Incident Response Jobs

Areas of Expertise / Training Scope Information Security Fundamentals Governance, Risk & Compliance (GRC) IT General Controls (ITGC) Information Security Risk Management Third-Party Risk Management (TPRM) Information Security Audits (Internal & Compliance) ISO/IEC 27001:2022 Implementation & Internal Auditing SOC 2 Type I & Type II Compliance NIST Cybersecurity Framework & NIST SP 800-53/171 Overview SEBI CSCRF & Indian Financial Regulatory Compliance Security Policies, Standards & Procedures Risk Assessment & Risk Register Management Vulnerability Assessment & Remediation Tracking Identity & Access Management (IAM) & User Access Reviews Change Management, Patch Management & Backup Controls Business Continuity & Disaster Recovery (BCP/DR)...

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

I need a CISA-, DISA- or CERT-In-qualified professional to steer our young insurance brokerage through every stage of the IRDA Cyber Security Audit required for account renewal. At present we have virtually no formal artefacts, so you will be building the full documentation suite from the ground up. Core items include our cybersecurity policies, incident-response plans, access-control procedures and any additional processes the audit checklist demands. You’ll be free to introduce industry-standard frameworks and tooling provided they satisfy IRDA guidelines. Once the documents are in place I also want your guidance during the actual compliance cycle—answering auditor queries, closing gaps, and keeping the material evergreen for future renewals. If you already work with an aut...

Especialista en Ciberseguridad / Forense Digital – Detección y Análisis de Malware / Spyware en Windows (Remoto) Descripción: Busco un profesional con experiencia comprobable en análisis de malware, respuesta a incidentes o informática forense para auditar un equipo con sistema operativo Windows ante sospechas de software espía (spyware) o persistencia no autorizada. Objetivos del servicio: Realizar un triaje inicial y análisis de persistencia (tareas programadas, servicios, entradas de registro, extensiones). Analizar procesos en memoria y tráfico de red saliente para descartar conexiones C2 o exfiltración de datos. Identificar y aislar artefactos maliciosos si los hubiera (análisis estático/din&aacut...

Senior .NET Developer (Backend + Azure DevOps) Location: Chandigarh / Mohali (Hybrid/Remote) | Type: Full-time | Experience: 6+ Years The Role We are looking for a Senior Backend Engineer to join our core team and take ownership of a live, multi-portal web application. This isn't a spec-driven, cog-in-a-machine role. You will be stepping in to audit an existing ASP.NET Core codebase, stabilize the production environment, and lead the architecture for new enterprise features. If you enjoy the detective work of untangling unfamiliar code and the satisfaction of building scalable Azure infrastructure from scratch, this is for you. What You'll Do Codebase Rescue & Audit: Dive into an existing ASP.NET Core application to identify security gaps, structural flaws, and architectu...

I need a comprehensive vulnerability assessment and penetration test performed on my production web application. Because I can grant limited internal knowledge—such as architecture diagrams, sample credentials, and API documentation—I would like the engagement run as a grey box exercise rather than pure black-box reconnaissance. 1 External VA/PT - 4 public IPv4/region - Full manual validation through WAF/security stack 2 Internal VA/PT - 10 segments / 250 live IPs - Credentialed + non-credentialed testing 3 Web Application — Virtual Trust - 1 app / 20 modules / 10 roles - Grey/white box + targeted production validation 4 Web Application — CrimsonLogic - 1 app / 20 modules / 10 roles 5 API Security 50 endpoints base - Full OWASP API Top 10 + business logic 7 Confi...

I’m ready to invite an experienced ethical hacker to run a full-scope security assessment on my live application. Your mission is to simulate real-world attacks, identify every meaningful vulnerability, prove exploitation with clear evidence, and outline practical remediation steps. Here’s what I need from you: • A mutually agreed test plan that follows industry standards such as OWASP and NIST, tailored to the specific tech stack I will disclose once an NDA is in place. • Active exploitation of discovered weaknesses (no destructive methods) and thorough validation of each finding. • A concise executive summary plus a detailed, step-by-step technical report that includes risk ratings, reproduction steps, impacted components, and prioritized mitigation advice...

Looking for an experienced developer/security tester to analyze an OTP-based login system on a website that I am authorized to test. I need someone who can review the website’s OTP authentication workflow, identify security weaknesses, and suggest a secure way to streamline the authorized login process. Requirements: OTP login workflow analysis Website/API security testing Authentication flow review Security vulnerability assessment Clear report of findings Only authorized security testing. No unauthorized access or credential bypass.

I’m putting together a comprehensive design document for a Fortinet-based SOC and need an experienced hand to shape both the dashboard layout and the underlying log-analysis blueprint. The end product must keep incident response front and centre while covering the full spectrum of threat detection, anomaly detection and user activity monitoring use cases. Here’s what I need you to produce: • Dashboard design schema that shows exactly which widgets, data sources and visualisations will surface the highest-value indicators for incident responders. • A written blueprint for parsing and normalising Fortinet logs, including field mappings, enrichment steps and correlation logic that supports the above use cases. • Clearly defined manual triage procedures: step-b...

Hello my name is CJ and I’m in need of serious assistance due to my pc getting hacked and need to make sure the steps I’ve done erase everything they installed down to the process.