Hire the Best Certified Information Systems Security Professional (CISSP) in Dhaka, BD

I'm a cybersecurity professional with hands-on SOC operations experience across Microsoft 365 and Azure environments. I help businesses detect, triage, and respond to security threats every day — from suspicious sign-ins and impossible-travel detections to phishing analysis and endpoint incident response. WHAT I DO: • SOC L1/L2 triage — review SIEM and EDR alerts, classify allow / watch / deny, escalate to L2/L3 with full evidence and timeline • Incident investigation — 50+ incidents closed end-to-end across endpoint, identity, and email vectors • Multi-tenant operations — administered security controls across 25+ Microsoft 365 client environments • Identity protection — Entra ID, Conditional Access, Privileged Identity Management (PIM), MFA, suspicious sign-in detection • Email security — phishing analysis, Safe Links / Safe Attachments, SPF / DKIM / DMARC, header analysis with PhishTool • Detection engineering — custom Wazuh rules, Microsoft Sentinel analytics, MITRE ATT&CK mapping, Sigma rules TOOLS I WORK WITH: Microsoft Sentinel • Microsoft Defender XDR • Defender for Endpoint • Wazuh • Splunk • The Hive • Microsoft Intune • Microsoft Entra ID • Microsoft Purview • Autopsy • Volatility • FTK Imager • Burp Suite • Nmap • Metasploit CERTIFICATIONS: • Microsoft AZ-500 — Azure Security Engineer Associate • Microsoft SC-200 — Security Operations Analyst Associate • Microsoft AZ-900 — Azure Fundamentals • Blue Team Level 1 (BTL1) — Security Blue Team • Certified Cyber Defender Level 2 (CCDL2) • Security Analyst Level 1 (SAL1) • CompTIA Security+ • Junior Penetration Tester (PT1) IN PROGRESS: HTB CPTS • CompTIA CySA+ • CompTIA PenTest+ • Certified Kubernetes Administrator (CKA) WHY CLIENTS HIRE ME: • Honest classification — I don't false-positive everything to look busy, and I don't miss real threats • Documentation discipline — every ticket has complete evidence, timeline, and remediation context • Shift coverage — comfortable with US business hours from Bangladesh (GMT+6) • Communication — clear written English, clean shift handovers, structured incident reports AVAILABLE: 30+ hours per week, starting immediately. Open to short paid trial tasks so you can verify the technical fit before committing.

CISSP # 656127, CISA # 221975667, ISO 27001 Lead Auditor # ISLA1050658-2019-10, EC Council Certified Security Analyst # ECC8915320746, GDPR Course completed from (ISC)2. More than 16 years of experience in IT Industry. Among which around 7 years is focused on Information System Security and Risk management. Key expertise on Development, Implementation, Monitoring, Operation and Review of Information System Security Governance, Risk Management and Compliance and operation. Specialization: • Development and review of Information Security and Risk management Policy, procedure and Guideline • Information Technology Risk management • ISO 27001: Information Security Management System • ISO 27005: Information Security Risk management standard • NIST Risk Management framework SP 800-37 • Incident management • Risk based IT Audit • COBIT 2019 • Vulnerability assessment and penetration testing. • Security Solution SIEM, NDR • Information Security Awareness Program • Design, Study, Analysis and Review Software Security architecture • Design, Study, Analysis and Review Network Security • IT Security Trainer

Hello, and welcome to my Upwork profile! I'm an experienced offensive cybersecurity expert with over 12 years of experience in penetration testing and cybersecurity management. My expertise lies in identifying and exploiting vulnerabilities in complex systems and networks, as well as designing and implementing security solutions that mitigate these risks. I'm well-versed in a wide range of offensive cybersecurity techniques, including: Network and Web Application Penetration Testing Mobile Application Penetration Testing Vulnerability Assessments Red Teaming Exercise Social Engineering Physical Security Testing Wireless Security Testing Cloud Security Testing API Security Testing In addition to my technical skills, I also have extensive experience managing cybersecurity teams and projects. I'm well-versed in industry standards such as ISO 27001, NIST, and PCI-DSS, and I can provide guidance on compliance requirements as well as best practices for cybersecurity management. I'm a self-motivated and detail-oriented professional who takes pride in delivering high-quality results on every project I work on. I'm also a clear and effective communicator with experience presenting technical findings to both technical and non-technical audiences. If you're looking for an experienced offensive cybersecurity expert to help secure your organization's assets, look no further. I'm confident in my ability to provide top-notch cybersecurity services that will help you identify and mitigate the risks facing your organization. Contact me today to learn more about how I can help!

I specialize in Cybersecurity, Governance, Risk & Compliance (GRC), ISO 27001, PCI DSS, Cloud Security, Microsoft Security, Security Assessments, and Penetration Testing. With over 7 years of practical experience, I help organizations identify risks, strengthen security controls, achieve compliance, and prepare for successful certification audits. My expertise spans vulnerability assessments, penetration testing, security architecture, risk management, security documentation, internal audits, Microsoft security technologies, identity and access management, cloud security, SIEM, Windows/Linux administration, and regulatory compliance. I combine technical expertise with business-focused security strategies to deliver practical, scalable, and audit-ready solutions for organizations of all sizes.

ISO 27001 Lead Auditor, PCIP, CEH, SOC 2 Consultant & Vanta-Certified Admin who takes teams from “we think we’re secure” to audit-ready in 45 days or less. What I deliver: • ISO 27001:2022 gap analysis → SoA & full ISMS • PCI DSS v4.0 readiness (SAQ, ROC, compensating controls) • SOC 2 Type I/II scoping, evidence mapping, policy packs • GDPR data-flow mapping & DPIA support • HIPAA Security Rule guidance (on request) • Fast implementation via Vanta, Drata, Scrut, Secureframe, Tugboat—whichever platform you use Recent wins • 3 ISO 27001 + 2 PCI DSS certifications in 2025 — all first-pass • Built a SOC 2 Type II program for a SaaS startup in 30 days • Cut audit findings from 18 → 0 for a FinTech in one review cycle How I work • 30-min discovery call • Fixed milestones (gap, docs, internal audit) • Live progress dashboard (Vanta/Drata/Scrut/excel) + weekly sync Ready to ditch compliance guesswork? Invite me to your job and let’s chat.

I'm Mustafiz. With over 5 years of hands-on experience in cybersecurity, I have designed and implemented cybersecurity solutions for both financial and non-financial organizations, as well as provided VAPT services. I have honed my skills to provide you with top-notch protection against evolving cyber threats. your trusted Cybersecurity Expert, ready to safeguard your online world. My Expertise. VAPT Network Security and Traffic Analysis Data Encryption & Privacy Solutions Malware Detection & Removal Cybersecurity Training & Awareness Programs Incident Response & Digital Forensics SIEM and IDS Configuration and Deployment SOC Deployment OSINT. What I Offer: Based on VAPT results, I'll provide comprehensive report on testing result and guide you security solutions. This may include setting up SIEM, intrusion detection systems (IDS), and endpoint protection, EDR, XDR, SOC. I'll guide you on best practices to safeguard your digital infrastructure.