Security Auditing Jobs

JOB OPPORTUNITY – ETHICAL HACKING / CYBERSECURITY We are looking for a skilled Ethical Hacker / Cybersecurity Specialist to help improve and strengthen the security of our website. The main responsibilities include: - Identifying potential security vulnerabilities - Conducting authorized security assessments - Testing website security and identifying weaknesses - Providing recommendations to improve overall cybersecurity - Helping implement appropriate security measures Requirements: - Good knowledge of Ethical Hacking and Cybersecurity - Practical experience in website security and penetration testing - Strong understanding of web application security - Responsible and professional approach to security testing If you have the required skills and experience, please contact us. ...

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside. Here is what I expect: • A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices. • A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework. • A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and sugg...

I have a full-stack Java codebase that I need set up, walked through, and examined from top to bottom. My first priority is uncovering any security vulnerabilities or hidden backdoors, so you will need to comb through the entire stack—server-side, client-side, build scripts, and deployment configs—looking for risky patterns, outdated dependencies, or suspicious commits. Once the security sweep is complete, I also want your eye on execution speed. Any hotspots that slow response times, blocking calls, or inefficient algorithms should be flagged with clear, actionable fixes. You are welcome to profile locally or spin up a test environment; I’ll provide repo access and a clean VM image so you can reproduce the build. Deliverables • Written audit report that lists ev...

I want complete peace of mind that my personal iPhone & android Samsung is fully locked down against hackers. The job is straightforward: audit every setting, app permission, network profile, and cloud-sync option on the device; fix or guide me to fix anything that leaves an opening; and finish with a clear summary of what was changed and why. Because this is for personal use, I’m focused on practical, real-world protection rather than corporate compliance checklists. Expect to work directly with me over a secure video or messaging channel so I can follow along while you adjust settings such as Face ID, two-factor authentication, iCloud Keychain, Wi-Fi/cellular profiles, and any third-party security apps you recommend. Deliverables • A live, step-by-step hardening se...

I want a seasoned penetration tester to put my PHP site through its paces and uncover every weakness, from classic SQL Injection and XSS to more sophisticated remote-code tricks. The public-facing pages matter, but my priority is the admin panel. Within that area I rely heavily on three features—CRUD data operations, role and permission management, and a file-upload module—so those have to be stressed especially hard. Your job is to simulate real-world attacks with tools of your choice (Burp Suite, OWASP ZAP, manual source review, custom exploit scripts—whatever gets the most reliable results) and then document each vulnerability with a clear proof-of-concept, reproducible steps, severity rating, and a practical fix I can hand straight to my developer. Deliverables &b...

I recently replaced my phone and lost the Microsoft Authenticator configuration that protects my Outlook email account. Since the app was my only two-factor method, I’m now locked out. I need someone who knows the ins and outs of Microsoft Authenticator, Outlook sign-in security, and account recovery workflows to guide me through regaining full access. The focus is strictly on recovering the account, not on setting up new devices or general troubleshooting. We’ll work together in real time (screenshare or chat—whatever you recommend) to: • Navigate Microsoft’s recovery pages • Prove ownership with any backup codes or alternative verification routes that may still be available • Re-establish two-factor authentication on my new phone once ac...

I’ve just installed a residential UniFi Dream Machine Pro with Protect and I want the whole environment tightened up before it goes live. Here’s what I need: • Build a solid firewall policy from scratch—block known-bad IP ranges, close unnecessary ports, and create custom rules that fit my lifestyle • Activate and fine-tune UniFi’s Threat Management (IDS/IPS) so intrusion attempts are detected and stopped automatically. • Set up live and historic monitoring for web and email traffic, with clear dashboards and alerting inside the UniFi controller. • Check VLAN design and switch settings to be sure lateral movement is limited. • A short hand-off session so I understand how to review logs, update rules, and keep everything current. A...

We need an independent security review of a new member app (React Native / Expo) and its PHP JSON API. This is not a redesign or a feature build. The previous generation of this product had a serious incident (personal data exposed). That stack is retired. We want a review of the new app and API before a wider release. This is a small member app for people who already belong to a venue/club. It is not a marketplace, social network, or payments app. What it does today (this is the whole product): - Sign in, create account, verify email, reset password (reset is a simple web page) - 8 languages - Accept terms when they change - Home: greeting, shortcuts; optional club “home” when a club is selected - Clubs: list of linked clubs, pending/unavailable states, add a club with a co...

About the project: We are looking for an experienced **web application penetration tester** to conduct an independent security assessment of a SaaS platform. The application is a business management platform with authenticated user accounts, document handling, portals, workflows, messaging and APIs. Further details about the application and functionality will be provided to shortlisted candidates. Scope: The assessment should cover the web application and relevant APIs, including authenticated functionality. Areas of interest include: * Authentication and session management * Authorisation and access controls * Horizontal and vertical privilege escalation * IDOR / BOLA vulnerabilities * OWASP Top 10 * API security * Input validation and injection vulnerabilities * Cross-site script...

A recent scan showed a malicious code injection on one of the key pages of my custom-built PHP application, hosted on a dedicated AWS EC2 server. We cleaned the malware and found and patched the loophole. But then it came back and another loophole surfaced. I need an experienced security specialist to scan the entire server for malware and set up ongoing monitoring so this doesn’t resurface. Scope of work • Remove every trace of the current infection from both codebase and filesystem. • Audit the full stack, server configuration, and access logs to pinpoint the exact attack vector. • Patch or re-architect the vulnerable component you identify, then harden the server (SSH, firewall, file permissions, intrusion detection, etc.). • Deploy continuous monitoring and a...

I need help to uncover the identity of a cyberstalker targeting my business and me. This person has been sending harassing emails and messages, creating impersonation or fake accounts, and gaining unauthorized access to my data. Their actions are severely impacting my business, causing financial loss, damaging my reputation, disrupting operations, and inflicting mental anguish. Ideal Skills and Experience: - Expertise in cybersecurity and digital forensics - Experience with investigating online harassment and impersonation - Ability to trace unauthorized data access - Strong analytical skills to compile evidence - Knowledge of relevant laws and regulations - Prior experience working with victims of cyberstalking is a plus I'm looking for a professional who can take this seriously an...

FREELANCER MILESTONE: Global Kirtan App — Flutter Code Audit PROJECT OVERVIEW: We need an experienced Flutter developer to perform a thorough audit of our Kirtan App's source code. The project is built with Dart/Flutter and is live on Android. The review must cover platform-specific nuances, the shared Flutter codebase, and the supporting backend. --- SCOPE OF AUDIT: **1. Code Quality & Maintainability** - Structure, readability, and design patterns - State management choices and widget tree optimization - Test coverage and overall maintainability - Dependency management and library versions - Technical debt and refactoring priorities **2. Security Vulnerabilities** - Insecure storage and data handling - Improper network calls and API security ...

I’m working through a series of Information-Technology projects and need a knowledgeable tutor who can guide me specifically in Cybersecurity, with an emphasis on Network security. My current tasks involve hardening small-office networks, configuring firewalls and VPNs, and documenting the risks uncovered through vulnerability scans. I’d like you to: • Walk me through each stage of these projects in live, screen-shared sessions (Zoom or similar). • Provide short follow-up notes or annotated configs so I can review after each call. • Review my deliverables—topology diagrams, security policies, and scan reports—and flag weak spots before final submission. Our collaboration will run a few hours a week, but I’m flexible on scheduling as l...

I need an experienced Java/JSP security-minded developer to help me replace a single hyperlink on the Northern Railways site (page: ,4,385). The current link points to and must be updated to At the moment I have no server access, so the first step is a brief audit of the page structure, its deployment flow (likely Apache Tomcat on a Linux host), and the exact permissions or credentials required to make the change safely. I will supply our internal security documentation; all work must respect those protocols. Once you outline the legitimate method and confirm the level of admin or code-repository access I must secure, I’ll arrange that access. Afterward, you will implement the link swap and verify it in production. Deliverables • Technical report summarising page archit...

I need a proactive partner to keep my website fresh, error-free, and continually optimised so that more visitors turn into direct bookings. Your first focus will be content maintenance. I will send you copy, images, and video assets; you will build new pages or sections where needed, refine existing text for clarity and engagement, and upload multimedia so it loads quickly and looks great on every device. Whenever you spot outdated wording, broken links, or layout issues, go ahead and correct them without waiting for a prompt. Alongside these visible updates, I want the site quietly hardened behind the scenes. Run regular security scans, patch vulnerabilities, and fix any bugs you uncover before they affect guests. Then pour your energy into SEO aimed squarely at boosting direct boo...

Website: Php 8.1.32 Joomla! 4.4.14 Stable [ Pamoja ] 30-September-2025 16:00 GMT Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k Mysql 8.0.41 Our Joomla-based online store—which uses a custom mobile phone case configurator to process orders—has just been flagged as infected with malware. Scans indicate infections within the core Joomla files, while the configurator code remains intact as it operates independently of Joomla. Unfortunately, I do not have a recent backup to restore the site from, so it must be cleaned in place and then fully secured. Here is what I need: • A comprehensive, documented scan of the filesystem and database to isolate and remove any malicious files, scripts, or backdoors. • Restoration of all legitimate core Joomla files, followed by version u...

Dear Head/Management Team, I am writing to formally report a serious fraud/scam incident related to a project/application on Freelancer. I was contacted regarding a work opportunity and was asked to make payments in connection with the project. I have already paid ₹1,134, and I was subsequently asked for additional payments/fees. I am concerned that this may be fraudulent, especially because I have previously faced similar situations where payments were made but I did not receive the promised work/payment. I request you to urgently investigate this matter, verify the client/project and the payment requests, and take appropriate action against the concerned account if any fraudulent activity is found. Please also confirm whether I am required to make any further payment. I do not want t...

I need a clear, reproducible assessment that proves (or disproves) whether a phone number can be turned into a TikTok username and, in the process, expose personal information such as a user’s name or email. My goal is to understand the extent of this user-data exposure and verify whether the current behaviour complies with TikTok’s own privacy policy. Here’s what matters most to me: • A methodology that shows how the lookup is carried out—API calls, OSINT techniques, fuzzing or any other route you take. • Concrete evidence of what data is revealed at each step, including full request/response captures, screenshots or logs. • A comparison of your findings against the wording of TikTok’s privacy policy to highlight any non-compliance. &b...

I need to make my patient-outcomes tool for audiologists HIPAA compliant. Key areas to address: - Data transmission security - Implement encryption (TBD) Ideal skills and experience: - Expertise in HIPAA compliance - Experience with data encryption and security protocols - Familiarity with SaaS applications and data privacy regulations Please provide a detailed plan and cost estimation.

Mi principal necesidad es fortalecer la seguridad de mi conexión a internet. Busco a alguien que revise la infraestructura actual, identifique vulnerabilidades y realice los ajustes necesarios para proteger todos los equipos conectados. Lo que espero: • Diagnóstico inicial del estado de la red, dispositivos y contraseñas. • Configuración o reconfiguración de router, firewall y cualquier punto de acceso Wi-Fi para blindar la red. • Implementación de buenas prácticas: cifrado WPA3 (si el hardware lo permite), segmentación de redes invitadas, actualizaciones de firmware y políticas de acceso. • Pruebas de penetración básicas que confirmen la nueva solidez de la seguridad. • Informe f...

Senior Solidity/DeFi Engineer Needed — Autonomous ETH/USDC Flash-Loan Arbitrage Bot Looking for an experienced Solidity/DeFi developer to build an autonomous ETH/USDC flash-loan arbitrage bot using protocols such as Aave and Uniswap. Requirements: * Solidity + Python/Node.js * Flash loans and DEX arbitrage * Atomic transactions * MEV/slippage protection * Gas optimization * Ethereum mainnet infrastructure * Web dashboard for monitoring P/L and transactions * Strong smart-contract security experience The system should identify legitimate price inefficiencies, simulate trades, execute profitable opportunities, and automatically repay flash loans. Important: Security-focused project. No unauthorized exploitation, oracle manipulation, protocol bypasses, or theft of funds. Please pr...

I’m locked out of my personal Gmail account after two-factor authentication stopped working. The password is correct, but I no longer have access to the verification codes, so Google’s standard recovery loops keep failing. I need an expert who knows Google Account recovery inside out—backup codes, trusted devices, security questions, and escalation paths—so I can regain full access without losing any data. Deliverables must include: • Live or documented guidance that gets me back into the inbox. • A quick security check-up afterward so the account stays protected, with fresh backup codes and updated recovery options. Once I’m successfully signed in and the new safeguards are confirmed, the job is complete.