Security Auditing Jobs

Necesito un ingeniero senior que lidere la puesta en marcha de nuestro nuevo Centro de Operaciones y Seguridad. El foco principal es la implementación completa del SOC, por lo que espero que llegues con sólida experiencia integrando firewalls de nueva generación, sistemas IDS/IPS y potentes herramientas de monitoreo de red. Partirás definiendo la arquitectura – lógica y física – del centro, para después instalar y afinar cada componente hasta que todo funcione 24/7. Con el SIEM operativo, quiero dashboards y reportes claros que muestren los KPIs que acordemos. También tendrás que redactar las políticas y procedimientos de seguridad e impartir la capacitación necesaria para que mi equipo pueda operar y...

Buscamos un especialista/consultor freelance en Ciberseguridad y Pentesting para colaborar en la ejecución de auditorías técnicas de seguridad dirigidas a Pymes (entornos web, redes e infraestructura Cloud). Nosotros gestionamos la relación comercial y la integración de cumplimiento normativo (LOPD/ISO27001) para nuestros clientes en España. Buscamos un profesional técnico que ejecute las pruebas en modalidad Marca Blanca (White-Label) bajo la marca de nuestra consultora (Vortex Omnia Group). RESPONSABILIDADES DEL FREELANCE: 1. Ejecución de escaneos de vulnerabilidades perimetrales y pruebas de intrusión (Pentesting Web/Red). 2. Redacción de informe técnico detallado (vulnerabilidades encontradas, criticida...

I’m ready to invest time in practical, one-on-one guidance that demystifies how attacks really unfold and, more importantly, how to spot and stop them. My background is purely beginner, yet my responsibilities will soon include supervising an IT/security team, so I need a clear, experience-based understanding of the attacker’s mindset. Focus areas • Network security: packet sniffing, basic exploitation, lateral movement, and network-level hardening. • Social engineering: phishing set-ups, pretexting scenarios, and the defense playbook that counters them. Learning format We will work inside pre-configured virtual machines you supply, where you walk me through the build-break-fix cycle: launching a representative attack, detecting it with common tools (Wireshark...

I need a VPN setup to enable secure remote work for my employees. The VPN should be both Site-to-Site and Remote Access. Requirements: - Connects securely: Desktops, Laptops, and Servers - Standard encryption Ideal Skills and Experience: - Proven VPN setup experience - Familiarity with various encryption protocols - Ability to configure for multiple device connectivity

I want to deepen my practical understanding of cloud-focused cybersecurity and I’m looking for an experienced professional who can design and deliver a concise, hands-on training program. The emphasis is squarely on cloud security—identity and access management, data protection, threat detection, compliance mapping, and incident response workflows in modern cloud environments. Because I may shift between AWS, Azure, and Google Cloud on different projects, the material should either be provider-agnostic or flexible enough to map easily to the major platforms. Live walk-throughs, lab exercises I can replicate on my own account, and clear explanations of real-world attack paths are key. In your proposal, highlight the cloud security training or mentoring experience you alrea...

I need expertise in unauthorized control access of telecom towers for network manipulation. Key Requirements: - Skills in penetration testing and vulnerability assessment - Experience with telecom infrastructure - Proficiency in radio frequency technologies - Knowledge of security protocols and bypass techniques Please provide a detailed plan and previous experience in similar projects.

Title: Web application Penetration Testing & Security Vulnerability Assessment Category: Cybersecurity / Web Application Security Project Overview: We are looking for an experienced security professional to conduct a penetration test and standard security scan on our web application. The goal is to identify vulnerabilities, misconfigurations, and potential attack vectors before they can be exploited, and to receive a clear, actionable report of findings. Scope of Work: Full black-box / grey-box penetration testing of the website (login areas, forms, APIs, user roles, and admin panels where applicable) Standard automated vulnerability scanning (OWASP Top 10 coverage: SQL injection, XSS, CSRF, broken authentication, insecure direct object references, security misconfigurations, e...

Je souhaite renforcer la sécurité informatique de mon infrastructure en me concentrant spécifiquement sur la sécurité des systèmes. Ma priorité est la mise en place d’une solution complète de Gestion des accès et des identités (IAM). Objectif Je veux m’assurer que seuls les utilisateurs autorisés accèdent aux ressources critiques, avec des droits exactement adaptés à leurs rôles. Ce que j’attends • Analyse rapide de l’environnement actuel (serveurs Windows et/ou Linux, applications internes, annuaire existant). • Conception d’une architecture IAM adaptée : rôles, groupes, politiques de mot de passe, segmentation des privil&eg...

I an experienced penetration tester to web application. The primary objective is to identify vulnerabilities, with particular attention paid to three high-risk zones: • Authentication and authorization logic • Database exposure paths (SQL injection, insecure queries, weak configuration) • Input validation and handling that could open the door to XSS, command injection, or similar issues I will provide you with staging and live URLs, test accounts, and any required API keys. Please treat the exercise as a real-world black/grey-box engagement—no source code will be shared. You may use industry-standard tooling such as Burp Suite, OWASP ZAP, sqlmap, or custom scripts as you see fit, as long as methodology aligns with the OWASP Testing Guide.

Limozly is a multi-tenant B2B SaaS platform for limousine and black car operators. It is built, deployed, and substantially complete: seven portals, roughly 650 routes, a working booking and dispatch engine, CRM, pricing, settlements, and a public API. We are looking for one experienced developer to take it from substantially complete to verified and launched. This is a finishing and hardening role, not a rebuild. Someone who enjoys greenfield architecture will be bored. Someone who takes satisfaction in closing the last fifteen percent properly will do well. What you would be working on Stack. 14 (App Router), TypeScript, Tailwind, Prisma, Supabase (Postgres, Auth, Storage), Stripe Connect, SendGrid, Twilio, Google Maps Platform, Vercel. Domain. Each customer is a limousine operator runn...

I need a thorough, external-facing penetration test focused on my network infrastructure. The environment is small—fewer than 50 devices—and the critical assets are the servers that host internal services and data. No web or mobile application testing is required; this engagement is strictly about identifying and safely exploiting weaknesses on the network layer. Here is what I expect from you: • A concise test plan outlining scope, methodology, and tooling before any scanning begins. • Active reconnaissance and exploitation against the server segment, using industry-standard tools such as Nmap, Nessus/OpenVAS, Metasploit or similar. • A clear, prioritized vulnerability report that includes technical details, business impact, and actionable remediation step...

My on-premise accounting application now needs to live on Microsoft Azure. The database will stay where it is for the moment, so the immediate focus is lifting the application layer, cloud-ready refactoring if required, and wiring everything up so users experience the same—or better—reliability as today. What I need you to handle end-to-end: • Detailed migration plan that maps current application components to Azure services such as App Service, Azure Functions, or containers—whichever best sustains reliability. • Execution of the move with minimal downtime, including configuration of staging slots and rollback strategy. • Post-deployment hardening: regular security audits scheduled through Azure Security Center (encryption at rest or MFA can remain o...

I need a reliable WordPress specialist to keep my site healthy and running smoothly on a quarterly basis. The immediate focus is on routine security updates and staying on top of general plugin updates, with special attention to the existing security plugin and an image-optimization tool that helps keep media lean. Two issues require prompt resolution: 1. Slow-loading pages that are hurting user experience and SEO. 2. Intermittent error messages that appear on a few key pages. Your work will involve: • Applying the latest WordPress core, theme, and plugin updates without breaking existing functionality. • Auditing and tightening security settings, particularly within the current security plugin. • Optimizing performance—caching, image compression, or other best-p...

I want a teacher for me who can teach me ethical hacking from start to end . Daily 1 hrs class via the online mode . Most importantly at the cheapest price from start to end . I will participate in ethical hacking competitions so you have to train me for that . If he will be an indian then perfect it would be best for me

I need an experienced security professional to bring our organisation fully in line with GDPR, HIPAA and CCPA. My immediate priorities are strengthening data-encryption practices, tightening access controls and formalising an incident-response process. The end goal is clear: demonstrable, audit-ready compliance. Current status • A mix of on-prem and cloud workloads (M365, AWS) with basic policies in place. • No formal gap analysis, limited documentation, and no rehearsed breach-response run-book. What I’m expecting from you 1. Conduct a comprehensive compliance gap assessment across our systems and third-party services. 2. Design and, where possible, implement technical controls for encryption at rest/in transit, role-based access and log monitoring. 3. Draft or...

I’m looking for a cybersecurity specialist who can zero-in on data protection, specifically the customer information our business holds. My main priorities are: • Assessing how and where customer data is collected, stored, and transmitted across our systems • Identifying current vulnerabilities or gaps in encryption, access control, and retention practices • Recommending and helping implement concrete safeguards—whether that means stronger database encryption, revised access policies, or automated monitoring and alerting • Delivering clear, step-by-step documentation so my team can keep everything compliant after your engagement ends Please outline the tools and frameworks you typically rely on (e.g., ISO 27001 controls, NIST CSF, OWASP, Splunk, SIEM...

I need an experienced ethical hacker to conduct thorough penetration testing on my mobile applications. The sole focus of this engagement is to simulate real-world attacks, uncover security flaws, and document practical remediation steps. Scope of work • Plan and execute a full penetration test tailored to mobile environments—covering authentication, data storage, API calls, transport security, reverse engineering, and runtime manipulation. • Use industry-standard methodologies such as the OWASP Mobile Security Testing Guide and well-known tools (e.g., Burp Suite, Frida, MobSF, Wireshark, Kali). • Provide a clear, reproducible report that ranks vulnerabilities by severity, explains exploitation paths, and recommends fixes that developers can act on immediately...

My site is already on Cloudflare, but the security section is still at its default settings. The immediate priority is to turn on and correctly tune Cloudflare’s DDoS protection so it works 24/7 without affecting legitimate traffic. Key tasks I need completed: • Enable and verify Cloudflare’s DDoS protection on the zone • Set sensible sensitivity levels and rate-limiting thresholds for both Layer 3/4 and Layer 7 attacks • Create at least one custom Firewall Rule to block obvious malicious patterns while allowing normal visitors and known search-engine bots • Produce a brief hand-off document outlining the settings changed, why they were chosen, and how to monitor the dashboard going forward I already have full access to the Cloudflare dashboard...

I need a thorough network-level penetration test carried out entirely with Kali Linux. The goal is to identify and validate every exploitable weakness on my production subnet, show me clear proof-of-concept for each finding, and give me a remediation-focused report I can hand straight to my infrastructure team. You will work from your own Kali box—feel free to lean on Nmap, Metasploit, Wireshark, or any other native toolkit you trust—as long as the methods remain ethical and fully documented. Scope is limited to the IP range I supply once we start; no social-engineering or physical testing is required. Deliverables • Executive summary written for non-technical leadership • Detailed technical report listing vulnerabilities, risk ratings, step-by-step reproduction, ...