Senior Web Security Expert Needed Active Exploits, Brute Force, Web Shell & Pentesting

We are looking for an experienced Senior Web Security / Cybersecurity Expert to investigate reliable and ongoing security issues affecting our production website and hosting environment.

Our website is currently experiencing multiple types of malicious activity and suspected compromise attempts, including:
Web shell attacks and possible web shell activity
cPanel attack / unauthorized access attempts
Backdoor attacks and possible persistent access mechanisms
Attempts to take over administrator accounts
Repeated brute-force attacks
Website and application vulnerability exploitation attempts
PHP-related attacks targeting multiple application paths/endpoints
Attempts to exploit vulnerabilities and gain administrator access through different PHP routes
Suspicious requests and repeated attempts to bypass existing security protections

We are concerned that attackers may be identifying vulnerabilities in the website or server setting and then using different attack paths to attempt to obtain administrator-level access. We need an expert who can help us understand how these attacks are occurring, whether the website/server has already been compromised, where the vulnerabilities are, and how the environment should be secured.





We are also interested in penetration testing / ethical hacking to identify vulnerabilities that may not yet have been discovered.

Relevant experience should include
Web Application Security
Penetration Testing
Vulnerability Assessment
Incident Response
Web Shell Detection & Analysis
Backdoor Detection
cPanel / Hosting Security
Brute-Force Attack Investigation
PHP Application Security
Administrator Account Compromise Investigation
Linux / Web Server Security
Log Analysis
WAF / Firewall Security
OWASP Top 10

The exact scope of work, priorities, access requirements, and security measures will be discussed with the selected expert after initial communication and review of the current situation. Because this is a live production workplace, any potentially disruptive testing or security changes must be discussed and approved before execution.

When applying, please briefly describe your experience with similar real-world attacks, compromised websites, web shells/backdoors, PHP security issues, administrator account takeovers, and penetration testing.

We are looking for someone with strong practical experience, not only automated vulnerability scanning.

📌 Expert Software Engineer Bengaluru
🏢 Oxtosdata
📍 Bengaluru