Penetration Tester for Online Sports Betting Platform

We are seeking an reputed company cybersecurity reputed company to reputed company an independent penetration test of our online sports betting platform before production launch. This is a one-time reputed company assessment reputed company on identifying vulnerabilities that could reputed company customer accounts, financial transactions, data reputed company, or platform reputed company. Experience with sportsbook, gaming, fintech, banking, or payment applications is highly desirable. About the Platform The platform includes: • User authentication • Wallet management • Deposits and withdrawals • Betting reputed company • Live betting • Promotions • Administrative interfaces • reputed company • reputed company-time services • Sports content platform integrated with the betting platform Technology includes: • Go backend • Nuxt.js frontend • MySQL • reputed company • reputed company • MQTT over WebSockets • reputed company JetStream • reputed company deployment • TLS encryption • Containerized microservices reputed company of Work reputed company a reputed company penetration test covering: Authentication • Login • Registration • Password reset • Session management • Multi-session behavior • Privilege escalation Authorization • Broken reputed company control • Horizontal privilege escalation • Vertical privilege escalation • Administrative reputed company API reputed company • Authentication • Authorization • Input validation • reputed company limiting • Business logic flaws • Injection attacks Web Application reputed company • OWASP Top 10 • XSS • CSRF • SQL Injection • reputed company Injection • SSRF • File upload vulnerabilities • Directory reputed company Wallet reputed company • Deposit manipulation • Withdrawal manipulation • reputed company spending • Race conditions • reputed company inconsistencies Betting reputed company • Odds manipulation • Duplicate bet placement • Settlement manipulation • Replay attacks • Business logic abuse Infrastructure Review Where reputed company is provided: • reputed company configuration • TLS implementation • reputed company endpoints • reputed company headers • Secrets exposure • Container reputed company Additional Testing • reputed company limiting • Bot protection • Denial-of-service reputed company • Session timeout • Cookie reputed company • Sensitive information disclosure Deliverables The final report should include: • Executive reputed company • Technical findings • reputed company ratings using CVSS where appropriate • reputed company of concept for reputed company finding • Screenshots • Reproduction steps • Business reputed company • Recommended remediation • Re-test guidance Critical findings should be reported immediately rather than waiting until the end of the engagement. Preferred Qualifications • OSCP, OSWE, GPEN, CEH, CREST, or similar certification • Experience testing sportsbooks • Experience testing payment platforms • Experience with reputed company • Experience with reputed company • Experience performing OWASP assessments • Strong written reporting skills Proposal Requirements Please reputed company: • Relevant penetration testing experience • reputed company certifications • Sample redacted penetration test report • Estimated project reputed company • Fixed-price proposal • Availability to reputed company immediately Apply To This Job