Independent Python Security Reviewer — Synthetic Data Integrity & Security Assurance -- 2

We are seeking a practical, independent technical reviewer who can complete the mandatory synthetic security verification within a modest fixed-price budget. Optional follow-on work will be considered and commissioned separately.

Mandatory skills:

Mandatory
• Python 3 secure code review, unittest and/or pytest
• SHA-256 hashing, file-integrity and deterministic processing
• JSON, CSV, Git/GitHub commit and source verification
• Independent reproducibility, security-control assessment and clear reporting

Desirable:
Secure software supply-chain and CI/CD security practices
• Privacy-by-design and security auditing
• OWASP principles and automated data-protection control review

Please see attached file for all information you would need.

Please do let me know if you have further questions.

NB

Thank you for your interest in our Independent Python Security Reviewer project.

Before shortlisting candidates, please answer the following questions.

**1. Independent SHA-256 Verification**

If a Python application generates a SHA-256 checksum and all 64 automated tests pass, how would you independently establish that the checksum is trustworthy rather than simply matching a developer-controlled reference?

**2. Independent Test Reproduction**

How would you independently reproduce and verify the Python tests in a clean environment? What evidence would you provide to demonstrate reproducibility?

**3. Reference Integrity and Security**

How would you verify that a synthetic-data reference cannot be silently modified, replaced or manipulated by the developer-controlled implementation?

**4. Negative Testing**

What tests would you perform to confirm that missing, altered, unapproved or invalid reference files are correctly rejected?

**5. Relevant Experience**

Have you previously conducted independent Python security reviews, cryptographic integrity verification or software assurance assessments? Please provide a brief example.

**6. Mandatory Deliverables**

Can you confirm that your quotation includes all six required deliverables?

- Test Verification Report
- Integrity Verification Report
- Security Assessment Report
- Findings Register
- Independent Review Decision
- Signed or attributable Reviewer Declaration

**7. Independence and Confidentiality**

Can you confirm that you are independent of the original development work and agree to work exclusively with approved synthetic data under confidentiality and restricted-access conditions?

**8. Price and Timescale**

Please confirm your final fixed price in USD and estimated delivery time.

Our budget is **$70–$150 USD**, and the expected completion period is 3–5 working days.

Your quotation must cover Mandatory Milestone 1 (SEC-014-01) only. Additional security reviews, including SEC-014-02 and SEC-014-03, are excluded and may be commissioned separately.

Please provide concise but technically specific answers. We are looking for genuine independent verification experience rather than general assurances.

Thank you.