Web Security Jobs

Please Sign Up or Login to see details.

My sign-up page needs a simple, text-based CAPTCHA so I can verify real people before an account is created. The task is to drop a lightweight challenge into the existing registration form, handle server-side validation, and keep the visual style consistent with the site’s current CSS. You may choose any reliable approach—an open-source library such as reCAPTCHA v2/v3 or a small custom word-image generator—so long as it blocks automated scripts without frustrating genuine users. Please work directly in the current stack (PHP and vanilla JavaScript) on the staging server I’ll provide. Make sure error messaging is clear, accessibility is considered, and the normal registration flow still completes smoothly once the code is in place. Deliverables: • Fully integ...

I need an experienced full-stack developer to add secure role-based access control to my existing, fully functional website. The site has about 10 sections, including Shop, Podcast, Bookshop, News/Blog, Catering, and others. Each staff member should only have access to the section(s) they are hired to work on, while Owner, Admin, Privacy, financial, and other restricted areas remain protected. Access must be secured at the backend level so restrictions cannot be bypassed through direct URLs or other methods. Unauthorized access should be blocked. The website already has a login/sign-in system. I want to add professional moving visuals and animations to the existing sign-in/welcome areas to create a smooth and professional transition after login. The website is already working properly....

I need a skilled developer to fix identified bugs/security vulnerabilities in a web application built on the Lovable, Supabase, and Vercel stack. Key Requirements: - Review & finalise the draft remediation plan (based on audit report). - Apply remediation plan in strict severity order, using Claude Code to author fixes. Close confirmed findings in strict severity order, each in its own PR, each verified end-to-end against the protected environments - Validate all diffs against a written checklist, verify by re-exploitation - Ensure the application runs smoothly post-remediation. Ideal Skills: - Proficiency in Lovable, Supabase, and Vercel. - Strong background in web application security. - Excellent problem-solving skills and attention to detail. Looking for an experienced p...

i run a wordpress site and need the following 1- Secure WordPress by restricting /wp-admin and / to approved IP addresses or VPN access while keeping the public website accessible. 2-Renew the expired TLS certificates on and confirm whether the FTP service is required. 3-enable TLS encryption on the mail server at 203.143.89.81. 4-Run the security scan again after the changes and confirm all four issues have been resolved.

I have a small web-based application that needs its security posture checked right away. The goal is to build an automated suite that performs penetration-style tests each time the app is deployed, flagging anything that could be exploited before it reaches production. Scope – The work is limited to security testing; I do not need functional or performance checks at this stage. – Within security, the emphasis is on penetration testing methods: automated discovery of common weaknesses (SQLi, XSS, auth bypass, misconfigurations) and clear proof-of-concept steps. Tech expectations Python with Selenium, Playwright, or a comparable headless browser tool is fine, and I’m open to OWASP ZAP or similar APIs if that speeds things up. Please wire the tests so they can be tri...

My WordPress site has been offline for about 15 days, and I suspect it was hacked. Restoring the website is my highest priority, followed by getting business email working again and fixing lingering Google-indexing problems. I’m not sure whether I still have hosting-panel access, so part of this job is to confirm what entry points are available and secure them. I need a seasoned WordPress security specialist who can: 1. Perform a full technical audit to identify the root cause of the outage and any compromise. 2. Produce an immediate action plan that: • Restores site functionality and data integrity. • Re-establishes reliable email delivery. • Outlines next steps for proper Google indexing. 3. Patch vulnerabilities, harden the server, and apply best-prac...

My home network needs a thorough security overhaul focused on cybersecurity and data protection. I’m looking to tighten every layer—router configuration, firewall rules, Wi-Fi encryption, secure remote access, and reliable backup strategies—so that every device in the house stays protected without slowing anything down. Here’s what I expect from your work: • Assess the current home-grade modem/router and recommend or apply best-practice hardening. • Set up WPA3 (or strongest available) Wi-Fi security, strong passwords, and guest isolation. • Implement endpoint protection on laptops, phones, tablets, and any IoT gear. • Configure automatic, encrypted backups to local NAS or trusted cloud storage. • Provide a concise hand-off document...

I have between one and five client websites that were taken offline after invoices went unpaid. I still hold full access to each original hosting account and the domains remain under our reseller umbrella, but there are no usable backups on record. Your mission is to locate viable copies of every site—whether that means scraping Internet archives, recovering server remnants, or using any other ethical method—then restore each one to its original domain and get it functioning again. Because I can no longer reach the previous developers, you’ll need to deal directly with the current hosting providers and registrars whenever DNS, SSL, or file-level intervention is required. The republishing process should leave every site publicly accessible, loading quickly, and displaying...

EXPERIENCED ADULT DIRECTORY PLATFORM DEVELOPMENT TEAM We are looking for an experienced development team to build a modern adult/escort directory platform targeting Bursa, Turkey. This is a SOFTWARE DEVELOPMENT project requiring strong experience with directory/listing platforms, custom administration systems, scalable architecture, performance, security and technical/local SEO. Previous experience with adult-industry or comparable complex directory platforms is strongly preferred. PROJECT The platform will be developed from scratch and launch with approximately 200–300 listings, with architecture designed for future growth. We have a legacy PHP platform/archive containing important functionality and business workflows. It is REFERENCE ONLY and will be shared privately with sho...

My site is dragging its feet and Google PageSpeed Insights confirms it. Loading feels heavy on the home page, all service-detail pages and even the contact page, and every extra second is costing me both visitors and search-engine traction. I’m looking for someone who can dig into the code, hosting setup and assets, remove the bottlenecks and leave the site lean enough to score markedly higher on PageSpeed while respecting Core Web Vitals and general SEO best practices. Key results I want to see: • Sub-2-second first load on the three page types mentioned above. • Green scores on PageSpeed Insights for both mobile and desktop. • No visual regressions or broken functionality after the optimisations. Please plan to deliver a short before/after report from Pag...

Kastle Media is hiring a freelance WordPress developer to build a new client website using our existing Kastle Core custom WordPress theme and our approved schema plugin. This is a custom-code WordPress build. It is not a page-builder project. The successful freelancer will work within the existing Kastle Core architecture and build a new, client-specific website from scratch. Each client has its own design, content, brand identity, page layouts, and CSS. Do not copy page templates, CSS, HTML, components, or visual styling from another Kastle client website unless a specific technical pattern has been approved for reuse. AI-assisted development is acceptable. The final output must be clean, maintainable, accessible, responsive, secure, documented, and production-ready. Build in WordPress u...

I want to learn how to fix a real infected website. You will need to provide the infected website. Controlled environment is ok but continued work may be given if you provide real infected websites over a controlled environment. PHP based systems like laravel and Wordpress preferred. In your response give an example of an infected website you fixed, explain the situation. I only need an hour of your time for now but if I like your work I may give you more work. Preference will be given to real natural responses to this ad over AI responses.

MICROSOFT SECURITY ANALYST & SECURITY ENGINEER PRACTICAL PROGRAM We are looking for an experienced Microsoft Security Analyst / Security Engineer to serve as a technical instructor for a practical Microsoft Security training programme. LANGUAGE REQUIRE REQUIREMENT: FLUENCY IN ENGLISH Excellent Communication is Require. Our target students are IT Support professionals, system administrators, network engineers, and individuals with general IT/technical knowledge who want to transition into Microsoft Security Operations and Security Engineering. TRAINING OBJECTIVE The objective is to transform participants from general IT/technical roles into practitioners who can identify, investigate, analyse, recommend remediation, implement security controls, verify remediation, and document M...

Job Title: Cybersecurity & Digital Forensics Expert Job Type: Contract Location: Remote Experience: 5+ years Job Description We are looking for an experienced Cybersecurity & Digital Forensics Expert to investigate cyber incidents, identify suspicious activities, trace network activity, and support authorized investigations involving compromised systems, accounts, and devices. The ideal candidate should have strong hands-on experience in ethical hacking, penetration testing, digital forensics, OSINT, network security, IP analysis, and incident response. Key Responsibilities Investigate cybersecurity incidents, unauthorized access, suspicious accounts, and potential security breaches. Perform IP address analysis and authorized IP geolocation to determine the approximate geograp...

I’m building a fully-featured fintech website and need an experienced developer to take it from concept to production. The platform must let end-users create an account, sign in with a traditional email-and-password flow, and then manage their finances through an elegant, mobile-responsive interface. Core modules will include user authentication, personalised dashboards, payment or transaction handling, rich data visualisations, and a lightweight admin panel. Strong application-level security (OWASP best practices, encrypted credentials, rate limiting) is mandatory, as is fast performance on both desktop and mobile. My preferred stack is React or on the front end, backed by Node.js or Python services that talk to a PostgreSQL database and external payment/banking APIs. I inten...

Senior Technical Auditor for I am looking for an experienced senior full-stack technical auditor to conduct an independent review of an existing bilingual Saudi offers and loyalty platform called Chance Plus. The platform is currently live and deployed in production. This is not a new development project and I am not requesting a rebuild. The initial task is strictly to review, test and report on the existing implementation before onboarding the first real store. Technology stack: TypeScript React and Vite Node.js and Express PostgreSQL Drizzle ORM and database migrations REST APIs and OpenAPI Progressive Web App (PWA) GitHub, pull requests and CI/CD DigitalOcean App Platform and Managed PostgreSQL Arabic and English interfaces, including RTL support Platform structure: Custo...

Looking for a certified and experienced cybersecurity professional or security testing company to conduct VAPT (Vulnerability Assessment and Penetration Testing) for a web application and its APIs. Only applicants with proven VAPT experience and relevant cybersecurity certifications will be considered. Scope Web Application VAPT REST API VAPT WebSocket API VAPT Grey-box testing Multiple user roles Approximately 20 API endpoints Requirements Proven experience conducting professional VAPT for web applications and APIs Relevant industry-recognized cybersecurity certifications Strong knowledge of OWASP and modern web/API security Ability to provide a professional, detailed VAPT report Previous VAPT experience and sample/redacted reports preferred Deliverables Comprehensive VAPT report Vuln...

Project description: A modern, professional and user-friendly digital platform designed to bring professionals, businesses and opportunities together in one place. It will include professional profiles, networking, job opportunities, business connections, messaging, service listings, project opportunities, reviews, verification features, notifications and secure communication. The platform will focus on a clean premium design, smooth navigation, strong performance, scalability and an excellent experience across mobile and web.

Google/Gmail Account Recovery Assistance Needed I need help recovering access to an old Google/Gmail account that belongs to us. We currently have: the exact Gmail address; the last known password that was used on the account; some knowledge of the account's previous usage/history. We no longer have: access to the old recovery phone number; access to a recovery email; access to previously trusted/logged-in devices. I am looking for someone who has real experience with Google Account Recovery, especially difficult cases where the recovery phone/email and trusted devices are no longer available. I need someone who can: Review the current situation and determine what legitimate recovery options may still be available. Guide us through Google's official account recovery proce...

Project brief for freelancers and agencies 1. PROJECT OVERVIEW We are looking for an experienced WordPress designer and developer to create a modern, professional, responsive and user-friendly website for 2AEU KGO, the alumni association of Université Peleforo Gon Coulibaly (formerly URES Korhogo), Côte d'Ivoire. The association was legally constituted on 29 August 2026 and is governed by an elected Executive Board. Our members live in Korhogo, in Abidjan, across Côte d'Ivoire and abroad. The website will become the official home of the association. Website language: FRENCH. All content is supplied by us in French, and the entire interface menus, forms, error messages, automated e-mails must be correctly labelled in French. The technical structure must allo...

I need a thorough security assessment of both our public-facing web applications and the underlying network infrastructure. For the web layer, your testing must zero-in on two critical areas—Authentication & Authorization and Input Validation—so we can be confident that user identities are protected and no injection or validation bypass is possible. On the network side, I’m looking for the classic internal and external penetration workflow: reconnaissance, vulnerability discovery, exploitation, and clear remediation guidance. Deliverables • Executive summary that highlights overall posture and business risk • Technical report detailing: – Findings for Authentication & Authorization – Findings for Input Validation – Networ...

I’m preparing to run a large-group session on Zoom and need a live, practical walk-through of everything an large meeting can (and cannot) do. During a real-time screen-share, guide me step by step so I can click along with you and build the muscle memory. My priorities are understanding how to manage participants smoothly—assigning co-hosts, controlling entry, and fine-tuning security and engagement tools—plus unlocking the more advanced features that make a big gathering feel effortless. I also want to make sure all the critical settings are configured correctly both before we go live and while the meeting is in progress. If you know Zoom inside out and enjoy teaching hands-on, let’s schedule a session that leaves me confident, organized, and ready to host w...

My Linux-based web server has been hit with malicious, unfamiliar files and scripts. I need a system administrator who can track every infection, remove it completely, and then perform a fresh installation and configuration of Imunify360 so the machine is once again hardened and monitored in real time. cPanel is available, SSH access can be granted, and downtime must be kept to a minimum while you work. Key deliverables: • Full scan, isolation, and removal of every malicious file or script • Fresh Imunify360 install with optimal settings, automatic updates, and firewall enabled • Brief post-cleanup report detailing what was found, what was removed, and confirmation that Imunify360 is active and passing its own self-check I’ll be on hand for quick credential e...

My home network has been compromised. I need an expert to: - Diagnose security breaches - Identify and remove unauthorized devices - Secure my Wi-Fi and connected devices - Provide guidance on protecting myself from future attacks Ideal Skills & Experience: - Strong background in cybersecurity - Experience with home network security - Ability to explain technical concepts clearly - Trustworthiness and professionalism Please help me regain control of my digital life. I do suspect that the individual may have used something like apple buisness or cisco technologies to gain complete access and control over everything I do on a daily basis. Including revoking my access to my own information. I need someone who can look beyond the curtain and really understand that it is not just the dev...

My blog is invisible on Bing—none of the pages show up in the index even though the site is verified in Bing Webmaster Tools. I have already: • submitted the through the portal • requested manual URL indexing several times Despite that, the index count stays at zero. I need a specialist who can dig into the crawl diagnostics, spot whatever is blocking Bingbot, and guide me through the corrective steps so that the blog’s pages start appearing in search results. What success looks like to me: 1. Bingbot can crawl the site without errors. 2. Core pages are indexed and visible in a Bing “site:” query. 3. You provide a brief report outlining what was fixed or optimized (, meta tags, sitemap structure, server response codes, etc.) so I can maintain it go...

I need an experienced full-stack engineer who can give special attention to the backend of my platform and raise its security posture across the board. The frontend is in decent shape, but the core services, data layer, and deployment pipeline all need a careful redesign so that every request, record, and secret is handled with industry-grade protection. Here is the outcome I’m after: • A fresh backend architecture that scales cleanly and is resilient against common threat vectors. • End-to-end authentication and authorization flows, encrypted at rest and in transit. • Well-structured APIs with input validation, rate limiting, detailed logging, and automated tests. • Infrastructure-as-code or container scripts so I can spin up identical, hardened environme...

More details: Which platform would you like to migrate your website to? WordPress What functionality do you want to ensure is transferred from your current website? It contains videos, forms and general lead capture Do you need any additional features to be added during the migration? This question was skipped by the user