Web Security Jobs

My site is being held back by several technical SEO issues that I’d like resolved quickly and cleanly. I need someone to dive into the back-end, identify what is slowing our organic performance, and implement the fixes..

正文： 做外贸的朋友，如果碰到客户要求走S2S、KTT或者涉及MT103这类付款方式，自己又没有渠道对接的，可以私信我。 我这边有跨境结算渠道，可以处理这类付款方式的对接和协调。不收前期费用，成不成看具体业务。 有需要的站内私信，或者留个联系方式，我加你。 1 Title: Seeking Elite Cybersecurity Expert – Verifiable Track Record Required Description: We are looking for a top-tier cybersecurity expert for a potential long-term collaboration. Who we are looking for: · Advanced expertise in cybersecurity, penetration testing, or security research · Must be able to provide verifiable case examples, such as: · CVE numbers or published vulnerability research · Bug bounty platform records (HackerOne, Bugcrowd, etc.) · Security conference talks or published technical write-ups · Red team / penetration testing engagements with verifiable references · Relevant...

I need an expert to optimize my WordPress site, focusing on MariaDB and PHP-FPM. Key areas include: - Optimize MariaDB: Query performance, configuration settings, and indexing strategies. - Improve PHP-FPM worker efficiency. - Additional optimization as needed Ideal skills and experience: - Strong background in WordPress and database optimization. - Expertise in MariaDB and PHP-FPM. - Proven track record of improving site performance. Please share your relevant experience and approach.

I’m looking for a developer who can turn the concept of a lightweight, real-time WordPress security plugin into a clean, production-ready deliverable. The core job is to capture every login event—successful and failed—together with IP address, username, timestamp, and basic browser details, then respond intelligently when things look suspicious. Real-time monitoring is essential. As soon as a single IP crosses a configurable threshold of failed attempts, the plugin should place that IP on a temporary block list. The rule is simple: only the number of failed login attempts matters; no frequency calculations are required beyond that. I still need genuine users to reach the site, so the block must expire automatically after a set window and the logic must handle proxy or sh...

I need an accelerator blocker to prevent unauthorized use of my vehicle. This anti-theft device should be activated and deactivated via a remote control. Key Requirements: - Function: Block accelerator to prevent unauthorized use - Activation/Deactivation: Remote control Ideal Skills and Experience: - Experience in developing vehicle security systems - Knowledge of remote control integration - Expertise in electronic engineering - Background in anti-theft device design and implementation Please provide examples of similar work and ensure the solution is reliable and secure.

We are launching a new web application. It is to help hosts manage events. It is a small application (first release) with a form for host to create, share the link, allowing guests to respond. Also there are email notifications. The requirements are not explicitly specified. Tester will have to understand the functionality and test. There is a SQL server backend application, hosted on Godaddy. Tester must test for security risks, vulnerability, unauthorised access, encryption, confidentiality, leakages, cyber security / penetration. Tester will also have to find out issues with coding standards, cookies, encryption in data exchange to ensure that plain data is not saved or transferred. The application is mobile/desktop/devices compatible. And needs to be tested on those. Tester will ...

Developer Requirements — Fan-to-Celebrity Gift Web App (Version 1) 1. Project Goal Build a fully functional, production-ready Web App, not a demo/prototype. The platform will allow fans to send/request physical gifts to celebrities, actors, influencers and creators while protecting their private addresses. Version 1 will use one central collection/processing station in Delhi, existing courier/postal services, and no own courier fleet. Android/iOS apps are not included in V1, but the architecture must support a future Android app using the same backend/API/database. 2. User Roles 1. Fan 2. Celebrity / Influencer / Creator 3. Admin Each role requires secure login, dashboard and role-based permissions. 3. Fan Features - Account creation and mandatory identity verification - Cele...

I want to create a professional mock client project for my cybersecurity portfolio. The project should represent the type of Web Application Security Assessment service I plan to offer on freelance platforms such as Upwork, Freelancer, Mostaql, and Khamsat. Project Title: Web Application Security Assessment & Vulnerability Report Project Description: Create a realistic, professional cybersecurity assessment project for an authorized web application in a legal training environment. The goal is to simulate a real client requesting a security assessment of their web application. The project should demonstrate practical skills in web security testing, vulnerability identification, documentation, and professional reporting. Requirements: * Use Burp Suite and Nmap for security testing. ...

Please Sign Up or Login to see details.

My sign-up page needs a simple, text-based CAPTCHA so I can verify real people before an account is created. The task is to drop a lightweight challenge into the existing registration form, handle server-side validation, and keep the visual style consistent with the site’s current CSS. You may choose any reliable approach—an open-source library such as reCAPTCHA v2/v3 or a small custom word-image generator—so long as it blocks automated scripts without frustrating genuine users. Please work directly in the current stack (PHP and vanilla JavaScript) on the staging server I’ll provide. Make sure error messaging is clear, accessibility is considered, and the normal registration flow still completes smoothly once the code is in place. Deliverables: • Fully integ...

I need an experienced full-stack developer to add secure role-based access control to my existing, fully functional website. The site has about 10 sections, including Shop, Podcast, Bookshop, News/Blog, Catering, and others. Each staff member should only have access to the section(s) they are hired to work on, while Owner, Admin, Privacy, financial, and other restricted areas remain protected. Access must be secured at the backend level so restrictions cannot be bypassed through direct URLs or other methods. Unauthorized access should be blocked. The website already has a login/sign-in system. I want to add professional moving visuals and animations to the existing sign-in/welcome areas to create a smooth and professional transition after login. The website is already working properly....

I need a skilled developer to fix identified bugs/security vulnerabilities in a web application built on the Lovable, Supabase, and Vercel stack. Key Requirements: - Review & finalise the draft remediation plan (based on audit report). - Apply remediation plan in strict severity order, using Claude Code to author fixes. Close confirmed findings in strict severity order, each in its own PR, each verified end-to-end against the protected environments - Validate all diffs against a written checklist, verify by re-exploitation - Ensure the application runs smoothly post-remediation. Ideal Skills: - Proficiency in Lovable, Supabase, and Vercel. - Strong background in web application security. - Excellent problem-solving skills and attention to detail. Looking for an experienced p...

I have a small web-based application that needs its security posture checked right away. The goal is to build an automated suite that performs penetration-style tests each time the app is deployed, flagging anything that could be exploited before it reaches production. Scope – The work is limited to security testing; I do not need functional or performance checks at this stage. – Within security, the emphasis is on penetration testing methods: automated discovery of common weaknesses (SQLi, XSS, auth bypass, misconfigurations) and clear proof-of-concept steps. Tech expectations Python with Selenium, Playwright, or a comparable headless browser tool is fine, and I’m open to OWASP ZAP or similar APIs if that speeds things up. Please wire the tests so they can be tri...

My WordPress site has been offline for about 15 days, and I suspect it was hacked. Restoring the website is my highest priority, followed by getting business email working again and fixing lingering Google-indexing problems. I’m not sure whether I still have hosting-panel access, so part of this job is to confirm what entry points are available and secure them. I need a seasoned WordPress security specialist who can: 1. Perform a full technical audit to identify the root cause of the outage and any compromise. 2. Produce an immediate action plan that: • Restores site functionality and data integrity. • Re-establishes reliable email delivery. • Outlines next steps for proper Google indexing. 3. Patch vulnerabilities, harden the server, and apply best-prac...

My home network needs a thorough security overhaul focused on cybersecurity and data protection. I’m looking to tighten every layer—router configuration, firewall rules, Wi-Fi encryption, secure remote access, and reliable backup strategies—so that every device in the house stays protected without slowing anything down. Here’s what I expect from your work: • Assess the current home-grade modem/router and recommend or apply best-practice hardening. • Set up WPA3 (or strongest available) Wi-Fi security, strong passwords, and guest isolation. • Implement endpoint protection on laptops, phones, tablets, and any IoT gear. • Configure automatic, encrypted backups to local NAS or trusted cloud storage. • Provide a concise hand-off document...

I have between one and five client websites that were taken offline after invoices went unpaid. I still hold full access to each original hosting account and the domains remain under our reseller umbrella, but there are no usable backups on record. Your mission is to locate viable copies of every site—whether that means scraping Internet archives, recovering server remnants, or using any other ethical method—then restore each one to its original domain and get it functioning again. Because I can no longer reach the previous developers, you’ll need to deal directly with the current hosting providers and registrars whenever DNS, SSL, or file-level intervention is required. The republishing process should leave every site publicly accessible, loading quickly, and displaying...

EXPERIENCED ADULT DIRECTORY PLATFORM DEVELOPMENT TEAM We are looking for an experienced development team to build a modern adult/escort directory platform targeting Bursa, Turkey. This is a SOFTWARE DEVELOPMENT project requiring strong experience with directory/listing platforms, custom administration systems, scalable architecture, performance, security and technical/local SEO. Previous experience with adult-industry or comparable complex directory platforms is strongly preferred. PROJECT The platform will be developed from scratch and launch with approximately 200–300 listings, with architecture designed for future growth. We have a legacy PHP platform/archive containing important functionality and business workflows. It is REFERENCE ONLY and will be shared privately with sho...

My site is dragging its feet and Google PageSpeed Insights confirms it. Loading feels heavy on the home page, all service-detail pages and even the contact page, and every extra second is costing me both visitors and search-engine traction. I’m looking for someone who can dig into the code, hosting setup and assets, remove the bottlenecks and leave the site lean enough to score markedly higher on PageSpeed while respecting Core Web Vitals and general SEO best practices. Key results I want to see: • Sub-2-second first load on the three page types mentioned above. • Green scores on PageSpeed Insights for both mobile and desktop. • No visual regressions or broken functionality after the optimisations. Please plan to deliver a short before/after report from Pag...

Kastle Media is hiring a freelance WordPress developer to build a new client website using our existing Kastle Core custom WordPress theme and our approved schema plugin. This is a custom-code WordPress build. It is not a page-builder project. The successful freelancer will work within the existing Kastle Core architecture and build a new, client-specific website from scratch. Each client has its own design, content, brand identity, page layouts, and CSS. Do not copy page templates, CSS, HTML, components, or visual styling from another Kastle client website unless a specific technical pattern has been approved for reuse. AI-assisted development is acceptable. The final output must be clean, maintainable, accessible, responsive, secure, documented, and production-ready. Build in WordPress u...

I want to learn how to fix a real infected website. You will need to provide the infected website. Controlled environment is ok but continued work may be given if you provide real infected websites over a controlled environment. PHP based systems like laravel and Wordpress preferred. In your response give an example of an infected website you fixed, explain the situation. I only need an hour of your time for now but if I like your work I may give you more work. Preference will be given to real natural responses to this ad over AI responses.

MICROSOFT SECURITY ANALYST & SECURITY ENGINEER PRACTICAL PROGRAM We are looking for an experienced Microsoft Security Analyst / Security Engineer to serve as a technical instructor for a practical Microsoft Security training programme. LANGUAGE REQUIRE REQUIREMENT: FLUENCY IN ENGLISH Excellent Communication is Require. Our target students are IT Support professionals, system administrators, network engineers, and individuals with general IT/technical knowledge who want to transition into Microsoft Security Operations and Security Engineering. TRAINING OBJECTIVE The objective is to transform participants from general IT/technical roles into practitioners who can identify, investigate, analyse, recommend remediation, implement security controls, verify remediation, and document M...

Job Title: Cybersecurity & Digital Forensics Expert Job Type: Contract Location: Remote Experience: 5+ years Job Description We are looking for an experienced Cybersecurity & Digital Forensics Expert to investigate cyber incidents, identify suspicious activities, trace network activity, and support authorized investigations involving compromised systems, accounts, and devices. The ideal candidate should have strong hands-on experience in ethical hacking, penetration testing, digital forensics, OSINT, network security, IP analysis, and incident response. Key Responsibilities Investigate cybersecurity incidents, unauthorized access, suspicious accounts, and potential security breaches. Perform IP address analysis and authorized IP geolocation to determine the approximate geograp...

I’m building a fully-featured fintech website and need an experienced developer to take it from concept to production. The platform must let end-users create an account, sign in with a traditional email-and-password flow, and then manage their finances through an elegant, mobile-responsive interface. Core modules will include user authentication, personalised dashboards, payment or transaction handling, rich data visualisations, and a lightweight admin panel. Strong application-level security (OWASP best practices, encrypted credentials, rate limiting) is mandatory, as is fast performance on both desktop and mobile. My preferred stack is React or on the front end, backed by Node.js or Python services that talk to a PostgreSQL database and external payment/banking APIs. I inten...

Senior Technical Auditor for I am looking for an experienced senior full-stack technical auditor to conduct an independent review of an existing bilingual Saudi offers and loyalty platform called Chance Plus. The platform is currently live and deployed in production. This is not a new development project and I am not requesting a rebuild. The initial task is strictly to review, test and report on the existing implementation before onboarding the first real store. Technology stack: TypeScript React and Vite Node.js and Express PostgreSQL Drizzle ORM and database migrations REST APIs and OpenAPI Progressive Web App (PWA) GitHub, pull requests and CI/CD DigitalOcean App Platform and Managed PostgreSQL Arabic and English interfaces, including RTL support Platform structure: Custo...

Looking for a certified and experienced cybersecurity professional or security testing company to conduct VAPT (Vulnerability Assessment and Penetration Testing) for a web application and its APIs. Only applicants with proven VAPT experience and relevant cybersecurity certifications will be considered. Scope Web Application VAPT REST API VAPT WebSocket API VAPT Grey-box testing Multiple user roles Approximately 20 API endpoints Requirements Proven experience conducting professional VAPT for web applications and APIs Relevant industry-recognized cybersecurity certifications Strong knowledge of OWASP and modern web/API security Ability to provide a professional, detailed VAPT report Previous VAPT experience and sample/redacted reports preferred Deliverables Comprehensive VAPT report Vuln...

Project description: A modern, professional and user-friendly digital platform designed to bring professionals, businesses and opportunities together in one place. It will include professional profiles, networking, job opportunities, business connections, messaging, service listings, project opportunities, reviews, verification features, notifications and secure communication. The platform will focus on a clean premium design, smooth navigation, strong performance, scalability and an excellent experience across mobile and web.

Google/Gmail Account Recovery Assistance Needed I need help recovering access to an old Google/Gmail account that belongs to us. We currently have: the exact Gmail address; the last known password that was used on the account; some knowledge of the account's previous usage/history. We no longer have: access to the old recovery phone number; access to a recovery email; access to previously trusted/logged-in devices. I am looking for someone who has real experience with Google Account Recovery, especially difficult cases where the recovery phone/email and trusted devices are no longer available. I need someone who can: Review the current situation and determine what legitimate recovery options may still be available. Guide us through Google's official account recovery proce...

I need a thorough security assessment of both our public-facing web applications and the underlying network infrastructure. For the web layer, your testing must zero-in on two critical areas—Authentication & Authorization and Input Validation—so we can be confident that user identities are protected and no injection or validation bypass is possible. On the network side, I’m looking for the classic internal and external penetration workflow: reconnaissance, vulnerability discovery, exploitation, and clear remediation guidance. Deliverables • Executive summary that highlights overall posture and business risk • Technical report detailing: – Findings for Authentication & Authorization – Findings for Input Validation – Networ...

I’m preparing to run a large-group session on Zoom and need a live, practical walk-through of everything an large meeting can (and cannot) do. During a real-time screen-share, guide me step by step so I can click along with you and build the muscle memory. My priorities are understanding how to manage participants smoothly—assigning co-hosts, controlling entry, and fine-tuning security and engagement tools—plus unlocking the more advanced features that make a big gathering feel effortless. I also want to make sure all the critical settings are configured correctly both before we go live and while the meeting is in progress. If you know Zoom inside out and enjoy teaching hands-on, let’s schedule a session that leaves me confident, organized, and ready to host w...

My Linux-based web server has been hit with malicious, unfamiliar files and scripts. I need a system administrator who can track every infection, remove it completely, and then perform a fresh installation and configuration of Imunify360 so the machine is once again hardened and monitored in real time. cPanel is available, SSH access can be granted, and downtime must be kept to a minimum while you work. Key deliverables: • Full scan, isolation, and removal of every malicious file or script • Fresh Imunify360 install with optimal settings, automatic updates, and firewall enabled • Brief post-cleanup report detailing what was found, what was removed, and confirmation that Imunify360 is active and passing its own self-check I’ll be on hand for quick credential e...