Expert Software Engineer

Senior Web Security Expert Needed Active Exploits, Brute Force, Web Shell & Pentesting

We are looking for an experienced Senior Web Security / Cybersecurity Expert to investigate serious and ongoing security issues affecting our production website and hosting environment.

Our website is currently experiencing multiple types of malicious activity and suspected compromise attempts, including:

• Web shell attacks and possible web shell activity
• cPanel attack / unauthorized access attempts
• Backdoor attacks and possible persistent access mechanisms
• Attempts to take over administrator accounts
• Repeated brute-force attacks
• Website and application vulnerability exploitation attempts
• PHP-related attacks targeting multiple application paths/endpoints
• Attempts to exploit vulnerabilities and gain administrator access through different PHP routes
• Suspicious requests and repeated attempts to bypass existing security protections

We are concerned that attackers may be identifying vulnerabilities in the website or server environment and then using different attack paths to attempt to obtain administrator-level access.

We need an expert who can help us understand how these attacks are occurring, whether the website/server has already been compromised, where the vulnerabilities are, and how the environment should be secured.

We are also interested in penetration testing / ethical hacking to identify vulnerabilities that may not yet have been discovered.

Relevant experience should include:

• Web Application Security
• Penetration Testing
• Vulnerability Assessment
• Incident Response
• Web Shell Detection & Analysis
• Backdoor Detection
• cPanel / Hosting Security
• Brute-Force Attack Investigation
• PHP Application Security
• Administrator Account Compromise Investigation
• Linux / Web Server Security
• Log Analysis
• WAF / Firewall Security
• OWASP Top 10

The exact scope of work, priorities, access requirements, and security measures will be discussed with the selected expert after initial communication and review of the current situation.

Because this is a live production environment, any potentially disruptive testing or security changes must be discussed and approved before execution.

When applying, please briefly describe your experience with similar real-world attacks, compromised websites, web shells/backdoors, PHP security issues, administrator account takeovers, and penetration testing.

We are looking for someone with strong practical experience, not only automated vulnerability scanning.