A short-term opportunity is available for a skilled web developer to implement critical server security enhancements for a static website hosting an interactive virtual tour. The site will be embedded on a government transport platform, requiring strict adherence to security protocols and embeddability standards. The primary focus is on applying recommendations from a recent security assessment, including HTTPS enforcement, HSTS, CSP configuration, and header adjustments. This remote contract is ideal for professionals with a strong background in web infrastructure and server security, seeking a concise project with immediate impact.
Deliverables
* Implement HTTPS redirects and enforce secure connections across the site.
* Configure HTTP Strict Transport Security (HSTS) headers as per security report recommendations.
* Develop and apply a robust Content Security Policy (CSP) tailored to the site's requirements.
* Adjust cache control and charset headers to align with best practices and assessment findings.
* Ensure the website is embeddable on the specified client domain without security or functionality issues.
* Validate and document the resolution of all security findings prior to project completion.
Requirements
* Proven experience in web server configuration and security hardening for static sites.
* Strong understanding of HTTPS, HSTS, CSP, and HTTP header management.
* Familiarity with embedding web content within third-party domains and related security considerations.
* Ability to interpret and implement recommendations from security assessments.
* Detail-oriented approach with a commitment to delivering secure, compliant solutions.
* Availability for a short-term, remote contract (estimated 2–6 hours).
* Excellent communication skills and ability to document technical changes.
About Twine
Twine is a leading freelance marketplace connecting top freelancers, consultants, and contractors with companies needing creative and tech expertise. Trusted by Fortune 500 companies and innovative startups alike, Twine enables companies to scale their teams globally.
Our Mission
Twine's mission is to empower creators and businesses to thrive in an AI-driven, freelance-first world.
#J-18808-Ljbffr