell, Bash) and execute database queries, updates, and maintenance routines.

2. Cloud Infrastructure & Cost Governance (Azure & OVHcloud):
• Administer, deploy, and monitor environments across both Microsoft Azure and OVHcloud (VPS, Dedicated Bare-Metal, Public Cloud, and vRack private networking).
• Oversee server availability, health monitoring, disk capacity, automated backup retention, and disaster recovery validation.
• Supervise cloud cost governance: audit, reconcile, and verify monthly OVHcloud billings and resource utilisation.
• Track and optimise monthly AI tool expenditures and API consumption (TK238033 - OpenAI, Claude, Antigravity, etc.).

3. Microsoft 365, Teams Telephony, Outlook & OneDrive:
• Configure and administer Microsoft Teams call queues, auto-attendants, and call routing policies for our primary operational desks: Deal Desk, Trade Desk, and Finance Desk.
• Diagnose and resolve Microsoft Outlook issues (email delivery, profile corruption, mailbox permissions, calendar synchronisation, and connectivity).
• Govern corporate OneDrive for Business storage: directory architecture, sync/hydration resolution, data retention policies, and permission audits.

4. Data Governance, Security Controls & Compliance (Microsoft Purview & ISO 27001):
• Configure and enforce data protection policies via Microsoft Purview (Data Loss Prevention / DLP, sensitivity labels, retention rules, and audit logs).
• Maintain and audit the 28 core organisational security controls from our internal compliance documentation (endpoint encryption, access reviews, MFA / Conditional Access, and password policies).
• Ensure all systems and operational procedures strictly comply with ISO 27001 and GDPR standards.

5. Endpoint Management & Remote IT Helpdesk:
• Administer Action1 RMM across ALL company laptops and workstations globally (centralised patch management, automated software deployment, script execution, and vulnerability remediation).
• Provide hands-on remote IT support for distributed team members (network diagnostics, printer configurations, VPN connectivity, hardware troubleshooting, and Teams/Outlook faults).

6. Technical Operations & Upwork Administration:
• Assist management with Upwork platform coordination, technical contract tracking, milestones, and task deliverables.
• Document technical workflows, standard operating procedures, and incident post-mortems.

---

🎯 Required Skills & Experience

• Technical Stack Working Knowledge: Practical working knowledge of Python, NestJS, Angular, TypeScript, MySQL, and Redis—knowing how to navigate the codebase, understand how components interact, troubleshoot application issues, and execute scripts/queries.
• Dual Cloud Administration: Practical operational experience managing both Microsoft Azure and OVHcloud infrastructure and servers.
• Microsoft 365 & Security Suite: Deep familiarity with Microsoft Teams Voice/Call Routing, Microsoft Outlook administration, OneDrive, and Microsoft Purview (DLP/compliance).
• Endpoint & RMM Management: Proven experience utilising Action1 RMM (or equivalent enterprise RMM tools) for centralised patch deployment and monitoring across Windows/macOS endpoints.
• Security & Compliance: Thorough understanding of ISO 27001, GDPR, BitLocker, IAM least-privilege, and executing structured security control checklists (e.g. 28 security controls matrix).
• Testing Discipline: Uncompromising commitment to testing and validating all technical work and scripts prior to submission to supervisors.
• AI Fluency: Practical proficiency with Claude, Antigravity, and modern AI engineering workflows.
• IT Remote Helpdesk: First-rate troubleshooting capabilities across networking, remote print queues, software installations, and workstation diagnostics.
• Communication & Ownership: High standard of professional English, keen attention to detail, and the autonomy to resolve complex problems without hand-holding.

---

⏱️ Working Hours & Engagement

• Role Type: Full-Time / Long-Term Ongoing Contract.
• Schedule: Monday to Friday, aligned with Irish Business Hours (7:00 AM – 5:00 PM Irish Time ).
Remuneration: USD 800 / month initial base rate (full-time monthly engagement with long-term review based on demonstrated reliability and performance).

---

Please begin your proposal with the word: Credebt

Proposals that do not follow this instruction may not be considered.

We are looking for someone interested in a long-term relationship who can contribute across development, infrastructure, cloud, security, and technical operations.

We need a part-time Information Security Officer to support our SOC 2 Type II audit for an AWS-based SaaS business. The role will focus on reviewing and improving security controls, documenting processes, and helping prepare for the audit. You will work with our team to assess current controls, identify gaps, and recommend practical improvements. This is a short-term engagement for someone who can provide clear guidance, collaborate effectively, and help strengthen our security posture in preparation for the audit.

This is a part-time, ongoing role. Most of the work is a few hours a month, with a heavier start in the first two weeks.

What you’ll do

Review and approve SOC 2 evidence before it goes to the auditor
Review changes made by our DevOps and engineering contractors (you check the work; you don’t do the hands-on technical work)
Run quarterly access reviews: who has access to what, and whether they still need it
Review our security policies every year, and after any major change
Lead our response if a security incident happens
Sit on our Risk Committee, which meets quarterly
Send a one-page security report to the CEO each month
Answer auditor questions about how our controls work

Immediately, before November 1: read our draft SOC 2 report and help close a short list of open items: policy mapping, penetration test and incident-response test records, and reviewing our disaster recovery test.

You must have

Hands-on experience leading or running a security program through a SOC 2 audit, ideally Type II
A solid understanding of AWS security, enough to review and question a DevOps engineer’s work
Clear, plain written English. Our CEO is not technical, and your reports need to be easy to follow.
Willingness to pass a background check before getting access
Location in the United States or Canada, because of how we handle our clients’ data

Strongly preferred

CISSP, CISM, or a similar security certification
Experience with financial services, credit unions, or other regulated industries
Experience with compliance platforms such as Thoropass, Vanta, or Drata

Important: independence
You must have no business relationship with Thoropass or its audit firm: no referral, reseller, partnership, or employment ties. Please confirm this in your proposal.

Engagement

Hourly, part-time, ongoing
Expect about 5 to 10 hours in the first two weeks, then a few hours a month
Start: immediately
A 3-month initial term, then ongoing

We need an expert to configure Cloudflare to strengthen our website security. The work includes reviewing current settings, identifying vulnerabilities, and implementing improvements to protect against threats. You will also document the changes made and provide recommendations for ongoing security best practices. This is a short-term project for someone who can work independently and deliver clear, actionable results.

We are seeking a cyber security expert to support our compliance efforts, with a strong preference for experience managing Sprinto for SOC2 and GDPR requirements. The role involves reviewing security controls, identifying gaps, and helping maintain ongoing compliance with relevant standards. You should be comfortable working with technical teams, documenting processes, and providing clear recommendations to strengthen our security posture. Experience with similar compliance frameworks is highly valued.

We need an expert to configure Cloudflare to strengthen our website security. The work includes reviewing current settings, identifying vulnerabilities, and implementing improvements to protect against threats. You will also document the changes made and provide recommendations for ongoing security best practices. This is a short-term project for someone who can work independently and deliver clear, actionable results.

Looking for a Discord Security Expert to help secure my server and prevent scammers and impersonators from targeting members. We’re seeing fake accounts pretending to be MySportPick and sending private messages to members, likely through our Welcome Channel. I want to protect the community while still using the Welcome Channel for promotions, sales updates, and marketing. I need someone who can review the current setup, recommend the best security approach, and walk me through implementation on a call. Please share your experience with Discord security and your pricing.

I need help to stop lag on my CCTV screen. Currently, all cameras are connected via Wi-Fi, and the CCTV screen is also connected to the internet through Wi-Fi.

Key Requirements:
- Supply and install necessary extenders
- Improve connection stability and reduce lag on all cameras

Ideal Skills and Experience:
- Experience with Wi-Fi extenders and network optimization
- Knowledge of CCTV systems
- Ability to troubleshoot and resolve connectivity issues

Please ensure a smooth and responsive CCTV feed by enhancing the current setup.

Skills: Wireless, Troubleshooting, Network Administration, WiFi, CCTV, Network Engineering, Wireless Site Survey, Wireless Network Security Analysis

We need an expert to review our Fortinet network security configurations and provide certification that they meet our security requirements. The work includes assessing current settings, identifying gaps, and recommending improvements. You should be able to document findings clearly and help ensure our environment is secure and compliant. Experience with Fortinet systems and security best practices is essential for this role.

Job Summary:

We are seeking a skilled Penetration Tester to perform comprehensive security assessments of web applications and UI-integrated APIs. The ideal candidate will have strong experience in identifying and exploiting security vulnerabilities through manual testing, supported by industry-standard security tools. This role requires a deep understanding of modern web technologies, authentication mechanisms, authorization models, and secure application design.

Key Responsibilities:

Perform manual penetration testing of web applications and UI-integrated REST APIs.
Conduct security assessments aligned with the OWASP Web Security Testing Guide (WSTG), OWASP Top 10, and OWASP API Security Top 10.
Identify and validate vulnerabilities, including:
Broken Access Control (IDOR, Privilege Escalation)
Authentication and Session Management flaws
SQL Injection
Cross-Site Scripting (XSS)
Server-Side Request Forgery (SSRF)
Remote Code Execution (RCE)
Command Injection
Cross-Site Request Forgery (CSRF)
File Upload Vulnerabilities
Business Logic Flaws
Security Misconfigurations
Sensitive Data Exposure
Analyze application workflows to identify authorization bypasses and business logic vulnerabilities.
Capture, manipulate, and test API requests using intercepting proxies and API testing tools.
Validate automated scanner findings and perform manual verification to eliminate false positives.
Prepare detailed technical reports, including proof-of-concept, risk assessment, CVSS scoring, and remediation recommendations.

Required Skills:

Strong understanding of web application architecture and HTTP/HTTPS protocols.
Experience testing REST APIs and modern authentication mechanisms (OAuth 2.0, JWT, API Keys, SSO).
Solid understanding of authentication, authorization, session management, and secure coding principles.
Knowledge of the OWASP Top 10, OWASP API Security Top 10, and common attack methodologies.
Ability to identify complex business logic and access control vulnerabilities.
Required Tools

Experience with one or more of the following:

Burp Suite Professional
Postman / Insomnia
Nuclei
SQLMap
ffuf
Nmap
Git
Preferred Qualifications
2–5+ years of hands-on web application and API penetration testing experience.
Relevant certifications such as OSCP, OSWE, GWAPT, PNPT, or equivalent are preferred.
Experience writing clear, actionable security assessment reports.
Basic scripting skills in Python, Bash, or JavaScript are a plus.

Top university client needs our company to address 189 question security questionnaires or provide our company policies information on the following - HECVAT, VPAT, Business Continuity/Disaster Recovery plans, SOC2.

Company seeking senior cyber security, data security, security infrastructure with more than 7+ years of experience to assist company in answering 189 questions.

Some questions we are able to answer on our own. Others we need an expert to assist us. Seeking to hire in next 48 hours.

Get in contact if meet the project requirements.

Thanks,

We have built an invite-only client portal on Lovable (React front end) with our own Supabase project: Postgres, row-level security, Supabase Auth with emailed sign-in codes, security definer functions and a small email worker. We are about to invite our first users and want an independent security review first. This is a review, not a development project. Please do not propose building features.

What we want reviewed
- Row-level security, grants and security definer functions: can one client see or change another client's data, can a client write anything directly, can staff access be escalated?
- Authentication and sessions: the emailed sign-in code, invitations, deactivation, and any password routes.
- The server routes and scheduled worker: secret handling, rate limiting, Vault, pg_cron and pg_net.
- Black-box testing of the live site using demo accounts we provide.

What you will deliver
- A written report ranked by severity, with evidence, steps to reproduce and a recommended fix for each finding.
- A short call to walk us through it.

What we will provide, after an NDA and an agreed scope
- Read-only access to the code repository and database migrations.
- A security notes document listing our rules and our accepted risks.
- Demo staff and client accounts. No real client data and no service keys.

Rules
- Demo accounts only. No testing against real client accounts or data.
- No denial-of-service, load or social-engineering tests, and tell us before running any automated scanner.
- Report anything serious straight away.

Ideal fit
Experience auditing Supabase projects (row-level security and Postgres functions in particular), web application security (OWASP), and ideally AI-generated or Lovable code.

To apply, please include: how you would test row-level security, your estimated days, and a fixed-price quote.

# Cybersecurity & IT Security Consultant
**Contract / Project-Based | Remote or Miami, FL**

**Company:** PCA Insurance Services / Progressive Consulting Advisors

### About Us

We are a growing commercial insurance and payroll services organization specializing in the construction industry. Our team operates in a hybrid and remote environment, handling confidential client information, insurance carrier systems, CRM platforms, and payroll data.

We are seeking an experienced **Cybersecurity & IT Security Consultant** to assess, strengthen, and manage our cybersecurity infrastructure.

### Key Responsibilities

- Conduct a comprehensive cybersecurity risk assessment across both companies.
- Audit user accounts, access permissions, password management, and authentication systems.
- Review and secure LastPass, Google Workspace, NowCerts, Pipedrive, ADP, RingCentral, and insurance carrier portals.
- Implement multi-factor authentication (MFA), role-based access controls, and secure credential management.
- Develop and implement employee onboarding and immediate offboarding procedures, including access revocation and credential rotation.
- Assess remote employee devices, VPN configurations, home network security, and endpoint protection.
- Develop a formal Remote Work & Information Security Policy.
- Implement appropriate data backup, recovery, monitoring, and incident response procedures.
- Assist with cybersecurity requirements for commercial Cyber Liability insurance applications.
- Provide employee cybersecurity awareness training.
- Recommend and implement ongoing cybersecurity monitoring and maintenance.

### Qualifications

- 5+ years of professional experience in cybersecurity, IT security, or managed security services.
- Experience securing small to mid-sized businesses with remote employees.
- Strong knowledge of Google Workspace administration, identity and access management, MFA, password managers, endpoint security, and VPN technologies.
- Experience handling sensitive financial, insurance, payroll, or client information.
- Familiarity with NIST Cybersecurity Framework and relevant data privacy and security requirements.
- Relevant certifications such as CISSP, CISM, Security+, or equivalent demonstrated experience preferred.
- Ability to implement solutions, document procedures, and provide ongoing support—not simply deliver recommendations.

### Project Deliverables

1. Initial cybersecurity risk assessment and prioritized remediation plan.
2. Implementation of critical security controls.
3. Documented employee access management and offboarding procedures.
4. Remote Work & Information Security Policy.
5. Incident response and business continuity recommendations.
6. Employee training and management handover.
7. Proposal for ongoing cybersecurity monitoring and support.

### Engagement

Initial assessment and implementation project, with the possibility of an ongoing monthly services agreement.

**To Apply**

Please provide a brief overview of your experience, relevant certifications, examples of similar projects, your proposed approach, estimated timeline, and fee structure.

We are looking for a hands-on professional who can take ownership of the implementation and help establish a secure, scalable IT environment.

WordPress Incident Response + Forensic Log Review (active compromise)

I need an experienced WordPress security professional to remediate an active compromise and give me a written forensic finding. This is not a routine “clean my hacked site” job, please only apply if the scope below is squarely in your wheelhouse.

The situation:
A WordPress site on shared cPanel hosting was serving a ClickFix fake-CAPTCHA injection to visitors. I’ve already removed the obvious malware and locked down admin access, but there’s evidence of persistence (malware re-dropped after my initial cleanup). The hosting account has multiple WordPress installs (live site plus several old/staging copies), and I believe reinfection is coming from a forgotten install. The account is currently suspended to stop the attacker; DNS is on Cloudflare under my control; a separate app on different infrastructure is unaffected.

What I need:

Full malware + persistence removal across ALL installs on the account (config-level backdoors, orphaned installs, the works), not just the main site.
A written, evidence-cited forensic determination of whether a legacy database (~7,000 user records: names, emails, hashed passwords, no payment/government data) or a database dump file was accessed/exported by an unauthorized party. I have preserved the raw access logs. This finding feeds a legal/notification decision, so it must cite specific log evidence, not just assert a conclusion.
Hardening + a verifiable all-clear.

Please address these in your proposal:

Have you handled multi-install WordPress compromises with persistence/reinfection? Give a brief example.
Can you produce a written, log-cited exfiltration determination? (This is the key requirement. If this is outside your scope but you can do the cleanup, say so honestly, I may split the work.)
Your approach to preserving evidence BEFORE cleanup (I do not want a wipe-and-reinstall that destroys the logs/evidence).
Realistic turnaround and your fixed price for this scope.

Fixed-price, milestone-based. Please don’t apply if your plan is “run a scanner and harden it”, I need someone who can do the forensic analysis.

We are an established finance company with more than 12 years of experience, building secure and scalable applications for individuals and businesses.

We are looking for a versatile technical professional to join our team on a long-term basis. This is a hands-on role covering software development, cloud infrastructure, servers, security, monitoring, and technical operations.

You will work alongside our System Administrator and support our Technical Manager and management team on various technical matters.

We need someone who can take ownership, make decisions, troubleshoot independently, and work across different areas of technology.

🔧 Key Responsibilities
Develop and maintain applications using NestJS, TypeScript, Angular, MySQL and Redis.
Build and maintain APIs and integrations.
Troubleshoot application, server, and production issues.
Work with Microsoft Azure and OVH Cloud environments.
Manage and troubleshoot Linux/Windows servers and cloud infrastructure.
Monitor systems, logs, performance, and availability.
Support deployments, backups, and disaster recovery.
Work with the System Administrator on infrastructure and technical issues.
Support the Technical Manager with technical analysis and implementation.
Identify security risks and recommend improvements.
Manage and review access, permissions, MFA, and authentication mechanisms.
Understand public/private keys, SSH keys, certificates and secure credential management.
Support security of Microsoft Outlook, OneDrive and Microsoft 365.
Understand and apply principles related to ISO 27001 and GDPR.
Assist with vulnerability assessments and penetration testing.
Investigate incidents and perform root-cause analysis.

🛡️ Security Knowledge
Security is an important part of this role. You should have practical knowledge of:

ISO 27001
GDPR
IAM and least privilege
Microsoft Entra ID / Azure AD
MFA and Conditional Access
Server hardening
Vulnerability management
Penetration testing
Security monitoring
Data protection
Private/public key mechanisms

🤖 AI Tools
You should be highly comfortable using modern AI tools such as Claude and Antigravity for development, troubleshooting, code review, documentation, security analysis, and technical research.

You must also be able to verify AI-generated solutions rather than blindly relying on them.

🎯 Ideal Candidate
5+ years of relevant technical experience.
Strong NestJS, TypeScript, Angular, MySQL and Redis experience.
Good understanding of backend and frontend development.
Practical experience with Azure and OVH Cloud.
Good server, networking, and infrastructure knowledge.
Good understanding of cybersecurity and data protection.
Comfortable working independently across multiple technical areas.
Strong problem-solving and decision-making skills.
Able to explain technical issues clearly and without unnecessary complexity.
Comfortable working with developers, system administrators, and management.
Willing to take ownership rather than waiting for step-by-step instructions.

📋 Please Include in Your Application
Short summary of your relevant experience.
Your experience with NestJS, Angular, TypeScript, MySQL and Redis.
Your Azure and OVH Cloud experience.
Your experience with security, ISO 27001 and GDPR.
Examples of technical/security problems you have solved.
Your experience with Claude, Antigravity, or similar AI tools.
GitHub/portfolio/LinkedIn links if available.
Availability per week and hourly rate.
Attention to Detail

Please begin your proposal with the word: Credebt

Proposals that do not follow this instruction may not be considered.

We are looking for someone interested in a long-term relationship who can contribute across development, infrastructure, cloud, security, and technical operations.

We need a technical consultant to assess our client's network security and identify vulnerabilities through penetration testing. The work includes reviewing current security controls, testing network defenses, and providing a clear report with findings and recommendations. You should be able to work independently, communicate results clearly, and help improve overall security posture. This is a part-time multiple projects for someone with hands-on experience in network security and penetration testing.

We need a freelancer to review and audit our Microsoft 365 policies to identify gaps, recommend improvements, and help strengthen our security posture. The work includes assessing current policies, documenting findings, and providing clear recommendations for policy updates. This is a part-time project for someone who can work independently and communicate findings effectively.

We are seeking a highly skilled and experienced Senior Penetration Tester to join our cybersecurity services team. The successful candidate will plan, execute, and report on authorized offensive security engagements across external and internal networks, web applications, APIs, Active Directory environments, cloud infrastructure, and wireless networks. Deliverables include actionable intelligence that helps clients measurably reduce their attack surface. Engagements are conducted remotely on behalf of government, municipal, and enterprise clients under formal rules of engagement. Candidates must demonstrate technical depth, professional judgment, and strong written communication skills to perform complex security assessments and present findings to both technical and executive audiences.

Scope: review controls, validate CJIS evidence with the City, configure event export, create detection use cases and test session investigation. Required: privileged-access control testing, SIEM schemas/detections, audit retention, protocol coverage and cryptographic evidence review. CJIS implementation experience strongly preferred; any clearance/screening claim must be verified. Screening: distinguish a recorded session from searchable command history and explain how to test expiry at target, session and identity layers.

I'm a DevOps engineer (up to 3 years, AWS/Terraform/CDK/Python/Docker). I need someone with Lead/Senior experience in DevOps/Platform Engineering who knows how these technical interviews work. I would require guidance and support for success along with mock interviews.

We need an experienced WordPress security specialist to investigate and secure two business websites on separate hosting servers.

Both recently experienced critical errors. Our administrator restored availability and removed suspicious plugins, but we need to check for remaining infections and prevent recurrence.

Scope:
• Back up and inspect files, databases, users and available logs.
• Remove malware, backdoors and unauthorized access.
• Investigate the likely entry point and close identified vulnerabilities.
• Update and harden both installations without breaking existing functionality.
• Provide a brief findings report, verify key functions and perform a follow-up check after 14 days.

Please include your relevant experience, earliest availability, turnaround time and fixed price for both sites. Explain any limitations or exclusions.