Security Consultant for Penetration Testing

We built a custom web platform for a single client. It looks like a SaaS app but is single-user, not multitenant. It uses third-party AI APIs for web research behind a UI we control. No proprietary data and low leak risk — but we've committed to delivering a formal security assessment to our client and want it done right. Scope Black box external testing of the web app Scoped grey box using a provided test account (staging environment) Focus: OWASP Top 10, auth/session, access control, input validation, and the AI API/integration layer Deliverables Formal report (your template): exec summary, severity-rated findings, reproduction steps, remediation guidance — suitable to hand to a non-technical client Optional retest of critical/high findings after remediation Requirements Proven web app pen testing experience Credentials (OSCP, OSWE, GWAPT, GPEN, CREST, or similar) Your own report templates and methodology Available to start immediately, fast turnaround To apply: brief note on relevant experience, your certs, a redacted sample report, and your availability + rate.