A prospective customer has asked for a security review of our API and mobile backend. I need someone to test for the OWASP top ten, review authentication, permissions, secrets handling and server configuration, and give a prioritised list with fixes. We will remediate the high issues together and you retest. Findings stay confidential.

A large contract is waiting on the report.

Key Deliverables:

• Discovery & Initial Findings: Gathering access and information, reviewing the current situation, and sharing early findings for feedback.

• Report & Recommendations: Final written findings with ranked recommendations and a walkthrough of what to do next.

Requirements:

• Demonstrated experience with Security Audit, OWASP, Penetration Testing, Linux

• Quick turnaround needed — must be available to start within 24 hours.

• Zero interruption to current live traffic during any changes.

Please include links or examples of similar projects you've completed when submitting your proposal. Thanks!