Boost Your Security Analysis Freelancing

We are seeking a talented freelancer proficient in ActionScript 3, with a strong background in cybersecurity. The primary responsibility will be to develop a robust security system (Android, iOS, Windows, AIR), implementing effective measures to protect against potential threats. The ideal candidate should have experience in creating secure applications and understanding of best practices in cybersecurity. If you are passionate about coding with a focus on security, we invite you to apply and help us build a safer environment.

• Describe your recent experience with similar projects
• Please list any certifications related to this project
• How do you operationalize your projects?

We are looking for a skilled ethical hacker to conduct a comprehensive security assessment of our systems. The ideal candidate will identify vulnerabilities and recommend effective solutions to enhance our cybersecurity. If you have experience with penetration testing, vulnerability assessment, and security audits, we want to hear from you! Please provide examples of previous work and your approach to ethical hacking.

I need a security review and penetration test for a small SaaS web application before launch.

The app is a multi-tenant platform where users log in, store personal profile data, and interact with server-side functions that process their inputs and return outputs. The app handles user authentication, stores sensitive user data across multiple tables, and makes server-side calls to a third-party AI API based on user-submitted text.

Tech stack:
- Frontend: React (hosted via Lovable)
- Backend: Supabase (PostgreSQL, Edge Functions, Auth, Storage)
- Third-party API: Called server-side via Edge Functions (users submit text inputs that are processed server-side before being sent to the API)
- Payments: External payment processor connected via webhooks

Scale: ~12 database tables, 10-15 Edge Functions, single-page React app. No mobile app. No complex microservices.

What I need:

1. Full security audit covering authentication, authorisation, and data isolation (Row Level Security on all tables)
2. Testing all Edge Function endpoints for injection vulnerabilities, including prompt injection on AI-facing endpoints where user text is included in API calls
3. Verification that no user can access another user's data through any pathway
4. Webhook endpoint validation (ensuring only legitimate requests from the payment processor are accepted)
5. General web app security (XSS, CSRF, injection, exposed credentials, secure headers)
6. Written report with findings, severity ratings, and fix recommendations
7. Ideally, a re-test after fixes are applied

I've already implemented input sanitisation, rate limiting, output scanning, and security rules on the API layer, so this isn't starting from zero. I need someone to verify those layers work and find what I've missed.

Please include in your proposal:
- Your experience with Supabase security (especially Row Level Security)
- Whether you have experience testing applications that pass user input to third-party AI APIs
- Your estimated timeline and fixed-price quote
- An example of a similar security audit you've completed (anonymised is fine)

• Have you tested applications where user-submitted text is passed to a third-party AI API server-side? If yes, what types of injection or extraction attacks did you test for?
• This app uses Supabase Edge Functions that accept user text input and include it in calls to a third-party API. What are the first three things you would test on those endpoints?
• Have you performed security audits on Supabase applications specifically? If yes, describe your experience with Row Level Security policy review and Edge Function security testing.
• Can you provide an example or anonymised summary of a security audit report you've delivered to a previous client?
• What is your fixed-price quote and estimated timeline for this scope?

We're looking for an experienced cybersecurity professional to help us protect our infrastructure and clients.

What we need:
• Experience in threat analysis and incident investigation
• Ability to analyze server logs, traffic patterns, and access records
• Familiarity with identifying and documenting unauthorized access attempts
• Knowledge of web-based attack vectors (form submissions, scraping, DDoS, credential stuffing, etc.)
• Experience compiling findings into documented reports suitable for legal or compliance purposes
• Familiarity with IP tracing, WHOIS lookups, and forensic documentation best practices

What we're dealing with:
We've experienced suspicious activity across our web infrastructure, including abnormal form submissions, unusual traffic patterns, and server irregularities, that we need professionally assessed and documented.

If you have experience in digital forensics, incident response, or cybersecurity investigations and are looking for a meaningful short-term engagement, reach out to us.

• Describe your experience analyzing server logs to identify malicious or unauthorized activity. What tools do you typically use?
• Have you ever compiled findings from a cybersecurity investigation into a formal report intended for legal or compliance purposes? If so, briefly describe the context.
• What methods do you use to trace and attribute suspicious IP addresses, web form submissions, or automated traffic to a source?
• Are you familiar with the Computer Fraud and Abuse Act (CFAA) or other federal statutes related to unauthorized computer access? Have you worked on matters involving potential legal action?
• Describe a situation where you identified what appeared to be a coordinated or targeted attack against a web infrastructure. What steps did you take to investigate and document it?

I am seeking an experienced professional to help recover my hacked Riot Games account. The successful candidate will need to have a strong understanding of account security protocols and experience with account recovery processes. You should be able to communicate effectively with Riot Games support and provide evidence of prior successful recoveries. Reliability and confidentiality are crucial for this task. If you have a proven track record in online account recovery, please submit your proposal detailing your relevant experience.

I am seeking a skilled professional to assist in recovering my hacked Riot Games account. The ideal candidate should have experience in account recovery procedures, possess knowledge of Riot Games' security protocols, and be able to provide a step-by-step plan to regain access. Your expertise is crucial in navigating this process efficiently, ensuring the safety of my account and personal information. If you have successfully assisted others in similar situations, I would love to hear from you.

I need an experienced installer to set up a Starlink network at our RV park near Montgomery City, MO, primarily for business operations and guest internet access. This project is urgent and needs to be done ASAP.

Key Requirements:
- Check current Starlink equipment and other equipment currently used on site.
- Configure network for reliable guest access
- Ensure coverage throughout the park

Ideal Skills and Experience:
- Proven experience with Starlink installations in RV parks
- Strong networking and configuration skills
- Ability to provide past work documentation and experience

Please include past work examples and project proposals in your application. Looking forward to your bids!

Skills: Wireless, Technical Support, Network Administration, Installation, Internet of Things (IoT), Network Security, Network Engineering, Wireless Site Survey, Wireless Coverage Assessment, Wireless Network Security Analysis

We are seeking a skilled penetration tester to assess the security of our SaaS platform. The ideal candidate will conduct thorough testing to identify vulnerabilities and provide actionable insights to enhance our security posture. Your expertise will help us ensure the safety of our users' data and compliance with industry standards. You should have experience in testing web applications and familiarity with various security tools and methodologies. Strong communication skills are essential for presenting findings and recommendations clearly.

• Please list any certifications related to this project
• Describe your recent experience with similar projects
• How do you create a dependency map for systems operating in multi-tier architecture?

Hello,

Our company recently experienced a cybersecurity incident where an unauthorized attacker gained access to our system and encrypted several company files using combined encryption algorithms believed to include AES.

We are looking for an experienced cybersecurity specialist who can perform a full incident response investigation. The goal is to identify how the attacker gained access, determine whether the attacker still has access to the system, and completely remove any unauthorized presence from our infrastructure.

The work will include analyzing affected machines and servers, reviewing system and network logs, identifying possible malware or backdoors, and assessing the encryption applied to the files. If possible, we would like assistance recovering or restoring our encrypted files or identifying safe recovery options.

In addition, we need help securing our environment to prevent further compromise. This may include identifying vulnerabilities, improving system security, recommending better access controls, and advising on backup and recovery practices.

Because this involves sensitive company data, strict confidentiality and professional handling are required. Please share your experience with incident response, ransomware or encryption-related incidents, and similar recovery projects you have handled before.

Thank you.

We are seeking an experienced IT Security Consultant to perform a thorough assessment of our current security infrastructure. The ideal candidate will identify vulnerabilities, recommend improvements, and assist in implementing security measures to protect our data and systems. Strong experience in risk assessment, compliance, and incident response is essential. We are an RCM company so HIPAA experience preferred. If you have a proven track record in IT security and are passionate about safeguarding digital assets, we would love to hear from you!

Urgency:

We are in the middle of the process for getting granted the prestige UKGC license. Sadly, had to step down our MLRO / AML / Compliance Lead. We need ASAP a new candidate. Please note, you have to get approved by the UKGC. Therefore will be one form to submit. We cover all costs for it in advance!

The official start of the job will be in around 8 weeks.

About us:

We are launching a UK-facing remote betting product and are preparing our licensing application. We are hiring an MLRO to own AML/CTF operations from day 1 of live operations.

The role (purpose):

Own the AML/CTF framework and day-to-day AML operations at launch, including risk assessment maintenance, CDD/EDD oversight, suspicious activity escalation, and internal controls.

Key responsibilities:

• Own AML/CTF operations and maintain the AML risk assessment and policy framework
• Oversee CDD/EDD processes, source of funds/wealth reviews (where required), and decision logs
• Maintain escalation procedures and reporting workflows (e.g., internal suspicious activity escalation, SAR process where relevant)
• Coordinate AML training and maintain training records
• Work with Payments/Fraud and Engineering to ensure monitoring triggers and controls are correctly implemented
• Maintain auditable records for regulatory review

What we’re looking for:

• Hands-on AML operations experience in a regulated environment (gambling, fintech, payments, or similar)
• Strong judgement and documentation skills
• Comfortable working with product/engineering teams and third-party verification providers

Engagement & timing:

• Hiring now; start date aligned to go-live (target ~3 months)
• Part-time possible initially; scale post-launch
• Remote

To apply, please include:

• A short summary of AML operational experience
• An overview of your qualifications

I’m looking for a hands-on network technician who can take charge of every stage of our camp-wide connectivity: from the first walkthrough to the final site dismount. The work happens entirely in an outdoor site/camp environment, so you’ll need to be comfortable moving between containers, masts, and rough terrain while keeping cables tidy and hardware protected.

The immediate priority is expanding and fine-tuning WiFi coverage. We have not locked in any specific access-point brand yet, so I’ll rely on your recommendations for rugged, field-proven models that integrate cleanly with standard switches and routers.

Scope of work
• Conduct physical site surveys to map optimal equipment locations and check existing material placement.
• Install, align, and commission new WiFi access points, then validate signal strength and roaming performance across the camp.
• Add or replace switches, routers, and any required RJ45 runs; terminate, label, and test every port.
• Lay and splice optical fiber where high-bandwidth backhaul is needed.
• Implement the planned network topology, ensuring VLAN, PoE, and radio configurations match the design sheet.
• Mount APs securely, establish stable radio links, and document frequencies/channel plans to avoid interference.
• Provide PRC support and any needed implementation updates during the project lifecycle.
• When the mission ends, dismantle and pack down all network gear safely for redeployment.

Deliverables will be accepted once the camp shows full WiFi coverage with no blind spots, all wired drops pass throughput tests, and the network diagram and configuration backups are handed over.

If you’ve rolled out outdoor WiFi before and can travel to site on short notice, let’s talk timelines and your recommended hardware stack.

Skills: Wireless, Troubleshooting, Technical Support, Network Administration, WiFi, Network Security, Network Engineering, Wireless Site Survey, Wireless Network Security Analysis, Network Monitoring

I am seeking a highly skilled cybersecurity expert to help secure my accounts and personal computer after experiencing targeted attacks related to Call of Duty. These hackers have tried to access my phone and social media accounts, including Instagram and Snapchat. Your expertise will be crucial in identifying vulnerabilities, removing threats, and establishing robust security measures to prevent future incidents. If you have a strong background in cybersecurity and can provide effective solutions, please apply.

We are seeking an experienced web developer with expertise in AWS to restore our hacked wordpress website. Unfortunately, we do not have backups available on our AWS environment. Your primary task will be to clean the affected files, secure the site against future attacks, and restore full functionality. Knowledge of AWS services, security best practices, and web development is essential. If you have a proven track record in similar situations, we would love to hear from you.

We need an experienced penetration tester / ethical hacker to perform a comprehensive security assessment and penetration testing on our production iOS and Android mobile applications, including the Firebase backend (Firestore, Authentication, Storage, Cloud Functions, etc.).
Scope:

- Static & dynamic analysis of iOS and Android apps
- Common mobile vulnerabilities (insecure storage, weak crypto, reverse engineering risks, etc.)
- API / network traffic interception and testing
- Firebase-specific misconfigurations and security issues (rules, auth bypass, data exposure, etc.)
- Business logic flaws, authentication/authorization weaknesses, and injection risks

Deliverables:

- Detailed report with findings, severity ratings (CVSS), proof-of-concept exploits, and clear remediation recommendations
Optional: re-test after fixes (separate milestone)

Requirements:

- Proven experience with mobile app pentesting (iOS + Android)
- Strong knowledge of Firebase security best practices
- Familiarity with tools like MobSF, Frida, Burp Suite, Objection, Drozer, etc.
- Ability to provide sample reports or past mobile pentest experience

Timeline: 1–3 weeks
Please apply with:

- Relevant mobile pentest experience (especially Firebase)
- Your proposed methodology/approach
- Any certifications (OSCP, CEH, GPEN, etc. – nice to have)

Looking forward to your proposals!

Job Type:
Part-Time, Remote, Ongoing

Job Description:
We are looking for a part-time Security & IT Operations Manager to support our growing healthcare technology startup. This role will help us strengthen our internal security posture, support SOC 2 readiness, respond to customer and hospital IT/security questions, administer key workflows in Rippling IT, and help us operationalize security practices across both our cloud platform and deployed edge/IoT devices.

This is a hands-on, cross-functional role for someone who is comfortable working across security compliance, customer-facing security support, internal IT operations, and practical security processes for connected devices.

Our product includes both cloud software and deployed physical/IoT systems, so this role should be comfortable understanding and communicating security controls across laptops, SaaS tools, identity systems, cloud environments, and edge devices in customer environments.

What you’ll do

SOC 2 / Compliance

Support and help drive SOC 2 readiness and compliance efforts

Help maintain policies, procedures, evidence, and control documentation

Coordinate with third-party auditors, penetration testing vendors, and security assessors

Track remediation items and follow up with internal teams

Help maintain access reviews, risk tracking, and security-related documentation

Customer / Hospital Security Support

Respond to customer, partner, and hospital IT/security questionnaires

Join calls with customer IT, security, or compliance teams when needed

Help explain our security posture clearly and professionally across:

internal IT and identity controls

cloud security controls

endpoint/device security

network security basics

deployed edge/IoT device security concepts

Coordinate internally with leadership and engineering to gather accurate responses

Rippling IT / Internal IT Operations

Administer or support Rippling IT workflows for onboarding, offboarding, device management, and access control

Help manage laptop provisioning, endpoint security, device enrollment, and software deployment

Support user provisioning/deprovisioning, application access, and access reviews

Help enforce MFA, SSO, password/security policies, and standard IT controls

Improve repeatable IT/security processes for employees and contractors

Device / Network / Operational Security

Help document and communicate security controls related to deployed edge/IoT devices

Work with the engineering team to understand and communicate:

device authentication

secure connectivity

software update / patching processes

local access restrictions

physical security considerations

network access and segmentation concepts

remote support / administrative access practices

Help identify gaps, organize follow-ups, and support security-related process improvements

Required experience

Experience supporting or managing SOC 2 readiness, audits, or compliance programs

Experience responding to customer security questionnaires or security reviews

Experience with internal IT/security operations for remote teams

Familiarity with Rippling IT or similar platforms for device, identity, and access management

Strong understanding of:

SSO

MFA

user provisioning / deprovisioning

endpoint security basics

access controls

policy/process documentation

Working knowledge of network security fundamentals

Ability to understand and communicate security concepts across both software and device-based products

Strong written communication skills

Ability to work independently and drive follow-through in a startup environment

Preferred / strong plus

Experience with IoT, edge device, robotics, or connected hardware security

Experience in healthcare, hospitals, HIPAA, or regulated environments

Familiarity with practical security issues for deployed devices, including physical security and remote device management

Experience coordinating penetration tests, vulnerability remediation, or audit follow-ups

Familiarity with cloud security fundamentals in GCP, AWS, or Azure

Experience helping startups build lightweight but scalable security and IT processes

Ideal candidate

This role is a great fit for someone who:

can combine security compliance, customer-facing security support, and modern IT operations

is comfortable using platforms like Rippling to standardize IT/security workflows

can communicate credibly with hospitals and enterprise customers

understands that security for our company spans both cloud systems and real-world deployed devices

is proactive, detail-oriented, and able to coordinate across teams without heavy supervision

Engagement details

Part-time

Remote

Flexible hours

Long-term preferred

To apply, please include

A short summary of your relevant experience

Your experience with SOC 2 and audit/compliance support

Your experience responding to customer or enterprise security questionnaires

Your experience with Rippling IT or similar IT/device/access platforms

Any experience with IoT / edge devices / hardware products / healthcare environments

Your hourly rate and availability

My website is currently affected by malware, which is causing issues with visibility and functionality (the site is not appearing properly online). I am looking for an experienced freelancer who specializes in website security and malware removal to fully clean and restore the website.

Scope of Work:

Identify and remove all malware, malicious code, and infected files.

Restore the website so it loads and functions normally.

Check the website files, database, and server for hidden backdoors.

Secure the website to prevent future attacks.

Ensure the website is not blacklisted by Google or other services.

Implement basic security improvements (firewall, malware scanner, etc.).

Provide a brief report of what was found and fixed.

Requirements:

Proven experience with website malware removal.

Experience with WordPress / cPanel / hosting environments (if applicable).

Ability to work quickly and ensure the website is completely clean.

Good communication and ability to explain the issue.

Preferred:

Experience removing malware from hacked websites and recovering search visibility.

Ability to recommend long-term security solutions.

We are seeking an experienced white hat hacker to identify and expose vulnerabilities in our vibe coded SAAS application. The ideal candidate will have a strong background in security testing and a proven track record of uncovering weaknesses in software. Banana sandwich. Your expertise will help us enhance our application's security and protect user data. If you are passionate about cybersecurity and have the skills to carry out thorough assessments, we would love to hear from you.

The ethical hacker will need to be able to provide guidance and evidence as to how these vulnerabilities were found and insights on prevention.

AI proposals will be ignored.

We are looking for an experienced web security / server configuration specialist to help bring our website into PCI compliance. Our compliance scan is currently failing due to SSL configuration issues, specifically related to Strict Transport Security (HSTS) and possibly other SSL/TLS settings.

The website is already running HTTPS with a valid SSL certificate, but the compliance scanner is still reporting configuration problems that need to be corrected.

We need someone who can quickly diagnose and resolve the issue at the server or application level.

Scope of Work

Review PCI compliance scan results

Diagnose SSL/TLS configuration issues

Fix Strict Transport Security (HSTS) configuration

Ensure proper TLS versions and cipher suites are enabled

Ensure the site passes the PCI vulnerability scan

Provide documentation of what was changed

Environment

WordPress / WooCommerce website

Apache / LiteSpeed hosting (cPanel environment)

SSL certificate already installed

Access to server configuration available

Requirements

Experience fixing PCI compliance failures

Strong understanding of SSL/TLS configuration

Experience implementing HSTS headers

Familiar with WordPress + hosting environments

Ability to review security headers and server configuration

Deliverables

Website passes PCI compliance scan

Proper SSL security headers implemented

Confirmation of secure TLS configuration

To Apply

Please include:

Examples of PCI compliance or SSL hardening work

Your approach to diagnosing SSL/HSTS configuration issues

Estimated time to complete

If helpful, I can provide the exact PCI scan errors so you can diagnose the issue quickly.

- An updated "Landing Page" with content focused on the listings available on the marketplace and the reason for the marketplace with customer and provider focus.

- A complete "Help Centre" with individual focus on Customers and Providers. The help centre will be geared towards the unique marketplace proposition along with UK operation. It will follow the extent of what is possible with Sharetribe no-code marketplaces.

- A 'How it Works" overview for Customers and Providers.

- Unique SEO focused content pages - geared toward the expected categories of the marketplace in the expected operating locations.

Recommendations will be made throughout the relationship on enhancements, operating guidance etc. The client is free to ask questions via email after the contract is complete.

We are seeking a skilled professional to conduct a comprehensive IoT assessment focusing on security evaluation. The ideal candidate will have experience in analyzing IoT systems and identifying potential vulnerabilities.

I'm seeking a skilled professional to assist me in recovering my hacked Xbox account. The account has been compromised, and all information has been changed by the hacker. Your expertise in account recovery, security measures, and Microsoft support processes will be vital in helping me regain access. Please provide your experience in similar situations and any strategies you recommend for account protection. Let's work together to restore my account and ensure its future security.

I am seeking an experienced mobile security expert to conduct a thorough analysis of my phone's security. The objective is to identify vulnerabilities and recommend improvements to enhance my device's safety. Your expertise will help ensure that my personal information remains protected. Please provide relevant examples of your experience in mobile security assessments. This is a unique opportunity to showcase your skills in a legitimate context.

Grey Box Penetration Tester Needed for Web Application

We are looking for an experienced cybersecurity professional to perform a Grey Box Penetration Test on a web application. The goal is to identify potential security vulnerabilities, misconfigurations, and risks within the application and its infrastructure.

The tester will be provided with limited system knowledge and partial access to simulate a realistic authenticated user scenario. Deliverables should include a detailed report outlining discovered vulnerabilities, risk levels, proof of concept where applicable, and remediation recommendations.

After we address the reported vulnerabilities, the tester will also be required to retest the application and confirm that the identified issues have been properly resolved.

Experience with web application security, API testing, authentication mechanisms, and modern web architectures is preferred.