Pen test - ISO 27001 and SOC2 Readiness (small SaaS company)

Overview We're a 5-person B2B SaaS company preparing for ISO 27001 recertification and SOC 2 readiness. We need a penetration test covering our web application and cloud infrastructure to identify vulnerabilities and produce a report we can present to auditors. We had a penetration test conducted two years ago and are now looking to repeat it as part of our re-certification process. Scope Web application (SaaS platform) Cloud infrastructure (Azure-hosted) External network perimeter 5 users / limited attack surface Deliverables Written pentest report with executive summary and technical findings Risk-rated vulnerability list (Critical / High / Medium / Low) Remediation recommendations per finding Retest of critical/high findings after we remediate (one round) What we need from you OSCP, CEH, or equivalent certification (please specify) Experience with ISO 27001 and/or SOC 2 audit requirements Familiarity with Azure environments Sample report from a previous engagement (anonymised is fine) Clear methodology (black box or grey box preferred) Budget Fixed fee up to $750. We are a 5-person startup, we're not looking for an enterprise engagement, but quality of documentation is non-negotiable. Timeline Looking to complete within 1-2 weeks of engagement start. To apply Include your certification, a sample report or relevant portfolio, your proposed methodology, and your fixed-fee quote.