1. Python development: Rich experience in distributed Python applications and web applications development using Django, Pyramid, and Celery. Released several mobile Python applications (kivy). 2. Security Assessment: I have a huge experience in vulnerability research and security assessment (currently this is my main occupation). Reached the top in many hacking contests, including DEF CON CTF. I usually specialize in web application security, however, I am experienced in network, database, cryptography and other security areas. Disclosed security advisories for many vendors including: - Cisco - Citrix - Yandex (Entered Bug Bounty Hall of Fame) - SAP - Qiwi 3. Game Development: Have an experience in game design and development using Game Maker Studio.
Penetration Testing Job Cost Overview
Typical total cost of oDesk Penetration Testing projects based on completed and fixed-price jobs.
oDesk Penetration Testing Jobs Completed Quarterly
On average, 12 Penetration Testing projects are completed every quarter on oDesk.
Time to Complete oDesk Penetration Testing Jobs
Time needed to complete a Penetration Testing project on oDesk.
Average Penetration Testing Freelancer Feedback Score
Penetration Testing oDesk freelancers typically receive a client rating of 4.43.
I'm a beginner developer and information security researcher. I had the experience of commercial development of several projects for data processing, protection of intellectual property. In addition I have participated in several non-profit projects on finding vulnerabilities in web applications and desktop PO. I'm serious about becoming a professional, so doing the job right, it is important for me. I also have some experience in the following areas: Malware analysis, OOP, and software design.
Experienced with IT industry’s best practices in the security program, project, and risk management areas including NIST Special Publications, Federal Information Processing Standards, Federal Information Security Management Act, NISPOM, DITSCAP, and International Standards for Organization 27001, HIPAA, Disaster Recovery, Business Continuity, GLB, Visa CISP SEC Rules, PCI-DSS, NASD Rules, and NYSE Rules. Including extensive experience in a variety or project management methodologies (PMP BoK, Prince2, Scrum, Agile, Waterfall, etc.) Outstanding leadership and team building skills resulting in effective working relationships and top performance among staff. Extensive project management experience in turning security concepts and ideas into delivered solutions. An excellent communicator between technical and business units who can translate complex information into easily understood terms.
Francesco Ongaro is an Italian security expert and Hacker, living in Verona (the city of Romeo and Giulietta), specialized in Network and Web Application Penetration Tests. He performed several hundred of technical activities over the years for many of the most important and exposed costumers in the private, public infrastructure, finance, banking, insurance and media fields. His research and advisories are published on USH (www.ush.it) and he founded an independent Tiger Team under the ISGroup (www.isgroup.it) umbrella. Senior Security Researcher at ISGroup (http://www.isgroup.it/), IT Security Outsourcing company. CEO at USH (http://www.ush.it/), IT Security research team. IT/ICT Security - Vulnerability Assessment (VA) - Network Penetration Testing (NPT) - Social engineering - Web Application Penetration Testing (WAPT) - Ethical Hacking - Security engineering - White box Architecture, Application, Database and Code Review - IT Security Standards and Best practices Audit - IT Security Policy and Documentation Audit - Reverse Engineering - ISO 20000 / PCI DSS / NIST / COBIT - Information Risk Management - Disaster Recovery (DRP/BCP) - IT Audit & Compliance Management - Secure development - Project management
Prevention is my main goal, to ensure everything is working good and to lessen conflicts and troublesome to our beloved customers. I'm learning and still developing my skills in the field of web development and programming which I am a Computer Science Graduate for 4 years, but my experience is more on hardware and networking. I'm interested on exploring new things as a challenge, and willing to learn. - Cloud Tools Experiences - * Vagrant * Chef - Languages Capabilities - * RubyOnRails * Python * PHP * Bash / Powershell - Web Developments - * Wordpress * Drupal * Joomla * NGINX * Apache * MySQL * PHP
Over the last 5 years, I have developed a wide range of websites using HMTL, DHTML, PHP, and MySQL including sites for start-up companies and small businesses. My core competency lies in complete end-end management of a new website development project and managing the security of web applications, and I am seeking opportunities to build websites from the ground up for you or your business. If you need IT Security Services or Web Application and Server Security Assessment, I can also help you. I also have some experience in the following areas: SQL, Ajax, OOP, and software design and testing, Web Application Security Assessment, Information Security Evaluation and Auditing. Disaster Recovery and Business Continuity Planning.
SKILLS & COMPETENCIES • Exceptional problem-solving skills to identify issues and implement solutions • Advanced experience with Linux in regards to server administration, configuration, and teaching • Utilizing Skype video and voice chat to provide technical support assistance • Adept in remote access solutions (virus removal and technical support) INFORMATION TECHNOLOGY & SOFTWARE EXPERTISE Software & Mobile Platforms • Windows 95, XP, Vista, 7, 8, Windows Server 2008 • Linux/Unix: Ubuntu, Fedora, Debian, Backbox, Backtrack, Arch, Kali, PC-BSD • Android, iOS, BlackBerry OS 6 • Microsoft Office XP, 2003, 2010, OpenOffice, LibreOffice Security & Networking • Threat Assessment/Risk Analysis, Business Continuity & Disaster Recovery Planning • Wireless Penetration Testing & Open Source Intelligence Gathering (OSINT) • Port Forwarding, Firewalls, General Troubleshooting Virtualization • Virtual OSE (built and cloned) • Windows and Linux Virtual Machines Programming • Exposure to Python 2.xx and 3.xx
Hello. I am certified ethical hacker, in the last 3.5 years I have managed to resolve some really hard tasks that involved hosting companies, banks, state administration systems, and I think I can manage to the end your task as well. I'm a hard workers; out-of-the-box thinker and love to make things secure. I'm not utilizing the standard tools; but provide excellent work with manual testing and detailed reports. With very well documented advisories and guides to fix problems.
Over the last 3 years, I have work in a wide range of software,application, tools using Windows and Linux. My core competency lies in complete end-end management of a new development project, and I am seeking opportunities to build something new from the ground up for you or for your business. I have experience in the following areas: Python,Web Scraping using BeautifulSoup 4, OOP,Automation Script, Penetration testing,Network Security and last but not the least Metasploit in Backtrack and Nessus.
Core Information Security Experience 4 years. I always communicate and deliver quality work on time. I work as an Application Security Analyst. I do security reviews on daily basis which involving application code review and penetration testing. Security reviews are done against the OWASP Top Ten Vulnerabilities and code reviews done according to the secure coding best practices. With my previous employment i have worked as a software programmer and also i have good experience in Linux System Administration. My free time i utilize for interesting projects which involve embedded devices (raspberry pi, arduino, microcontroller)