Sicherheit Jobs

My current workflow already relies on , but I’m hitting limits with its out-of-the-box functionality. The project centers on true custom feature development—expanding so it fits my exact use-case rather than forcing my process to adapt to the platform. The work starts with a quick review of the existing setup, followed by a short requirements session where we pin down what the new feature must do, how it should be accessed, and any guardrails around performance or security. From there, the task moves into design, coding, and rigorous testing inside a staging environment to be sure everything runs smoothly once promoted to production. Deliverables • Complete source code and configuration for the new feature • Clear deployment notes and end-user documentation ...

We would like to find someone who is capable of making a ticket buying bot, to PREVENT tickets from being bought from. This is a protection and defensive upwork post. We are looking to block vulnerabilities in the website. Thank you, J

Tenho hoje o ChatPion funcionando, porém preciso levá-lo a outro nível. Estou aberto a duas vias: aprimorar diretamente o ChatPion ou, caso seja tecnicamente mais simples, desenvolver um novo chatbot do zero para minhas páginas do Facebook. O que é indispensável • Envio de mensagens em massa sem limites artificiais, inclusive para várias páginas simultâneas. • Integração com outras plataformas (APIs externas, CRM, e-commerce ou o que for necessário). • Respostas automáticas mais inteligentes, capazes de entender variações de texto e entregar conteúdo personalizado. Além disso, quero um painel central onde eu consiga disparar campanhas, alterar configu...

Position: Freelance Smart Contract / Blockchain Engineer Type: Contract / Freelance Location: 100% Remote Workload: Part-time or task-based Compensation: $60–$100/hour (or fixed-price per task) About the Project We are working on DeFi smart contract components, including token implementations and protocol-level logic. Our focus is security, clarity, and real-world usability — not hype. We are building a long-term freelancer pool and looking for engineers who can deliver clean, well-structured Solidity code independently. What You’ll Do Design and implement secure smart contracts using Solidity Work with EVM-compatible chains Review and improve existing smart contract code Follow best practices for documentation, testing, and security Collaborate asynchronously wi...

I want to launch a fully-featured, cloud-hosted lottery platform built on a hardened Node.js backend with a reliable database layer. New players will sign up with a classic email-and-password flow, then complete KYC before they can fund their wallet or join a draw. The exact KYC data points can be finalised together, but the process must be seamless and compliant. Core flow • A user tops up an internal wallet via PayPal (gaming category enabled), buys entries, and watches their balance update in real time. • On draw day a server-side, provably-fair randomiser selects winners; every draw, ticket purchase, and payout is written to an immutable audit log. • From my side I need an admin dashboard that shows live player stats, transaction history, and lets me trigger or sc...

I am launching a fully-independent blockchain network and need an experienced developer who can take the project from white-paper to mainnet. The chain will run on a Proof of Work consensus, operate inside a closed environment (no external chain bridges), and issue a fiat-collateralized stablecoin that functions much like USDT but lives natively on this new ledger. Beyond the core protocol, I will also require built-in wallet support and a smart-contract layer so third-party developers can deploy dApps once the network is live. Security is paramount; every component—from key management to consensus—must be hardened against common attack vectors and accompanied by clear documentation. Key deliverables • PoW node software and full network setup (testnet + mainnet) &bul...

Security Engineer to implement advanced application-layer security improvements, session control, and structured framework upgrades. This is a higher complexity engagement involving architectural work and controlled deployment. Scope of Work 1. Concurrent Login and Session Management Design and implement controlled session management. Responsibilities Implement Redis or ElastiCache-based session tracking Develop middleware to prevent unauthorized concurrent sessions Build configurable session policies Implement detailed audit logging Ensure compatibility with mobile clients Support emergency break glass access scenarios Healthcare-aligned audit logging is required. 2. Administrative Portal Access Control (Optional VPN / Zero Trust) Secure administrative access to sensitive function...

Security Engineer to implement advanced application-layer security improvements, session control, and structured framework upgrades. This is a higher complexity engagement involving architectural work and controlled deployment. Scope of Work 1. Concurrent Login and Session Management Design and implement controlled session management. Responsibilities Implement Redis or ElastiCache-based session tracking Develop middleware to prevent unauthorized concurrent sessions Build configurable session policies Implement detailed audit logging Ensure compatibility with mobile clients Support emergency break glass access scenarios Healthcare-aligned audit logging is required. 2. Administrative Portal Access Control (Optional VPN / Zero Trust) Secure administrative access to sensitive function...

Security Engineer to implement advanced application-layer security improvements, session control, and structured framework upgrades. This is a higher complexity engagement involving architectural work and controlled deployment. Scope of Work 1. Concurrent Login and Session Management Design and implement controlled session management. Responsibilities Implement Redis or ElastiCache-based session tracking Develop middleware to prevent unauthorized concurrent sessions Build configurable session policies Implement detailed audit logging Ensure compatibility with mobile clients Support emergency break glass access scenarios Healthcare-aligned audit logging is required. 2. Administrative Portal Access Control (Optional VPN / Zero Trust) Secure administrative access to sensitive function...

Security Engineer to implement advanced application-layer security improvements, session control, and structured framework upgrades. This is a higher complexity engagement involving architectural work and controlled deployment. Scope of Work 1. Concurrent Login and Session Management Design and implement controlled session management. Responsibilities Implement Redis or ElastiCache-based session tracking Develop middleware to prevent unauthorized concurrent sessions Build configurable session policies Implement detailed audit logging Ensure compatibility with mobile clients Support emergency break glass access scenarios Healthcare-aligned audit logging is required. 2. Administrative Portal Access Control (Optional VPN / Zero Trust) Secure administrative access to sensitive function...

Busco a quien desarrolle una página web para mi negocio de sorteos en línea. La plataforma debe permitir vender números aleatorios de dos o más cifras y garantizar que cada compra asigne y registre esos números automáticamente. Requisitos funcionales • Pasarela de pago centrada en tarjeta de crédito/debito y pagos PSE • Motor que genere, distribuya y almacene números aleatorios para cada usuario. • Panel de usuario con: – Historial de transacciones visible y filtrable. – Notificaciones configurables sobre compras, ganadores y promociones. • Página pública de resultados para mostrar ganadores en tiempo real. • Sección de Términos y Condiciones accesible d...

I’m looking to turn my rupture-disc sizing spreadsheet into a secure, responsive web application. The site will sit behind a straightforward username/password gate; once signed in, users should be able to enter process parameters, hit “Calculate,” and instantly receive accurate sizing data. Those results must be downloadable as both polished PDFs and clean Excel workbooks. Security matters almost as much as accuracy. I run regular security audits, so the code needs to be structured for easy penetration testing, and every login or calculation must be written to an activity log I can review or export later. Think clear separation of concerns, meaningful commit history, and no hard-coded secrets. Specific deliverables • Full-stack application with basic credential log...

My WooCommerce-powered WordPress site already generates its own backups; what I am missing is a plugin that quietly copies those archives to a remote device of my choosing. The workflow I have in mind is simple: • Scheduling – I need to set a daily schedule with at least three runs per day, plus the freedom to change the hour, frequency, and how many archives are retained. • Source & destination paths – both must be selectable from the admin panel so I can point to the existing local backup folder and the remote target. • Secure hand-off – the connection between server and remote device will be authenticated with an API key that I provide. A second key (or the same key in a different scope) should protect the device itself. • Reliability logic ...

Project Title Custom Case Management & Workflow System for Accredited DNA Laboratory Project Overview We are an ISO 17025 accredited DNA testing laboratory in Australia seeking to develop a custom-built web-based case management and workflow system. This system will replace an 18-year-old legacy database and must reflect our current operational complexity, including: Legal DNA testing Government agency cases Immigration DNA testing (including international coordination) Distributed inventory management Document control and compliance Communication tracking and follow-up workflows This is a ground-up custom system. We are not seeking CRM customisation or template-based solutions. A detailed functional specification is being finalised and will be provided to shortlisted devel...

I'm seeking a contractor with deep expertise in Microsoft Active Directory Certificate Services (ADCS) to help us properly configure and stabilize our internal Certificate Authority. Current State: - Fully configured but unstable. Key Issues: -Enterprise CA configuration and hardening -Certificate template design (Kerberos Authentication, Computer/Wi‑Fi, NPS/RADIUS) -Integration with NPS for EAP‑TLS and Wi‑Fi/VPN authentication -Ensuring domain controllers receive and renew the correct Kerberos Authentication certificates -General PKI best practices and remediation Ideal Skills and Experience: - Extensive experience with ADCS. - Strong troubleshooting skills. - Ability to configure and optimize certificate templates. - Familiarity with Active Directory and related services. Your ...

I’m building a full-stack, fully secure money-exchange platform that spans Android, iOS, and a responsive website. The public landing screen must fetch and display up-to-the-second buy/sell rates even for guests, then invite them to sign in. Authentication will rely on Google Authenticator one-time codes; every sensitive endpoint must be locked behind this 2-factor flow. Once inside, customers need a clean dashboard where they can: • place buy orders • place sell orders • review a complete, filterable transaction history Behind the scenes I’ll need an admin console that lets me adjust spreads manually or, at the flip of a switch, pull live forex data from an API (feel free to recommend the most cost-effective feed). All price changes should propagate ...

I need a browser-based cricket betting platform that captures the look-and-feel and feature depth of while carrying my own branding. Core requirements are straightforward: • Secure user registration and login with strong encryption and KYC-ready user profiles • A full betting engine that supports multiple match markets, real-time odds updates and settlement logic • Live scores and match data pulled through a licensed third-party sports API, streamed instantly to the UI Beyond coding the site, I also need a clear, line-by-line cost estimate covering every expenditure tied to the project—development hours, API licence fees, hosting or cloud servers, SSL, maintenance, and any other predictable outlay. Please separate one-off costs from recurring ones and suggest a ...

The prototype was implemented cross-platform using React Native and Firebase as a backend. Fundamental implementation choices prioritized security and interoperability: Security: AES-256 encryption of data at rest; TLS for data in transit; role-based access by family members versus clinicians. Interoperability: A modular API with FHIR-compatible endpoints for eventual EHR/RPM integration. Offline capability: local caching and deferred sync to accommodate intermittent connectivity. Accessibility: large font toggle, voice prompts, and simple language; eventual localization into Swahili and French for pilot implementations in East Africa and West Africa. Care dashboard (daily/weekly view): Task list with confirmations and shared task assignment among multiple family caregivers. Tasks can be r...

I need an experienced Windows specialist to jump in remotely and keep my small network running smoothly. The environment spans Windows Server 2016, Windows Server 2019 and a handful of Windows 10 workstations. Typical assignments range from one-off fixes to short configuration sprints, so I’m looking for someone who can respond quickly, diagnose accurately and document any changes made. Scope of work Over the coming weeks I expect help with: • Service configuration – DNS, Active Directory, and File & Print Services • Issue troubleshooting – anything from failed roles or features to odd workstation errors • Performance and security checks – tightening policies, reviewing event logs, tuning resources You will connect via remote session (VP...

Heavy bursts of visitors are knocking my landing page offline. Each spike fills the nginx error log with 2026/02/09 20:32:47 [error] 949181#949181: *409046 connect() to unix:/var/run/php/ failed (11: Resource temporarily unavailable) while connecting to upstream, client: , server: , request: "GET /pW321xkxUy/?zoneid=9843359 HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/:", host: "" I’ve confirmed the trigger is a high number of simultaneous users, not bots or unusual request types. What I need—urgently—is a Linux-savvy engineer who can stabilise the stack so the site stays up no matter how fast traffic arrives. Stability and uptime are my top priorities; raw speed tweaks are welcome only if they don’t compromise resilience. You...

I’m looking for an experienced WordPress/PHP developer to build a custom payment gateway for Paid Memberships Pro integrated with NowPayments for a legal adult content website. Scope of work: Integrate NowPayments API to create crypto checkout for PMPro subscriptions Support new subscriptions and recurring payments (where supported) Handle NowPayments IPN/webhooks for: payment confirmed payment failed / expired refunds (if applicable) Sync payment events with PMPro membership status in real time Admin settings for API keys, test/live mode, and basic logs Follow PMPro gateway class structure (clean install/update) Acceptance criteria: I can enable the gateway in PMPro, enter API keys, and complete a full checkout in test mode. On payment confirmation, the user’s mem...

My QRadar deployment needs a sharper eye on phishing. I want a set of custom Alert and Correlation rules that reliably pick up everything from the first suspicious e-mail event to follow-up user activity that hints the attack is moving forward. Scope • Build correlation logic that ties together indicators such as mail-gateway detections, odd mailbox rules, risky web clicks, and any subsequent authentication anomalies. • Create alert rules that trigger actionable offenses the moment a phishing pattern emerges. The rules must fit neatly into existing QRadar best practices: use building blocks where appropriate, keep AQL searches efficient, and document each rule so another analyst can tune or extend it later. Acceptance A rule set that fires during lab replay of know...

We are looking for an experienced web developer / freelancer to build a complete digital membership system with subscription, referral program, and content library. ⸻ Project Goal It must be in German. Develop a professional platform with: • Member area • Subscription system (€39.99 per month) • Referral system (Level 1: €15 / Level 2: €5) • Social media content library • Member dashboard • Admin panel Members should receive ready-to-use TikTok, Instagram, and YouTube videos and templates every month that they can upload directly to their own channels. ⸻ Freelancer Responsibilities The freelancer will handle the full technical implementation: ⸻ 1. Website & Member Area • User registration and login system • Persona...

We need from Pakistan or India. We need for guidance. • Complete server hardening and best-practice mail stack installation (Postfix or Exim, Dovecot, SpamAssassin, etc.). • Proper DNS records—SPF, DKIM, DMARC, rDNS—set up and verified. • IP and domain warm-up plan to protect sender reputation. • Web-based dashboard or lightweight MTA/ESP front-end that lets me import lists, create campaigns, schedule sends, and view real-time stats. • Step-by-step documentation so I can replicate or maintain the configuration without outside help. If you prefer working with a particular control panel (MailWizz, Interspire, Postal, Mailcow, CPanel/WHM), let me know; I’m flexible as long as deliverability remains the priority. Please outline your prefe...

I have an Alpha-stage AI platform that guides life-science researchers from idea through discovery. It currently runs on Base44, yet we now need the global reach, elasticity and tighter compliance posture that AWS offers. We have a detailed backlog and UX. The job is to lift-and-shift—and where sensible, re-architect—everything onto AWS without sacrificing a single existing capability: advanced data analysis pipelines, automated machine-learning model training, and real-time data processing must all run exactly as they do today, the backlog shows the must have and like to have items. While you carry out the migration, I also have a strategic improvements folded in: a markedly stronger security layer to SOc2 standard. Think IAM best practices, VPC segregation, encryption a...

I need OpenClaw on my dedicated Mac with three core capabilities: Chrome automation: open websites, click elements, fill forms, extract structured snippets, and return results in WhatsApp. Coding/app workflows: generate code locally and optionally interact with web dev platforms when commanded. Deep research workflows: run multi-step web research, compare sources, and return concise findings with references. Security and reliability are mandatory: least privilege, approved-user-only WhatsApp commands, startup on boot, restart on crash, logs, and health check.

I'm seeking a skilled investigator to help find someone who scammed me in-person. This is an urgent matter. Ideal Skills & Experience: - Proven track record in locating individuals - Experience with in-person scams - Strong investigative skills - Ability to work discreetly and efficiently Please include relevant past work in your application.

PROJECT BRIEF (MVP) New Supermatket – New Mobile App Build (MVP Scope) 1. Purpose of This Document This document defines the Minimum Viable Product (MVP) scope for the New Supermatket mobile application rebuild. It outlines what is essential to launch a stable, scalable, and business-ready platform while deliberately excluding non-critical enhancements. The intent is to enable a fast, controlled launch while laying a strong technical foundation for future growth. 2. Project Overview New Supermatket currently operates a live mobile application processing approximately 250 orders per day. The business has decided to build a completely new mobile application and backend platform from scratch, reusing only the existing user base and product catalog at launch. The new MVP platform m...

Need experienced Linux System Administrator for server hardening. Tasks include security audit, firewall configuration, SSH hardening, user access control, patch management, and security monitoring setup. Must have experience with Ubuntu/CentOS and tools like Fail2ban, SELinux. Provide documentation of all changes.

I’m looking for someone who can make my digital life feel like one continuous workspace. I have two Windows-based computers and a mix of Android and iOS mobile devices, and I want them all to stay in step—documents, photos, contacts, calendars, browser data, the lot. Here’s what I need: • A reliable cloud-backed solution that keeps files and folders up to date across the Windows PCs, an Android phone, and iOS devices without me having to think about it. • Unified contact and calendar syncing so changes made on any device are reflected everywhere. • Consistent browser experience (passwords, bookmarks, open tabs) between the Windows machines and both mobile platforms. • Guidance on pushing notifications—texts, calls, app alerts—to ...

I need a brand-new Apple ID that is fully registered for the Mainland China App Store. The account is strictly for my personal use, so it must be clean—no developer enrolment, no prior downloads. Key points • Create a fresh email address solely for this job and use it during sign-up. • Complete all mandatory verifications (phone, security questions, two-factor) so the ID logs in without region warnings. • I do not need help installing or configuring any specific apps; just deliver a ready-to-use Apple ID. Deliverables for hand-over • The new email address with temporary password • The Apple ID (same email) with temporary password • Any security or 2FA codes I’ll need to transfer full control I’ll change all credentials on first...

I need help with a cloud security design lab homework assignment on Azure. The focus is on Identity and Access Management (IAM) and Role-Based Access Control (RBAC). Requirements: - Design a secure Azure environment. - Emphasize IAM and RBAC. - Include diagrams and explanations. Ideal skills and experience: - Expertise in Azure security. - Strong knowledge of IAM and RBAC. - Experience with technical documentation and design diagrams. Please provide a detailed proposal with your credentials and approach.

We are seeking a high-caliber, hands-on Engineer to lead the development of production-grade automation within the Windows ecosystem. This is a pure implementation role designed for a specialist who excels at translating complex functional logic into stable, scalable, and maintainable PowerShell scripts. You will be responsible for the "last mile" of development—ensuring that automation isn't just functional, but resilient enough for diverse enterprise environments. Key Responsibilities Production-Grade Development: Build and maintain robust PowerShell automation with a heavy emphasis on advanced error handling, structured logging, and modular execution flow. Windows Systems Integration: Deep-dive into Windows internals to manage and manipulate the Registry, File Sy...

I’m looking for a seasoned Microsoft Azure professional who can step in quickly, review my current cloud setup, and give me clear, actionable guidance. The scope is intentionally open-ended at this stage because I want to start with a thorough assessment before locking in specific tasks. Once you understand my workloads, I’d like you to identify the most pressing improvements—whether that means strengthening security and compliance, re-architecting virtual machines, fine-tuning databases, automating with Functions, or simply trimming monthly costs. More details will be shared with potential freelancer

My Classic ASP site was recently overrun by a black-hat SEO attack that injected gambling-related links into pages crawled by Google. Since then I’ve noticed a dip in performance, repeated security warnings, and spam URLs appearing in Search Console. I can give you full server access, including IIS and database credentials, plus the security logs and scans already generated by our endpoint software. What I need from you is a thorough forensic sweep to pinpoint every entry point—whether that’s a compromised .asp file, a rogue include, or a polluted database field—and then clean it without breaking the legitimate codebase or content. Deliverables • Complete scan of site files, MSSQL/Access tables and IIS logs • Written report listing each malicious...

(Subject): Urgent: Laravel API Optimization & Security Fixes (50k Concurrency) – Must Use Windsurf

I’m midway through a software development project and now need to fold in a fully-fledged user authentication layer. The current codebase is stable and organised; what’s missing are the sign-up, log-in, password reset, and basic role-based access controls that will make the product production-ready. You’ll be working against an existing Git repo. I’ll grant access and walk you through the structure so you can slot your changes in cleanly rather than bolting them on. I’m open to the usual approaches—JWT sessions, OAuth, or any secure flavour you’re most comfortable with—as long as the solution is standards-compliant and easy for another developer to pick up later. Deliverables • Registration, log-in, log-out, password reset flows ...

I maintain a Node.js / TypeScript code-base that submits Jito bundles to the Solana network at high frequency. The current version works, yet under heavy load it saturates network bandwidth, slows slot confirmation, and leaves a larger attack surface than I’m comfortable with. I’d like you to jump in, profile the pipeline, and return an implementation that is measurably better across three axes—performance, scalability, and security. What performance means here is simple: bundles must reach the leader faster so more of them land profitably. I’m especially keen on lowering the chatter between my service and Jito’s relays so network bandwidth is used far more efficiently. You’ll have full access to the existing TypeScript modules, aggregator logic, and t...

I need a brand-new Gmail account created and handed over fully verified so I can immediately use it for upcoming marketing campaigns. Please take care of the standard phone verification, add a recovery email of my choosing, and walk through the initial security checklist (strong password, 2-step verification left ready for me to activate). Once the account is live, send me the login details securely and confirm that you have logged out of all sessions. A short note on any additional tweaks you made—labels, basic filters, or inbox categories—would be appreciated but isn’t mandatory. Deliverable: one functioning Gmail account, verified and transfer-ready, delivered within a day.

I’m looking for a seasoned Microsoft Azure professional who can step in quickly, review my current cloud setup, and give me clear, actionable guidance. The scope is intentionally open-ended at this stage because I want to start with a thorough assessment before locking in specific tasks. Once you understand my workloads, I’d like you to identify the most pressing improvements—whether that means strengthening security and compliance, re-architecting virtual machines, fine-tuning databases, automating with Functions, or simply trimming monthly costs. More details will be shared with potential freelancer

I’m looking for someone who can make my digital life feel like one continuous workspace. I have two Windows-based computers and a mix of Android and iOS mobile devices, and I want them all to stay in step—documents, photos, contacts, calendars, browser data, the lot. Here’s what I need: • A reliable cloud-backed solution that keeps files and folders up to date across the Windows PCs, an Android phone, and iOS devices without me having to think about it. • Unified contact and calendar syncing so changes made on any device are reflected everywhere. • Consistent browser experience (passwords, bookmarks, open tabs) between the Windows machines and both mobile platforms. • Guidance on pushing notifications—texts, calls, app alerts—to ...