Comprehensive Cybersecurity Audit & Penetration Testing for Web Application and Network Infrastructure

I'm looking for a cybersecurity expert or team to perform a comprehensive penetration test and risk assessment for our organization's web application and cloud infrastructure. This includes evaluating our current security posture, identifying technical vulnerabilities, and ensuring compliance with industry standards. While we have security measures in place, we aim to proactively strengthen our systems.

Ideal Skills and Experience:
Strong background in penetration testing and ethical hacking
Experience with cloud security (Azure, AWS, GCP)
Familiarity with SIEM tools like Microsoft Sentinel or Splunk
Hands-on experience with OWASP Top 10 and CVSS scoring
Ability to generate technical and executive-level reports
Certifications such as CEH, OSCP, CISSP, or ISO 27001 (preferred)
Optional: Experience with GRC frameworks, risk assessments, and phishing simulations

Responsibilities:
Conduct black-box and gray-box testing
Perform vulnerability scanning using industry-standard tools (Nessus, Burp Suite, Nmap, etc.)
Review cloud configurations and IAM policies
Provide remediation strategies and best practices
Deliver a comprehensive report with PoCs and remediation plans