Security Expert - technical writing - API infrastructure

I am looking for a cyber security expert to help me describe security issues with the implementation of an event-driven architecture as opposed to SOA. (examples+explaination+solution ). Especially hacking of APIs scenarios and how to utilize architecture as part of the safeguarding. The product is a document describing the two different architectures (SOA + event driven) and how the api hacking works and the possibilities to place backdoor files (webshells) and minimum 5 examples of safety breaches.