Penetration Testing Jobs

I need a focused penetration test against one of my applications. The engagement is limited strictly to the application layer—no network or infrastructure testing—so I expect you to probe for the kinds of issues highlighted in the OWASP Top 10 and similar standards. Here’s how I picture the engagement: • Pre-engagement call to confirm scope, test window, and rules of engagement • Hands-on testing that blends automated scans (Burp Suite, OWASP ZAP, or your preferred tools) with manual verification and exploitation where safe • A concise yet comprehensive report that includes an executive summary, risk ratings (CVSS v3 or equivalent), step-by-step reproduction, screenshots or PoC scripts, and clear remediation guidance • An optional debrief sessi...

We are seeking a highly skilled, discreet, and expert Cyber Security Specialist / Internal Systems Auditor to monitor platform integrity, investigate staff activities, and ensure strict compliance with company policies. The ideal candidate will operate quietly to identify system abuses, fraudulent activities, and policy violations. Key Responsibilities Audit & Investigation: Actively monitor and investigate the activities of all staff members (from new hires to 20+ year veterans). Threat & Error Detection: Identify system errors, duplicate accounts, fake profiles, and malicious actors within the network. Account Actions: Permanently block and suspend accounts involved in unauthorized activities, including casino/gambling operations, harmful political agendas, or toxic/aggressive...

I’m looking to engage an experienced ethical-hacking professional who can quickly assess my organisation’s overall security posture and recommend—or perform—the most appropriate next steps. Because I haven’t yet narrowed the scope to a single service, I’m open to anything from a thorough penetration test and security audit to incident-response planning and ongoing threat monitoring. You’ll begin with a discovery call to clarify the current environment, critical assets, compliance requirements, and any known pain points. From there, I expect you to outline a concise plan of action, including milestones, reporting cadence, and the specific toolsets you intend to use (e.g., Metasploit, Burp Suite, Nessus, Wireshark or equivalents). Key deliverab...

Our organisation’s digital footprint has outgrown the piecemeal protections we put in place over the past few years, so it is time for a coordinated security overhaul. I want a seasoned cyber-security professional to look holistically at our environment, uncover weak points, and help us close them before they become incidents. Scope • Full audit of the current estate—on-prem servers, cloud services, publicly facing web components, internal network segments, and any API endpoints. • Clear, prioritised report of vulnerabilities with risk ratings and practical remediation steps. • Hands-on implementation or guidance for fixes (patching, hardening, access-control tweaks, WAF rules, etc.), followed by verification testing to confirm each issue is resolved. &b...

I need discreet, technically-skilled help to gain access to my own website so I can correct a few pieces of text that were published without final approval. The current host is unresponsive and I have full ownership of the domain and its content; moreover it is very secured website The job is limited to text updates only—no images, video or structural changes—so once you are in, your task is simply to replace the incorrect copy with the wording I provide, verify the change is live, and keep a brief log of what you did for future reference. The exact pages will be shared after NDA, but think of typical public-facing areas such as the home page and a couple of inner pages. I value a clean, ethical approach: minimum disruption to uptime, zero impact on user data, and full tran...

Our internal security team needs an external, red-team style penetration test focused exclusively on the network infrastructure. I want you to simulate real-world attacks against three key components—our firewalls, routers & switches, and enterprise-grade wireless networks—to see how quickly and effectively our blue team detects, contains, and responds. Scope • Engage the perimeter and internal segments behind our firewalls. • Enumerate and exploit misconfigurations on Cisco-class routers and layer-3 switches. • Probe the corporate and guest Wi-Fi environments, including roaming vulnerabilities and weak encryption scenarios. Primary objective The engagement is not just about finding vulnerabilities; the bigger aim is to pressure-test our incident-re...

Title: Android APK Security Tester / VAPT Expert Required Hume apne Android application ka authorized security audit karwana hai. Hume ek experienced Android security tester chahiye jo APK, APIs aur backend communication ko test karke security vulnerabilities identify kare aur unke practical fixes bataye. Work Scope: - APK static aur dynamic security analysis - Authentication aur session security testing - API security testing - SQL Injection, IDOR, XSS aur access-control testing - SSL/TLS aur certificate pinning review - Sensitive data storage aur data leakage check - APK decompilation, code obfuscation aur tampering protection review - Root detection, emulator detection aur anti-debugging review - Hardcoded API keys, URLs, credentials aur secrets check - Firebase, WebView, permissions...

I want a thorough, professional security check on two devices—one Android and one iPhone. I have seen unexpected apps or activities, rapid battery drain, and the occasional suspicious pop-up, so I need to confirm whether either handset has been compromised and, if so, understand exactly how to fix it. I have never sideloaded software outside the official stores, but I still want everything verified. Your task is to run a full forensic-level audit: scan for malware or spyware, inspect system logs for unauthorized access, review current privacy and security settings, and highlight every vulnerability you uncover. Please work only under my explicit authorization and within all legal boundaries. Deliverables • A clear, step-by-step report explaining findings for both devices &bu...

I’m ready to move my career into cybersecurity, specifically application security, and I’m looking for a mentor who can guide me step-by-step. My goal is to understand secure coding practices, common web and mobile vulnerabilities, and the tools we use to detect and remediate them—everything from static analysis scanners to OWASP testing methodologies. Because I learn best through conversation and immediate feedback, I’d like live, one-on-one sessions, ideally once or twice a week, with practical homework in between. I already have a solid general IT background, so you can dive straight into topics such as threat modeling, secure SDLC integration, and real-world vulnerability triage. Deliverables I’d like to see: • A personalized learning roadmap ...