Information Security Assessment for ERP SaaS (ISO 27001)

We're looking for an experienced application security professional to conduct a focused security assessment of our cloud-based ERP platform (SaaS) following a major release that introduced AI capabilities. Scope: - Review of newly introduced AI components for hidden logic, unauthorized data exfiltration paths, or backdoor behavior - API security testing (authentication, authorization, input validation) - Static and/or dynamic analysis of AI integration layer - Review of third-party AI model/API dependencies and their data handling - Findings report with severity ratings and remediation recommendations What we expect from you: - Proven experience in application/cloud security assessments - Familiarity with SaaS architectures and AI/LLM integration patterns - Clear written report (executive summary + technical detail) - NDA required before engagement begins Ideal background: OSCP, CEH, or similar certification is a plus. Experience assessing AI-integrated applications is strongly preferred. This is a fixed-scope engagement. Please include your estimated timeline and approach in your proposal.