Пентестер, Спеціаліст з тестування на проникнення

Budget: 1000 USD Deadline: 10 days

Hello!

I can join your team part-time as a practical pentester, testing the system as an attacker but reporting as a partner so your engineers can quickly fix issues without unnecessary guesswork.

I have experience in external and internal testing, analyzing attack paths in Active Directory, as well as web application and API security. My reports are understandable for management while being detailed enough for developers to reproduce and fix the issue.

For externally internet-accessible systems, I will first check open services, exposure, and misconfigurations, then move on to targeted testing of web applications and APIs with careful confirmation of real impact.

For internal infrastructure, I can analyze privilege escalation paths and lateral movement, check network segmentation, and identify vulnerabilities in Active Directory, such as Kerberoasting, pass-the-hash scenarios, and risky GPO configurations.

I also perform quality retests, confirming that fixes truly resolve the issue rather than just masking the symptoms.

One idea that greatly helps teams is a Fix Ready pack for each critical finding. Along with the usual evidence, I include a short safe script for reproduction and a simple verification step that your team can perform after the fix. This makes retests faster and helps avoid repeating the same issue in future releases.

https://live.chatbullet.com
https://app.cookiecad.com Expand

Budget: 1000 USD Deadline: 30 days

Good day! I am ready to participate in the project as a Pentester (Information Security Specialist) on a part-time or project basis. I have practical experience conducting external and internal pentests, including complex infrastructures with Active Directory, web applications, APIs, and cloud environments. My experience and competencies include: Conducting External & Internal Penetration Testing (perimeter, VPN, RDP, mail gateways, web, API) Active Directory Security Assessment (Kerberoasting, Pass-the-Hash, Golden Ticket, DCSync, GPO attacks, privilege escalation, lateral movement) Web & API tests (OWASP Top 10, IDOR, SSRF, SQLi, XSS, Broken Access Control, business logic flaws) Cloud Security Assessment (AWS, Azure) Vulnerability Assessment + CVSS scoring Preparing quality reports: Executive Summary + detailed Technical Report with recommendations Retest after remediation Tools: Burp Suite Professional, Nuclei, Metasploit, Nmap, BloodHound, CrackMapExec, Impacket, sqlmap, ffuf, etc. I am familiar with MITRE ATT&CK, NIST, OWASP Testing Guide Certifications: OSCP (Offensive Security Certified Professional) eJPT Practical Web Pentesting Collaboration terms: Format: project work / part-time (20–40 hours per week) Payment: from $45–65 / hour (depending on project complexity) or fixed cost per project Timeline: ready to start within the next week I would be happy to discuss the details of your infrastructure, the scope of work, and expected results. I look forward to your response or an invitation for an interview. Sincerely,

Budget: 10000 USD Deadline: 111 days

Hello!

We are a cybersecurity and penetration testing team with hands-on experience in conducting external/internal pentests for web, network, and cloud infrastructures. We have strong technical expertise in security assessments, vulnerability management, and preparing detailed security reports for business and enterprise-level projects.

Our experience includes:

* external/internal penetration testing;
* Active Directory Security Assessment;
* web & API security testing (OWASP Top 10);
* cloud security reviews (AWS/Azure/GCP);
* vulnerability assessment and remediation validation;
* privilege escalation, lateral movement, and segmentation testing.

We work with tools such as Burp Suite, Metasploit, Nmap, Nessus, and other professional security solutions. We also have practical experience with CVSS, MITRE ATT&CK, NIST frameworks, and preparing clear Executive Summaries and Technical Reports with remediation recommendations.

The part-time/project-based format works well for us, and we are open to long-term cooperation. We would be happy to discuss your project requirements and propose the most effective collaboration approach for your needs.

Looking forward to hearing from you Expand

Budget: 1000 USD Deadline: 25 days

Good day

I am interested in your project. I have practical experience in penetration testing and security assessment: external/internal pentest, web & API security, Active Directory assessment, vulnerability analysis, and preparing technical reports.

I work with:
• Burp Suite, Nmap, Metasploit
• OWASP Top 10, CVSS, MITRE ATT&CK
• web/network/cloud security
• remediation tracking and retesting after fixes

I understand the importance of not only finding vulnerabilities but also providing quality documentation and clear communication with the team.

I can quickly get involved in the project:
initial security assessment — from 3–5 days depending on scope, full testing cycle and reporting — tailored to the volume of tasks.

I would be happy to discuss the details of our collaboration. Expand