Incident Response Jobs

My WordPress site is currently offline after malicious files were discovered on the server. I need it cleaned and brought back online, but more importantly I want to stop this from ever happening again. The immediate focus is firewall and server-side security; user authentication tweaks and data-at-rest encryption can follow once the house is no longer on fire. There are no security plugins installed yet, so you’ll be working from a clean slate. Feel free to recommend and configure the tools you trust most—Wordfence, Sucuri, ModSecurity, Fail2Ban, or a custom stack—as long as the final setup keeps attacks out and performance intact. Acceptance criteria • Every malicious file and injected line of code is removed, with the site fully functional and reachable. &bu...

I have a single Windows executable that I need examined from every angle so I can decide whether it is safe to install on production machines. I want both static analysis (disassembly, signature checks, entropy review, strings inspection, etc.) and dynamic analysis in an isolated sandbox to see what it really does when it runs—file, registry, network activity, privilege escalation attempts, the works. My main worries are straightforward: hidden malware or viruses, any behaviour that could leak data or compromise privacy, and anything that might harm overall stability or performance. I don’t have a fixed toolkit in mind, so feel free to recommend the combination you trust most—IDA, Ghidra, x64dbg, Wireshark, ProcMon, Cuckoo Sandbox, or other proven options are all accep...

I need a seasoned cloud-security specialist to give my Oracle Cloud Infrastructure and Google Cloud Platform estates a thorough health check, then guide me toward a Zero Trust posture. First, you will assess both environments end-to-end—identity and access, network controls, data-at-rest and in-transit encryption, logging/monitoring pipelines, and workload configuration—mapping every finding to current best practice and the relevant CIS Benchmarks. Next, I expect a concise report that clearly separates quick-win remediations from deeper, strategic fixes. Each item must carry a risk rating, the exact remediation steps, and any references to supporting documentation or Terraform snippets where useful. Finally, translate the recommendations into a phased Zero Trust Network ...

Devo sottoporre la mia rete aziendale a un test di penetrazione esterno per individuare e correggere eventuali vulnerabilità prima che lo facciano i criminali informatici. Cerco un professionista della sicurezza informatica con comprovata esperienza in penetration testing su infrastrutture corporate. Il focus è esclusivamente sul perimetro esterno: firewall, VPN gateway, servizi esposti in DMZ e qualsiasi altra porta o applicativo accessibile da Internet. Mi aspetto che tu: • conduca la fase di information gathering e scanning (ad es. con Nmap, Masscan) • esegua l’exploitation controllata con strumenti come Metasploit, Burp Suite o analoghi, mantenendo traccia di ogni passo • rediga un report tecnico in italiano che includa: descrizione delle vuln...

I want a seasoned penetration tester to put my PHP site through its paces and uncover every weakness, from classic SQL Injection and XSS to more sophisticated remote-code tricks. The public-facing pages matter, but my priority is the admin panel. Within that area I rely heavily on three features—CRUD data operations, role and permission management, and a file-upload module—so those have to be stressed especially hard. Your job is to simulate real-world attacks with tools of your choice (Burp Suite, OWASP ZAP, manual source review, custom exploit scripts—whatever gets the most reliable results) and then document each vulnerability with a clear proof-of-concept, reproducible steps, severity rating, and a practical fix I can hand straight to my developer. Deliverables &b...

Hace poco violaron mi cuenta de Google y, aprovechando el acceso, cambiaron la contraseña y el correo asociados a mis perfiles de Rockstar Games y Microsoft. Mi prioridad urgente es volver a entrar en la cuenta de Rockstar Games; ahí tengo compras in-game y progresos que representaron inversión de dinero real. Situación actual • Ya intenté contactar al soporte de Rockstar Games pero no obtuve respuesta. • No tengo ningún tipo de acceso a la cuenta de Microsoft vinculada; tampoco dispongo de dispositivos conectados. • El correo original de Google quedó fuera de mi control. Lo que necesito 1. Análisis rápido de la ruta de recuperación más viable para Rockstar Games (verificación de identi...

Title: Seeking Certified Digital Forensics Expert (CACE / ENCE / CCME) – Mobile Device & Social Media Analysis Job Description: We are seeking a certified Digital Forensics Examiner to perform a forensic extraction and analysis of a mobile device iOS and evaluate specific communications data for use in court proceedings. Key Responsibilities: Perform a full physical or advanced logical extraction using industry-standard tools (e.g., Cellebrite UFED, Magnet AXIOM, Oxygen Forensic Detective). Forensic Analysis of Phone Calls & Logs: Analyze cellular call history, incoming/outgoing logs, and device connection data to verify call placement, timestamps, and origin. Forensic Analysis of Instagram / App Artifacts: Analyze local database artifacts (SQLite DBs, app caches, sess...