Web Security Jobs

I need a Wazuh developer who can connect different syslogs/Api to our Wazuh application and help us construct the dashboard to view important security information

I’m ready to move my career into cybersecurity, specifically application security, and I’m looking for a mentor who can guide me step-by-step. My goal is to understand secure coding practices, common web and mobile vulnerabilities, and the tools we use to detect and remediate them—everything from static analysis scanners to OWASP testing methodologies. Because I learn best through conversation and immediate feedback, I’d like live, one-on-one sessions, ideally once or twice a week, with practical homework in between. I already have a solid general IT background, so you can dive straight into topics such as threat modeling, secure SDLC integration, and real-world vulnerability triage. Deliverables I’d like to see: • A personalized learning roadmap ...

I’m looking to have my personal portfolio site built to the same standard I expect from the enterprise products I oversee. The public-facing portion will be a concise 3–4 page experience presented in a professional, corporate aesthetic with a touch of tasteful interactivity—subtle hover effects, smooth section transitions, no flashy animations that distract. Public pages • About Me • Skills & Areas of Expertise • Experience (role highlights only; no employer names) Secure knowledge hub Beyond the public pages I need a gated area that sits behind a login screen. Registered users (each with their own credentials) will gain access to: • Blog articles I publish • Slide decks / presentations (PDF or embedded) • A growing knowledg...

I am looking for a freelancer to develop a solution to bypass Cloudflare's 1015 error (rate limit exceeded). The task involves setting up auto-rotating proxies or any relevant system to effectively handle the issue. Ideal candidates should have experience with proxy systems, rate limit bypassing, and Cloudflare configurations.

Web App & API Vulnerability Research I would like to assess your Web Application and API for security vulnerabilities that could affect your platform or its users, either now or in the future. The fixed pricing can be discussed later, as it will depend on the severity and impact of any vulnerabilities discovered. Critical vulnerabilities may require more effort than minor issues. Regardless of the findings, I aim to keep my pricing fair, affordable, and competitive. Best regards

I need an experienced cyber-security specialist to perform a fully authorized penetration test on our corporate website. Your task is to breach the system’s defences under controlled conditions, document every step, and securely extract the specific “kết quả” data set I will identify once we start. Scope • Map the site’s attack surface, exploit viable vulnerabilities, and demonstrate a complete, reproducible path to the target data. • Keep all actions inside the agreed-upon boundaries of the corporate domain; no neighbouring infrastructure should be touched. • Provide a comprehensive report that includes exploited vectors, privilege-escalation methods, recommended remediations, and the successfully retrieved data in an encrypted archive. A...

My Gmail account was recently compromised and I’ve been locked out ever since. I already completed Google’s account recovery form, but the automated process has not restored my access. Time is critical and I need someone who knows the ins-and-outs of Google’s security workflow—device verification, backup codes, and support escalation—to get me back in as soon as possible. What I expect from you • Regain full, secure access to the account (inbox, Drive, and linked services). • Remove any unauthorized sessions or forwarding rules the attacker may have set. • Reinforce security with a fresh, strong password and two-factor authentication. • Provide a concise set of instructions so I can keep the account—and connected devices&mdas...

My WordPress website was hacked. My hosting provider did not run any malware/antivirus scans and did not keep WordPress core or plugins updated. Rather than cleaning or recovering the site, they took it offline, zipped the files, and sent them to me. The domain is no longer active. I now have a ZIP file (approximately 19GB) containing what I believe are my WordPress site files, but I have no way to unzip, inspect, or recover the content on my own. File access: Given the size, I cannot attach this file directly on Guru. I will share a private cloud storage download link (Google Drive or Dropbox) with the freelancer I hire — please do not ask for the file to be attached publicly, since it may still contain compromised/malicious code from the original hack. Please confirm you have...

My Facebook page was recently compromised and I can no longer log in. I normally sign in with my phone number, but when I attempt the standard recovery flow Facebook never sends the verification code, so I’m stuck at the first hurdle. I need someone who already knows the current Facebook Business & Support workflows, appeal forms, and identity-verification tricks that actually work in 2024. The goal is simple: get me back in as the rightful admin and lock the intruder out for good. Key deliverables: • Regain full admin access to the page and linked profile • Remove any unauthorized users or apps the hacker added • Configure safer recovery options (new phone, trusted contacts, 2-factor) • Provide a brief, plain-English summary of the steps you too...

I need assistance setting up a VPN and a Windows-based file server, along with creating an information security plan. Key Tasks: - VPN Setup: Configure VPN server and client, and manage user access control. - File Server Setup: Set up a Windows file server. - Security Plan: Develop a robust information security plan. Ideal Skills: - Experience with VPN and Windows file servers. - Strong knowledge in information security. - Familiarity with user access control and configuration tasks.

I need a fully-functioning staging environment for my website built inside AWS. The goal is to let me test new features safely before they ever reach production, so the staging copy must mirror the live site in look, performance, and basic integrations. Here’s what I expect: • A separate AWS account or clearly isolated VPC that will not interfere with production resources. • Clean deployment of the site’s codebase and assets to that new environment. I’m open to EC2, S3, a managed database, or any combination you recommend, as long as the final result matches the live site’s behaviour. • Best-practice security (private key access, least-privilege IAM roles, HTTPS). • A straightforward way for me to push updates to staging—Git-based ...

I’m ready to move my career into cybersecurity, specifically application security, and I’m looking for a mentor who can guide me step-by-step. My goal is to understand secure coding practices, common web and mobile vulnerabilities, and the tools we use to detect and remediate them—everything from static analysis scanners to OWASP testing methodologies. Because I learn best through conversation and immediate feedback, I’d like live, one-on-one sessions, ideally once or twice a week, with practical homework in between. I already have a solid general IT background, so you can dive straight into topics such as threat modeling, secure SDLC integration, and real-world vulnerability triage. Deliverables I’d like to see: • A personalized learning roadmap ...

More details: What is the primary goal of the POSH awareness website? Educate employees What type of educational content do you want to include? Interactive quizzes Do you need the interactive quizzes to provide instant feedback on answers? Yes

We are looking for an experienced cybersecurity expert to perform a comprehensive security assessment of our Python-based web application and infrastructure. Project Scope - Conduct a complete security audit of our application. - Identify vulnerabilities in the web application, APIs, database, and server. - Perform penetration testing and vulnerability assessment. - Review the application against the OWASP Top 10. - Analyze authentication, authorisation, session management, and input validation. - Review API security and identify potential attack vectors. - Assess SQL injection, XSS, CSRF, SSRF, IDOR, file upload, and other common vulnerabilities. -Review Linux server configuration and security hardening. - Assess cloud security configuration (if applicable). - Review source code for sec...

My team needs immediate, reliable help keeping our office PCs running smoothly. The first priorities are: • Windows installation with the right drivers and essential software • Network troubleshooting, including Wi-Fi configuration and printer/scanner connectivity • Remote desktop support alongside hands-on hardware diagnostics and repairs Once those are stable, I’ll also count on you for Microsoft Office and email setups, PC performance tuning, virus and malware removal, and light LAN/WAN checks whenever they crop up. I can arrange both on-site visits in our workspace and secure remote sessions, so flexibility is important. What matters most is fast, professional resolution with clear status updates—ideally problems are diagnosed and fixed in the same s...

I need a forensic expert to analyze network traffic for suspicious activity, with a focus on compromised web data. Key Tasks: - Monitor and analyze network traffic, both internal and external. - Identify and investigate indicators of compromise, particularly web data breaches. - Provide detailed reports on findings and recommendations for securing vulnerabilities. Ideal Skills and Experience: - Expertise in network forensics tools (e.g., Wireshark, Snort). - Strong understanding of web protocols and traffic patterns. - Experience in identifying and mitigating security threats. - Ability to produce clear, actionable reports. Looking for a professional who can help enhance our security posture. Loooking to have a background in iPhone and cell security.

I’ve just finished a manual sweep of my WordPress installation and uncovered several hidden phishing pages. The job is straightforward but critical: locate every phishing file or URL on the server, remove or neutralise them without disturbing legitimate content, and explain the infection path so I can prevent a repeat. The site runs the latest public WordPress core, but themes and a few plugins may be outdated. I have full cPanel, FTP/SFTP, and phpMyAdmin access ready as soon as we agree on the approach. Feel free to use tools such as Wordfence, Sucuri, WP-CLI, or your own scripts—whatever lets you trace all malicious payloads quickly and thoroughly. Deliverables: • Complete removal of every phishing page and any related malicious code. • Documentation outlining wha...

My esports tournament platform needs a thorough penetration test completed within four days. The stack combines a Supabase/PostgreSQL back end, REST/GraphQL-based APIs, user accounts, an admin console, and a wallet that handles deposits, withdrawals, and payment-gateway traffic. Primary focus is the payment gateway and wallet layer, yet I still want every public or privileged surface probed against the full OWASP Top 10 as well as common esports-specific attack patterns. That includes: authentication and authorization flows, admin privilege escalation, API abuse, IDOR, SQLi, XSS, insecure file uploads, exposed secrets, and verification of Supabase row-level security. Attempted manipulation of balances or tournament results is welcomed if it highlights a weakness. When the engagement en...

I need a Laravel-based website that presents our organisation’s information clearly while meeting strict security standards upto 20-25 pages. The build must include end-to-end SSL/TLS encryption and a working two-factor authentication flow for all admin or sensitive entry points. Beyond those essentials, I am open to your guidance on any additional best-practice hardening you normally apply. The site itself is strictly informational—think pages such as About, Services, News, Resources and Contact—but I still want a clean CMS-like backend so our team can update text and images without touching code. We’ll decide on the exact look and feel together once we review a few mood-boards; the visual direction is still flexible. Key deliverables • Responsive Laravel ...

My team needs immediate, reliable help keeping our office PCs running smoothly. The first priorities are: • Windows installation with the right drivers and essential software • Network troubleshooting, including Wi-Fi configuration and printer/scanner connectivity • Remote desktop support alongside hands-on hardware diagnostics and repairs Once those are stable, I’ll also count on you for Microsoft Office and email setups, PC performance tuning, virus and malware removal, and light LAN/WAN checks whenever they crop up. I can arrange both on-site visits in our workspace and secure remote sessions, so flexibility is important. What matters most is fast, professional resolution with clear status updates—ideally problems are diagnosed and fixed in the same s...

I'm looking for a skilled web designer to create a professional and user-friendly website for my real estate broker platform similar to nobroker, magicbricks and 99acres, it shall have most advanced search features. Bifurcate the window into two access 1. Rent, Lease, sale Residential Buildings Commercial Buildings Commercial Land Agriculture Land Residential Land Convention Hall Resorts 2. Sale Business Transfer/Lease Job work Subcontractor Building Material Supplier Seller/landlord will upload the details of property, it will be searched by buyer with advanced features prescribed later.

My site is up, the content is set, and what I need now is reliable, hands-on management that keeps everything running fast, secure, and search-friendly. The job centres on three intertwined areas: • Routine upkeep – run core and plugin/software updates as they roll out, keep an eye on uptime, and apply any security patches before they become an issue. • Performance tuning – squeeze every millisecond you can from page-load times through caching, image optimisation, and database clean-ups. • Security vigilance – schedule regular scans, tighten configurations, and make sure automated backups are healthy. On the SEO side, my focus is strictly on-page and technical work. I want sharper keyword optimisation, cleaner URL structures, and properly written meta...

A complete security evaluation of my digital environment is required, carried out under strict ethical-hacking guidelines. The assignment covers scoping the targets with me first, launching controlled attacks to uncover real-world vulnerabilities, and then documenting every finding with proof-of-concept steps, risk ratings, and practical remediation advice. All testing must remain within the agreed boundaries and comply with legal standards. I will supply the necessary access details and any supporting documentation once we sign an NDA. The final deliverable is a concise yet comprehensive report that I can hand directly to my development and operations teams. Success is measured by: • depth and accuracy of the vulnerability coverage • clear reproduction steps for each issue...

I’m dealing with a handful of unwanted URLs that appear on Google and other major search engines whenever my name or company is searched. There are 7 negative links on the first page, all from very high authority websites (DA 80+). I’m not interested in generic reputation-building campaigns right now; my sole focus is on making those specific pieces of negative content disappear or at least become unfindable to the average user. You should already have a proven track record of successfully removing, de-indexing, or burying troublesome links—whether through direct takedown requests, DMCA filings, right-to-be-forgotten petitions, suppression techniques, or any other legitimate method that works. White-hat approaches only; I don’t want short-lived fixes that could bac...

Tarvitsen kokonaisratkaisun, jossa nykyinen ekoloiste.fi-sivusto siirretään uudelle domainille sekä sisällön että ulkoasun osalta. Samalla vanha domain ohjataan uuteen, jotta vanhat linkit toimivat saumattomasti. Toimitukseen kuuluu myös toimiva ajanvarausjärjestelmä, jossa on • kalenteri-integraatio (valittavissa esim. Google, Outlook tai muu suosittelemasi) • automaattiset muistutusviestit asiakkaille ennen varattua aikaa Minulla ei ole ennakkosuosikkia alustalle, joten valitse ratkaisu, jonka osaat toteuttaa luotettavasti ja jota pystyn jatkossa itse hallinnoimaan ilman monimutkaisia lisenssejä. Odotan, että 1. kopioit kaiken sisällön ja visuaalisen ilmeen tarkasti 2. siirrät/ohjaat vanhan domainin vi...

Despliegue de aplicación web estática en VPS con HTTPS y protección de acceso. Descripción del proyecto Busco un profesional con experiencia en administración de servidores Linux y despliegue de sitios web estáticos para publicar una aplicación ya desarrollada en un servidor privado (VPS). La aplicación ya está terminada y funcionando. No se requiere desarrollo adicional ni creación de backend en el servidor. El trabajo consiste en configurar el VPS, desplegar los archivos estáticos, configurar el dominio y HTTPS, y dejar una capa de protección para el panel de administración. Importante: entregaré una guía de despliegue paso a paso ya preparada, incluyendo el Caddyfile con la prote...