I'm looking for a professional who knows the platform uSecure very well. I have three clients I must run automated phishing simulations for. I am looking for a consultant to come in, work inside of my uSecure partner account, and provision the three tenants and set up automated phishing simulations and automated training. I will handle all of the whitelisting in the tenants and communication with the end users. I need someone to come in and set up the infrastructure so that it goes into set it and forget it mode. Ideal candidate knows uSecure in and out, and can answer any questions related to the platform, and make recommendations. While this is technically a one-time job, if it's a fit, I would like to have you come on board and assist with some infosec work for some of my clients MSP experience is a bonus

Apex Vault Inc. (a Delaware C-Corp) is seeking a highly technical penetration tester and cloud security engineer to evaluate our Phase 1 data-routing infrastructure. You will be working directly under the supervision of our acting vCISO and compliance firm. Your objective is to conduct a targeted technical audit and perimeter penetration test. Your final vulnerability report and technical findings will be used by our vCISO to draft our formal Enterprise Security Attestation. The Environment (High-Level): Our architecture utilizes a custom cloud-based proxy layer to intercept web traffic, sanitize data payloads (stripping specific parameters and PII/PHI), and securely route the sanitized events to authorized endpoints. Project Scope & Deliverables: 1. Architecture & Data Filtration Verification Review our custom edge-routing logic and cloud deployment. Key Objective: Technically verify and document that the architecture successfully intercepts and drops specific, targeted URL parameters and IP addresses prior to downstream transmission. Verify the cloud infrastructure utilizes best practices for network isolation, perimeter defense, and encryption at rest/transit. 2. Perimeter Penetration Test / Vulnerability Assessment Perform a targeted vulnerability assessment on the external-facing proxy layer and application endpoints. Check for OWASP Top 10 vulnerabilities, TLS configuration flaws, and ensure internal compute resources are properly shielded from public access. 3. The Deliverable: Technical Vulnerability Report Provide a comprehensive technical report detailing your methodology, findings, severity levels, and specific remediation guidance. Note: You are not required to write the final compliance attestation; you are providing the raw technical validation to our vCISO. Requirements: Proven experience conducting penetration tests on enterprise cloud environments (specifically AWS). Deep understanding of reverse proxies, edge routing, and web traffic manipulation (e.g., header manipulation, intercepting payloads). Ability to write clean, reproducible technical reports for an executive security team. Note: Specific architectural details, technology stacks, and codebase access will only be provided after the execution of a unilateral NDA and an Upstream Business Associate Agreement (BAA).

We are seeking a skilled professional to handle open source programming and ensure the security of our software and 3 AES servers. The ideal candidate will have experience in maintaining and enhancing open source software, as well as managing security protocols for AES servers. This role requires a strong understanding of security analysis and network security.

We are currently looking to fill the role of a security developer for a two phase project. Phase 1- Current phase we are planning for which includes an initial security audit on our application and list a list of all issues with time estimates for each line item. Phase 2- After the list has been reviewed, work in tandem with development team to bring application into security standards. Our application consists of a server application for hosting and management, an end user desktop application for base users, and a website account management system for billing and subscriptions as well as verification of subscription between website and application. Additionally, a third phase will be bringing the applcation into compliance for multiple industry standards such as healthcare, finance, and governement.

We are a new logistics company building our website, and we are looking for a Website Security & Compliance Specialist to partner with our internal team. Our designer (Toni) is handling all layout, pages, and visual development — your role focuses strictly on the security, access control, and compliance‑sensitive portions of the site. What we need: We need someone who can review the site structure, secure employee‑only pages, configure protected document access, secure multiple reporting forms, and ensure the website meets the data‑protection expectations required for Amazon DSP compliance. You will collaborate with our designer as needed, but you will not be responsible for design or page creation. Deliverables include: Secure access controls for employee‑only pages Protected employee handbook download Anonymous reporting form security Urgent reporting workflow security Secure form configuration + email routing Google Workspace integration General website security hardening Compliance review + risk assessment Skills required: Information Security, IT Compliance, Secure Form Configuration, Access Control, Authentication Systems, Google Workspace Integration, and Website Security Hardening. How we work: We communicate clearly, respond quickly, and keep responsibilities separated. Toni will lead the full website build, and you will focus on the backend security and compliance requirements. We value transparency, collaboration, and professionals who can explain what they need in order to complete their part of the project. What we’re looking for: Someone experienced, reliable, and comfortable partnering with another professional. This is a focused, security‑driven role — perfect for someone who specializes in compliance workflows and secure website infrastructure.

We’re looking for a highly skilled, customer-facing Fortinet expert to join us in a fractional / part-time capacity to support both pre-sales engineering and post-sales customer success efforts, with a strong focus on firewall health checks and optimization engagements. We need someone who can confidently engage with customers, communicate clearly, and act as a trusted advisor someone who can translate complex network/security concepts into practical, actionable insights. Firewall Health Checks (Primary Focus) Perform FortiGate firewall assessments for customers approaching renewal Review: Configuration hygiene Security posture Firmware/version alignment Policy optimization Logging/visibility gaps Performance and sizing Deliver: Executive-friendly reports Technical findings + prioritized recommendations Clear articulation of risks and improvements Recommendations & Remediation Provide baseline best-practice recommendations Execute light-to-moderate remediation work where needed Identify upsell/cross-sell opportunities (security posture improvements, services) 🔹 Pre-Sales Support Support solution design for Fortinet-based environments Assist with: Architecture design Scoping recommendations Technical validation Join customer calls as a technical subject matter expert

We are a boutique professional services firm seeking an experienced Microsoft Purview consultant to help us design and implement an AI data governance strategy within our Microsoft 365 environment. The ideal candidate will have deep expertise in Microsoft Purview, Microsoft 365 security and compliance, and AI data governance, and will be able to provide both strategic guidance and hands on implementation support. We are looking for a trusted advisor who can help us evaluate available Microsoft technologies, recommend practical solutions, and implement an AI governance framework that aligns with our firm's operational, security, and compliance objectives. Initially, we are seeking a consultant to assess our current Microsoft environment, explain the capabilities available through Microsoft Purview, identify any licensing considerations, and recommend a practical implementation roadmap for a small organization. If the engagement is a good fit, we anticipate continuing through implementation and ongoing advisory support. Areas of interest include: Microsoft Purview Microsoft Information Protection and Sensitivity Labels Data Loss Prevention (DLP) Information Governance and Records Management Retention Policies eDiscovery capabilities Microsoft Copilot governance AI governance and best practices Monitoring, auditing, and reporting We are particularly interested in understanding how Microsoft technologies can help organizations govern and protect information used with AI platforms, including Microsoft Copilot, ChatGPT, Codex, and similar tools, while maintaining appropriate administrative controls and information governance. Experience implementing Microsoft Purview for professional services organizations is preferred. Strong communication skills and the ability to explain technical concepts to business users are important.

We're a healthcare technology company that handles regulated health data and runs an active compliance program on Vanta. We're looking for a hands-on fractional compliance manager to own the day-to-day and keep our certifications audit-ready. This is an execution role, not an advisory one. Scope of work: - Maintain a SOC 2 Type 2 program in Vanta: evidence collection, access reviews, control monitoring, and remediation of failing tests. - Support a HITRUST e1 recertification later this year: screenshots, access reviews, and policy refreshes. - Administer security policies and required training end to end: distribution, acceptance tracking, and completion reporting, including HIPAA-related modules. - Track vendor and BAA obligations and flag gaps against our standards. - Provide a clear, current read on open gaps and audit risk. What we're looking for: - Direct, hands-on GRC experience in a US healthcare / HIPAA environment. - A track record maintaining SOC 2 Type 2 and delivering HITRUST e1 (renewal experience preferred). - Fluent in Vanta - Someone who runs with access and gets it done with light oversight, rather than producing recommendations for others to execute. - Remote, with meaningful overlap with East Coast business hours. Terms: hourly, roughly 10 hours per month to start, with some flexibility up or down.

I am looking for someone to PEN-test a language learning website, and find all security issues and advise fixes and also find any ways in which access protected info could be accessed by non-paying visitors.

We are seeking an experienced IT professional with expertise in Microsoft 365 Enterprise to help us evaluate, configure, and implement a secure AI environment for our organization. Our goal is to leverage AI capabilities within the Microsoft ecosystem while ensuring all client materials and confidential information remain protected and are not exposed to public AI models. We are specifically interested in understanding and implementing the appropriate Microsoft 365 Enterprise (E3/E5), Microsoft Copilot, Azure OpenAI, Entra ID, Purview, and related security tools to create a secure, self-contained AI environment. Requirements: Strong experience with Microsoft 365 Enterprise administration and security Knowledge of Microsoft Copilot, Azure OpenAI, Entra ID, Microsoft Purview, and Data Loss Prevention (DLP) Experience implementing secure, enterprise-grade AI solutions Ability to configure security, governance, permissions, and access controls Familiarity with Microsoft 365 Enterprise licensing and security features Please include a brief summary of your relevant experience and any similar projects you have completed.