Security Auditing Jobs

My site is already live and collecting customer information, but the current safeguards are minimal. I need an experienced cybersecurity professional to focus exclusively on data protection: assessing the way customer details are stored and transmitted, closing any gaps you identify, and putting long-term controls in place so the data stays safe even as the site scales. What I expect • A concise risk assessment of my existing environment (server, database, APIs, third-party plugins). • Implementation of best-practice controls—end-to-end encryption (SSL/TLS), database hardening, access-control policies, secure backups, and monitoring or alerting tools you feel are essential. • A short validation report or penetration test summary confirming the fixes are effectiv...

My Shopify store needs a thorough tune-up. I’m looking for someone who can run a complete security and performance audit, then tackle the specific problems I’m facing: • Security: I’m worried about virus or malware infections, possible unauthorized access and any avenue for data breaches. I want the store scanned, cleaned and hardened without disrupting day-to-day trading. • Performance: page-speed has dipped; I’d like clear recommendations and the quick-win fixes implemented. • Metafield cleanup: there are piles of legacy metafields from old apps. Please identify what’s safe to delete and tidy them up so the theme and admin stay lean. • Theme maintenance: several theme sections throw “block reference” errors after a rece...

I have a complete code-base that now needs to live on a cloud server. The immediate goal is twofold: 1) install and configure the application so it runs reliably in the cloud environment I provide, and 2) comb through every file, dependency, and configuration to confirm there are no hidden backdoors, malicious packages, or insecure default settings left behind after development. I’m deploying to a cloud server (provider is flexible, so please be comfortable with AWS, Azure, or GCP). You’ll set up the runtime stack, handle environment variables, connect the database, and push the first production build. While doing so, perform a thorough security audit: manual inspection, automated scanners, and any static-code-analysis tools you trust. If something suspicious appears, docu...

I have a demo SAST web application that needs a third-party review of its security posture. The goal is to measure how well the platform detects real issues, how often it raises false positives, and how effective the built-in AI-assisted remediation suggestions are. I also want an expert perspective on the soundness of the underlying technical architecture. During the assessment, please: • Probe detection quality with well-crafted test cases and known vulnerable samples. • Document every false positive you encounter, explaining why it is incorrect and how it could be avoided. • Stress-test the AI remediation flow, noting accuracy, clarity, and any missing defensive guidance. • Comment on scalability, data flow, and overall architecture from an AppSec best-practic...

JOB OPPORTUNITY – ETHICAL HACKING / CYBERSECURITY We are looking for a skilled Ethical Hacker / Cybersecurity Specialist to help improve and strengthen the security of our website. The main responsibilities include: - Identifying potential security vulnerabilities - Conducting authorized security assessments - Testing website security and identifying weaknesses - Providing recommendations to improve overall cybersecurity - Helping implement appropriate security measures Requirements: - Good knowledge of Ethical Hacking and Cybersecurity - Practical experience in website security and penetration testing - Strong understanding of web application security - Responsible and professional approach to security testing If you have the required skills and experience, please contact us. ...

I have a PHP-based web application that I want to put into production with complete peace of mind. Before I do, I need an experienced full-stack developer to comb through the entire codebase, spin the project up on a clean server, and confirm that nothing malicious or inefficient is hiding inside. Here is what I expect: • A deep dive into every PHP file and any supporting assets to judge overall code quality, maintainability, and adherence to best practices. • A focused security assessment that looks for backdoors, exposed credentials, outdated libraries, common exploits (SQL injection, XSS, CSRF), and any unsafe configuration in the web server or framework. • A performance review that pinpoints bottlenecks in database queries, memory usage, or slow endpoints and sugg...

I have a full-stack Java codebase that I need set up, walked through, and examined from top to bottom. My first priority is uncovering any security vulnerabilities or hidden backdoors, so you will need to comb through the entire stack—server-side, client-side, build scripts, and deployment configs—looking for risky patterns, outdated dependencies, or suspicious commits. Once the security sweep is complete, I also want your eye on execution speed. Any hotspots that slow response times, blocking calls, or inefficient algorithms should be flagged with clear, actionable fixes. You are welcome to profile locally or spin up a test environment; I’ll provide repo access and a clean VM image so you can reproduce the build. Deliverables • Written audit report that lists ev...

I want complete peace of mind that my personal iPhone & android Samsung is fully locked down against hackers. The job is straightforward: audit every setting, app permission, network profile, and cloud-sync option on the device; fix or guide me to fix anything that leaves an opening; and finish with a clear summary of what was changed and why. Because this is for personal use, I’m focused on practical, real-world protection rather than corporate compliance checklists. Expect to work directly with me over a secure video or messaging channel so I can follow along while you adjust settings such as Face ID, two-factor authentication, iCloud Keychain, Wi-Fi/cellular profiles, and any third-party security apps you recommend. Deliverables • A live, step-by-step hardening se...

I want a seasoned penetration tester to put my PHP site through its paces and uncover every weakness, from classic SQL Injection and XSS to more sophisticated remote-code tricks. The public-facing pages matter, but my priority is the admin panel. Within that area I rely heavily on three features—CRUD data operations, role and permission management, and a file-upload module—so those have to be stressed especially hard. Your job is to simulate real-world attacks with tools of your choice (Burp Suite, OWASP ZAP, manual source review, custom exploit scripts—whatever gets the most reliable results) and then document each vulnerability with a clear proof-of-concept, reproducible steps, severity rating, and a practical fix I can hand straight to my developer. Deliverables &b...

I recently replaced my phone and lost the Microsoft Authenticator configuration that protects my Outlook email account. Since the app was my only two-factor method, I’m now locked out. I need someone who knows the ins and outs of Microsoft Authenticator, Outlook sign-in security, and account recovery workflows to guide me through regaining full access. The focus is strictly on recovering the account, not on setting up new devices or general troubleshooting. We’ll work together in real time (screenshare or chat—whatever you recommend) to: • Navigate Microsoft’s recovery pages • Prove ownership with any backup codes or alternative verification routes that may still be available • Re-establish two-factor authentication on my new phone once ac...

I’ve just installed a residential UniFi Dream Machine Pro with Protect and I want the whole environment tightened up before it goes live. Here’s what I need: • Build a solid firewall policy from scratch—block known-bad IP ranges, close unnecessary ports, and create custom rules that fit my lifestyle • Activate and fine-tune UniFi’s Threat Management (IDS/IPS) so intrusion attempts are detected and stopped automatically. • Set up live and historic monitoring for web and email traffic, with clear dashboards and alerting inside the UniFi controller. • Check VLAN design and switch settings to be sure lateral movement is limited. • A short hand-off session so I understand how to review logs, update rules, and keep everything current. A...

We need an independent security review of a new member app (React Native / Expo) and its PHP JSON API. This is not a redesign or a feature build. The previous generation of this product had a serious incident (personal data exposed). That stack is retired. We want a review of the new app and API before a wider release. This is a small member app for people who already belong to a venue/club. It is not a marketplace, social network, or payments app. What it does today (this is the whole product): - Sign in, create account, verify email, reset password (reset is a simple web page) - 8 languages - Accept terms when they change - Home: greeting, shortcuts; optional club “home” when a club is selected - Clubs: list of linked clubs, pending/unavailable states, add a club with a co...

About the project: We are looking for an experienced **web application penetration tester** to conduct an independent security assessment of a SaaS platform. The application is a business management platform with authenticated user accounts, document handling, portals, workflows, messaging and APIs. Further details about the application and functionality will be provided to shortlisted candidates. Scope: The assessment should cover the web application and relevant APIs, including authenticated functionality. Areas of interest include: * Authentication and session management * Authorisation and access controls * Horizontal and vertical privilege escalation * IDOR / BOLA vulnerabilities * OWASP Top 10 * API security * Input validation and injection vulnerabilities * Cross-site script...

A recent scan showed a malicious code injection on one of the key pages of my custom-built PHP application, hosted on a dedicated AWS EC2 server. We cleaned the malware and found and patched the loophole. But then it came back and another loophole surfaced. I need an experienced security specialist to scan the entire server for malware and set up ongoing monitoring so this doesn’t resurface. Scope of work • Remove every trace of the current infection from both codebase and filesystem. • Audit the full stack, server configuration, and access logs to pinpoint the exact attack vector. • Patch or re-architect the vulnerable component you identify, then harden the server (SSH, firewall, file permissions, intrusion detection, etc.). • Deploy continuous monitoring and a...

I need help to uncover the identity of a cyberstalker targeting my business and me. This person has been sending harassing emails and messages, creating impersonation or fake accounts, and gaining unauthorized access to my data. Their actions are severely impacting my business, causing financial loss, damaging my reputation, disrupting operations, and inflicting mental anguish. Ideal Skills and Experience: - Expertise in cybersecurity and digital forensics - Experience with investigating online harassment and impersonation - Ability to trace unauthorized data access - Strong analytical skills to compile evidence - Knowledge of relevant laws and regulations - Prior experience working with victims of cyberstalking is a plus I'm looking for a professional who can take this seriously an...

FREELANCER MILESTONE: Global Kirtan App — Flutter Code Audit PROJECT OVERVIEW: We need an experienced Flutter developer to perform a thorough audit of our Kirtan App's source code. The project is built with Dart/Flutter and is live on Android. The review must cover platform-specific nuances, the shared Flutter codebase, and the supporting backend. --- SCOPE OF AUDIT: **1. Code Quality & Maintainability** - Structure, readability, and design patterns - State management choices and widget tree optimization - Test coverage and overall maintainability - Dependency management and library versions - Technical debt and refactoring priorities **2. Security Vulnerabilities** - Insecure storage and data handling - Improper network calls and API security ...

I’m working through a series of Information-Technology projects and need a knowledgeable tutor who can guide me specifically in Cybersecurity, with an emphasis on Network security. My current tasks involve hardening small-office networks, configuring firewalls and VPNs, and documenting the risks uncovered through vulnerability scans. I’d like you to: • Walk me through each stage of these projects in live, screen-shared sessions (Zoom or similar). • Provide short follow-up notes or annotated configs so I can review after each call. • Review my deliverables—topology diagrams, security policies, and scan reports—and flag weak spots before final submission. Our collaboration will run a few hours a week, but I’m flexible on scheduling as l...

I need an experienced Java/JSP security-minded developer to help me replace a single hyperlink on the Northern Railways site (page: ,4,385). The current link points to and must be updated to At the moment I have no server access, so the first step is a brief audit of the page structure, its deployment flow (likely Apache Tomcat on a Linux host), and the exact permissions or credentials required to make the change safely. I will supply our internal security documentation; all work must respect those protocols. Once you outline the legitimate method and confirm the level of admin or code-repository access I must secure, I’ll arrange that access. Afterward, you will implement the link swap and verify it in production. Deliverables • Technical report summarising page archit...

I need a proactive partner to keep my website fresh, error-free, and continually optimised so that more visitors turn into direct bookings. Your first focus will be content maintenance. I will send you copy, images, and video assets; you will build new pages or sections where needed, refine existing text for clarity and engagement, and upload multimedia so it loads quickly and looks great on every device. Whenever you spot outdated wording, broken links, or layout issues, go ahead and correct them without waiting for a prompt. Alongside these visible updates, I want the site quietly hardened behind the scenes. Run regular security scans, patch vulnerabilities, and fix any bugs you uncover before they affect guests. Then pour your energy into SEO aimed squarely at boosting direct boo...

Website: Php 8.1.32 Joomla! 4.4.14 Stable [ Pamoja ] 30-September-2025 16:00 GMT Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k Mysql 8.0.41 Our Joomla-based online store—which uses a custom mobile phone case configurator to process orders—has just been flagged as infected with malware. Scans indicate infections within the core Joomla files, while the configurator code remains intact as it operates independently of Joomla. Unfortunately, I do not have a recent backup to restore the site from, so it must be cleaned in place and then fully secured. Here is what I need: • A comprehensive, documented scan of the filesystem and database to isolate and remove any malicious files, scripts, or backdoors. • Restoration of all legitimate core Joomla files, followed by version u...

Dear Head/Management Team, I am writing to formally report a serious fraud/scam incident related to a project/application on Freelancer. I was contacted regarding a work opportunity and was asked to make payments in connection with the project. I have already paid ₹1,134, and I was subsequently asked for additional payments/fees. I am concerned that this may be fraudulent, especially because I have previously faced similar situations where payments were made but I did not receive the promised work/payment. I request you to urgently investigate this matter, verify the client/project and the payment requests, and take appropriate action against the concerned account if any fraudulent activity is found. Please also confirm whether I am required to make any further payment. I do not want t...

I need a clear, reproducible assessment that proves (or disproves) whether a phone number can be turned into a TikTok username and, in the process, expose personal information such as a user’s name or email. My goal is to understand the extent of this user-data exposure and verify whether the current behaviour complies with TikTok’s own privacy policy. Here’s what matters most to me: • A methodology that shows how the lookup is carried out—API calls, OSINT techniques, fuzzing or any other route you take. • Concrete evidence of what data is revealed at each step, including full request/response captures, screenshots or logs. • A comparison of your findings against the wording of TikTok’s privacy policy to highlight any non-compliance. &b...

I need to make my patient-outcomes tool for audiologists HIPAA compliant. Key areas to address: - Data transmission security - Implement encryption (TBD) Ideal skills and experience: - Expertise in HIPAA compliance - Experience with data encryption and security protocols - Familiarity with SaaS applications and data privacy regulations Please provide a detailed plan and cost estimation.