Security Expert — Create a YouTube Tutorial Series

About the project SecureNow (securenow.ai) is a runtime application security platform: plug our SDK into your web app, and it detects and blocks real attacks (SQLi, XSS, brute force, session theft) in production, with a free built-in firewall backed by 500k+ known-bad IPs refreshed hourly. It pairs natively with Claude through our CLI and MCP server, so an AI assistant can audit your app, write detections, investigate incidents, and drive mitigations for you. We're hiring a technical security expert / developer educator to create a complete, branded YouTube playlist: "How to Use Claude to Secure Your Live Application in Runtime." You'll be the on-screen/voice-over expert who takes a real web app from zero to fully protected, using Claude as the security copilot the entire way. What you'll deliver - A full YouTube playlist (~12 videos, 8-15 min each, outline below), screen recordings with clear voice-over, English - Each video: intro hook, hands-on demo on a real demo app, recap, chapter timestamps - A short written outline/script per video for our approval before recording - Copy-paste-able code/commands from each video (we'll publish as companion gists/docs) - Source project files for the demo app so we can maintain the series We provide: SecureNow account and API keys, CLI + MCP documentation, our threat-modeling prompt pack, a demo app (or you can bring your own stack, Next.js/Node preferred), and direct access to our team for technical questions. The playlist (video-by-video) 1. Why Runtime Security, and Why Claude? The gap between "secure code" and "secured app in production." Live cold-open: a real SQLi attempt getting auto-blocked in ~3 seconds. Series roadmap. 2. Plug SecureNow Into Your App in 10 Minutes: Install the SDK, create the app, first traffic flowing into the dashboard: requests, traces, and posted events. Verify ingestion with the securenow CLI. 3. Connect Claude: CLI + MCP Setup: Wire the SecureNow CLI and MCP server into Claude Code / Claude Desktop. First prompts: "what traffic did my app receive in the last hour?", "any suspicious IPs?" 4. The Free Firewall: 500k+ Known-Bad IPs, Zero Config: Enable firewall-only mode. Explain the three enforcement levels (HTTP 403, TCP drop, iptables). Prove it works with a test request from a flagged IP. 5. Threat-Model Your App With Claude: Use the SecureNow threat-modeling prompt on a real codebase (auth flows as the example). Claude reads the code, produces a threat model report, and flags where the docs and the actual code disagree. 6. From Threat Model to Detections: Have Claude turn threats into concrete alert rules with securenow alerts rules create --sql. Start rules in test mode, then validate and promote them. 7. Building Mitigations: Block, Rate-Limit, Challenge, Revoke: The remediation ladder: rate limiting, invisible CAPTCHA/proof-of-work challenge, instant synchronous block, session revocation for stolen sessions. When to use which, configured with Claude's help. 8. Red Team Yourself: Simulating Attacks: Safely simulate SQLi, XSS, RCE probes, brute-force login floods, and credential stuffing against your own app. Watch the full detect, alert, block loop fire, then unblock and tune. 9. Monitoring and Triaging Alerts: Dashboard walkthrough: reading alerts, confirming true positives, handling false positives with trusted-IP and rule exclusions so real users never get caught. 10. Forensics: Investigating an Incident With Claude: After an attack, use the forensics tooling + Claude to reconstruct the attacker's timeline: what they probed, what was blocked, what data they touched. Produce an incident summary. 11. Autopilot: Letting Claude Run Security Operations: Confidence-gated auto-decisions, the human approval queue for borderline blocks, and guardrails. What to automate vs. what to keep a human on. 12. Capstone: Zero to Protected in One Hour: End-to-end speedrun on a fresh app: plug in, firewall on, threat model, detections, simulated attack blocked, forensic recap, all driven through Claude. We're open to your input on refining this outline, that's part of why we want an expert. Ideal candidate - Hands-on AppSec/web security background (you can explain SQLi, session theft, and rate limiting from experience, not slides) - Comfortable with Node.js web apps, CLIs, and API integrations; bonus if you've used Claude Code / MCP servers - Proven developer-education content: link us to videos you've made (YouTube channel, course, conference talks with demos) - Clear spoken English and clean screen-recording production (good mic, tight editing) Budget & timeline Fixed price per video, milestone-based: outline approval, draft video, final cut. First milestone is one paid pilot video (video #2, "Plug SecureNow Into Your App"), we continue with the full series if the quality fits. Please quote your per-video rate and estimated turnaround for the full playlist. Target: full series within 6-8 weeks. Estimated total budget for the full playlist: $700. How to apply - Link 2-3 examples of technical videos you've produced (security or dev-tools topics preferred) - One paragraph: how would you make video #8 (attack simulation) compelling without being a script-kiddie tutorial? - Your per-video rate and availability