Type: Fixed price We need an independent penetration test of a small production environment. The report will be submitted to enterprise third-party risk teams, so report quality and the retest matter as much as the testing itself. Scope: One public IP on AWS External network testing on that host Authenticated grey-box testing of the web application and its API. We provide credentials for each role, architecture documentation and an asset inventory so you are not billing for reconnaissance Out of scope: internal network, social engineering, source code review, cloud configuration review This is a deliberately small scope. We are buying manual application testing depth, not IP count. Please quote tester-days rather than pricing it as a trivial job. Required in the base price: Draft report review window, with our written management response included in the final report Remediation retest after we fix findings, with a written retest confirmation stating which findings are closed Both the full technical report and a standalone executive summary suitable for a third-party risk file Report to state scope, methodology, test window, tester certification, findings with severity ratings and evidence, and remediation guidance. We expect OWASP or PTES methodology, or equivalent recognised guidance Timeline: engagement this week, testing the following week, initial report within two weeks of engagement, retest within one week of us confirming remediation. Please say so upfront if that is not achievable. Required: OSCP, CREST or GPEN certified tester performing the work Prior reports accepted by large enterprise or Big Four vendor risk assessments Professional liability or errors and omissions cover, or the ability to explain how you handle that Please attach a redacted sample report and a redacted sample retest letter. Proposals without a sample report will not be considered.

I need someone who enjoys prepping, survival, emergency mitigation, and resiliency topics. My work covers a breadth of topic areas. I am looking for someone who is experienced at original research (not AI, not copy/paste from Wikipedia), understands source quality, and can pull together various pieces of information on a topic in a written product.. This project will start with research on two topics: 1) Technology and cyber prep 101 - most common real world emergencies with a technology nexus, how to protect against those emergencies, how to protect devices, physical emergencies stemming from tech or cyber, digital/electronic emergencies stemming from tech or cyber, etc. 2) I've been hacked, now what? (what is hacking, understanding hacking, signs you've been hacked, what should you do if hacked, etc.) Each topic should be 2 to 5 pages. Please include links to your sources and pull from a variety of sources. Price includes: for each report, I will send 1 round of follow-up questions for you to answer that focuses on what you sent me (to make sure I can fully use the content). Note: if we work well, I have additional topics, typically only one topic per milestone, and will pay for each topic covered.

I need someone who can extract IP addresses from a hard drive that has a Trojan on it and check those addresses against the internet to see if one can be used to connect to the Trojan. The task involves dealing with malware and network security, requiring skills in network security and malware analysis. Akron Ohio

We are looking for an experienced Google Workspace Administrator to audit, secure, and structure our Google Workspace setup. Key immediate priorities include evaluating domain security settings, ensuring complete company ownership of all Drive assets, reconfiguring role-based permissions, setting up Google Vault, and refining current onboarding/offboarding workflows. In this role, you will report directly to the IT Director. Key Responsibilities: Access Control & Permissions: Refine current Organizational Units (OUs), or Groups, to restrict access to sensitive data (e.g., Accounting, HR) to authorized personnel only. Shared Drive Architecture: Reconfigure file management to transition from company-wide access level to data within Shared Drives, ensuring OU access levels are followed on existing files and folders. Onboarding & Offboarding Workflows: Audit our existing documentation and build a secure, streamlined, and repeatable protocol that could be executed by multiple team members with non-technical backgrounds. Security & Workspace Audit: Review current domain settings, user permissions, external sharing rules, and security controls; provide recommendations for immediate security risk mitigation. AI Best Practices: Review our current settings companywide, and suggest any limitations on access to data by the application or by the user, with the main focus on the security of client-owned data, as well as our own data. Documentation & Handover: Provide a simple admin playbook for ongoing operations and host a short training walkthrough with our internal team.

We are seeking an experienced freelancer to conduct a comprehensive audit and cleanup of our Google Cloud IAM configurations. The ideal candidate will have a strong understanding of IAM best practices and be able to identify and rectify any security vulnerabilities or inefficiencies. We need an experienced GCP administrator/security consultant to: 1) Audit current access — Review all users, service accounts, and API keys across our GCP organization and projects. Identify who has access, what level, and whether it's still needed. 2) Offboard former developers — Safely remove access for people no longer working with us, including transferring ownership of any resources, service accounts, or credentials tied to their accounts so nothing breaks. 3) Security review — Verify our overall security posture is set up correctly (IAM policies, principle of least privilege, org policies, billing alerts, logging/audit trails, exposed resources, firewall rules). Establish a permissions framework — Set up proper roles and groups so we can grant future developers appropriate, limited access to specific projects — and revoke it cleanly when engagements end. 4) Documentation — Provide a simple written summary of what was found, what was changed, and a repeatable process for onboarding/offboarding developers going forward. Responsibilities include reviewing current IAM roles, permissions, and access levels, and providing recommendations for improvements. The goal is to ensure our IAM setup is secure, efficient, and aligned with our organizational needs.

We are staffing a senior Azure security engineer onto a 13-week implementation engagement with a large enterprise client. This is hands-on build work, not assessment or strategy. You will be writing policy, wiring federation, and shipping infrastructure-as-code alongside the client's own engineering teams. Start date is August 17, 2026. Please only apply if you can commit to that date and to 40 hours per week through mid-November. WHAT YOU WILL BE DOING: Credential elimination. You will inventory service principals, client secrets, and long-lived credentials across the Azure estate, then retire them. That means standing up workload identity federation and OIDC trust patterns for CI/CD and Kubernetes workloads, migrating applications onto managed identities in partnership with the teams that own them, and putting preventive controls in place so that net-new static secrets cannot be created after you leave. Blast radius reduction. Private Endpoint and Private Link architecture for data-plane services, network access rules on storage and Key Vault and other PaaS, Azure Policy enforced at the management group scope, and RBAC tightening with custom roles where the built-ins are too permissive. The goal is that a compromised identity or workload cannot reach data it has no business reaching, regardless of what a role assignment says. Audit logging and exfiltration visibility. Diagnostic settings deployed at scale through policy rather than by hand, Entra ID sign-in and audit log routing, activity logs, AKS control plane and audit logging, and closing data-plane logging gaps on storage and other exfiltration-relevant services. You will work with the client detection team to confirm the telemetry actually supports their use cases. External attack surface. Discovery and inventory of internet-facing Azure resources, assessment of permissive NSG rules and unnecessary public IPs and exposed PaaS endpoints, then remediation execution. Everything you build gets documented as a reusable pattern. The client intends to adopt these organization-wide after the initial engagement, so the quality of your Terraform modules and runbooks matters as much as the controls themselves. WHAT WE NEED YOU TO HAVE Five or more years in cloud security engineering, with the majority of that time in Azure. Production depth in Entra ID, specifically managed identities, workload identity federation, app registrations and service principals, conditional access, and RBAC including custom role design. Azure Policy at enterprise scale. Management group hierarchy design, deny and deployIfNotExists effects, and remediation tasks. Azure network security for data protection. Private Link and Private Endpoints, NSGs, service endpoints, and the DNS design implications that come with each. Diagnostic settings, Log Analytics, and log delivery into a SIEM such as Sentinel or Splunk. Terraform or Bicep in production, not just in a lab. You will be writing modules that other people consume. A track record of driving security changes through engineering teams who did not ask for your controls, do not report to you, and have their own deadlines. This is the part most candidates underestimate. STRONG PLUSES AKS security depth including workload identity, network policy, audit logging, and admission control. GitHub Actions OIDC federation into Azure. PowerShell or Python automation against Microsoft Graph and Azure Resource Manager. Certifications such as AZ-500, SC-100, or SC-300, or equivalent demonstrated capability. Prior consulting or staff augmentation experience.

We are seeking a Network Management Specialist located in the US to assist with network management tasks. The ideal candidate will have experience in network security, administration, and Cisco Certified Network Associate. Responsibilities include ensuring network stability, troubleshooting issues, and implementing security measures. This is a part-time role with a project scale of small and a duration of less than one month.

Immediate needs include: * Troubleshoot emails not being received, or being received and then pulled from inbox. With at least two insurance companies, our emails are either not being received or being received and then pulled from the recipients mailbox, like they are treating our emails as hostile. More specifics below. We have Microsoft 365 Business Standard. When we send "regular" emails they are not being received in the recipients inbox, junk or appearing on the "filtered" list. When I send an encrypted email using Azure Information Protection Premium P1, the recipient will receive the email and can read and respond to it, but both my message and their reply are then removed from their email. This happens with more than one recipient. The regular email not being delivered is happening with at least two separate insurance companies. When I look in the exchange admin center for an email that wasn't received, the "Message Events" section shows that it was "Delivered": sent/submit/receive completed. Ongoing needs could include: * Evaluate current o365 settings, make recommendations and implement changes to improve security and compliance * Evalute current data storage and access for improvements in security, access and backup * Other information security updates you recommend

About Us We're a multi-site behavioral health services company operating clinics in California and Georgia, with approximately 60 employees across five locations. We issue company-owned laptops and iPads to clinical and administrative staff. Our environment: Google Workspace Business Plus for email, identity, and file storage. Our fleet is roughly 3 Windows laptops, 20 MacBooks, and 8 iPads. Because we operate in healthcare, our devices may touch protected health information (PHI), so HIPAA-appropriate safeguards are a requirement, not a nice-to-have. The Problem We are paying for Google Workspace Business Plus, which includes advanced endpoint management — and none of it is configured. There is no enrollment process, no enforced passcodes or disk encryption, no app control, no remote wipe capability, and no reliable visibility into who has which device or what's installed on it. Devices are handed out and tracked informally. We want this built out properly, once, using what we already own wherever possible, with documentation clear enough that our operations and HR staff can maintain it in-house afterward. Scope of Work 1. Assessment and gap analysis Inventory our existing devices and audit our current Google Admin console endpoint management configuration Tell us specifically what Business Plus covers for each device type — Windows, macOS, iPadOS — and what it does not Verify all device-using staff hold Business Plus licenses, since endpoint policies are licensed per user Recommend what, if anything, we need to buy on top of Google to close the remaining gaps, with cost per device or per user. We expect the honest answer may involve a dedicated Apple MDM and an endpoint protection product; make the case either way Confirm Business Associate Agreement coverage for anything you recommend, and verify our Google Workspace BAA has been accepted in our Admin console 2. Google Workspace build-out Configure Google Admin console endpoint management: organizational units by role and location, device approval workflow, and context-aware access where appropriate Enable advanced mobile management and configure the Apple push certificate for our iPads Configure Windows device management and BitLocker policy Set up Apple Business Manager so our iPads can be supervised and future purchases enroll automatically Stand up any supplemental MDM or security tooling identified in step 1, with identity anchored to our Google accounts — we do not want a second directory to maintain 3. Security baseline Enforce disk encryption on laptops (BitLocker on Windows, FileVault on Mac) and confirm encryption is actually active on each machine, not merely configured in a console Enforce device passcodes and screen-lock timeouts across all device types Configure remote lock and full remote wipe Deploy endpoint protection / antivirus Application allow/block controls and restrictions on personal cloud storage or unapproved apps OS patch and update enforcement 4. Application deployment Package and push our standard app set to the correct device groups (list provided after hire; includes clinical data collection and productivity applications) 5. Enrollment of the existing fleet Enroll our currently deployed devices Identify which devices require a wipe and reset to enroll properly, and propose a sequencing plan that minimizes disruption to clinic operations across two time zones 6. Monitoring and reporting Compliance dashboard and alerting for out-of-policy devices Asset inventory report we can reconcile against our HR records 7. Policy, documentation, and handoff Written device use / acceptable use policy suitable for inclusion in our employee handbook Device assignment and return acknowledgment form Standard operating procedures for: issuing a new device, onboarding a new hire, offboarding a departing employee including remote wipe, and responding to a lost or stolen device Live training session (recorded) for our operations and HR staff so we can administer this going forward without ongoing contractor support Deliverables Fully configured endpoint management environment with all existing devices enrolled and reporting compliant Documented security baseline and configuration profiles Written device policy plus assignment and return forms Admin SOP runbook Recorded training session and 30 days of post-launch support for questions Required Experience Hands-on MDM/UEM deployments for small to mid-size organizations — tell us how many and on which platforms Direct, current experience configuring Google Workspace endpoint management on Business Plus, including its real limitations Integrating a third-party MDM with Google Workspace as the identity provider Both Apple (macOS/iPadOS) and Windows management Apple Business Manager and Automated Device Enrollment Windows encryption and update enforcement in a Google-identity environment, not Microsoft 365 Experience with HIPAA-regulated or otherwise compliance-sensitive environments Clear written communication — we need documentation a non-technical operations manager can actually follow Nice to Have Prior work with healthcare, behavioral health, or multi-site clinical organizations Familiarity with BambooHR for reconciling device assignment against employee records Multi-state operations experience Engagement Details Type: Fixed-price with milestones preferred; open to hourly for the right candidate Timeline: Kickoff within two weeks, initial rollout complete within [4–6] weeks Availability: Some work must align with U.S. Pacific and Eastern business hours to coordinate with clinic staff Please Include in Your Proposal What can we accomplish using only what Business Plus already includes, and where will we genuinely need to add tooling? What are the top three things Google Workspace endpoint management cannot do that we should be aware of? How would you handle our MacBooks specifically? Two or three comparable projects you've completed, with device counts and platforms Any additional per-device or per-user monthly cost your approach would introduce Your fixed-price quote and proposed milestones Your experience with HIPAA safeguards as they apply to endpoint devices Start your proposal with the word "ENROLLED" so we know you read the full posting.

We are seeking a comprehensive code review for our web-based software application. Our primary goals are to audit the codebase for security vulnerabilities and optimize it for maximum efficiency. Up to this point, the software has been built primarily using AI tools. We now need expert advice and a strategic roadmap on how to complete the project efficiently and securely.