Linux Security Analysis

I have a server that needs a security analysis performed and solutions for vulnerabilities provided. The server is running the following software stack.
Oracle Enterprise Linux 5.6
Oracle XE Database
Oracle Glassfish 3.1.2
Oracle Application Express Listener

Qualified applicants will have an advanced knowledge on how to secure the Linux OS and Glassfish Application Server. Basic understanding of Oracle XE Database and Oracle Application Express Listener is preferred.

Documentation of commands to lockdown server must be provided. So lockdown can be validated and duplicated.

Server must still provide functions needed after security lockdown is performed.

Remove unneeded services
Configure Glassfish to run on port 80.
No SSL is needed.

Be able to access website.
Be able to login to server with ssh.
Be able to administer server.


Optional:
Basic security analysis of the Application Express Listener application.
Hard drive encryption – prevent the drives from being removed and read from another computer.
Script to automate lockdown – This will serve as documentation if it has sudo code notes.


Server will be provided in the form of a VMware OVF/OVA.