Hire the Best Certified Information Systems Security Professional (CISSP)
in India

Hello! I'm Samarth, a Cyber Security Engineer and Ethical Hacker with a passion for safeguarding digital assets and securing online environments. I have done more than 27+ VAPT projects. With over 7 years of hands-on experience in the field, I've honed my skills working with esteemed enterprise companies such as Noreg Ltd and FedEx, where I've tackled complex security challenges head-on. 🛡️ Expertise: - Cyber Security Solutions - Ethical Hacking - Network Security - Malware Analysis - Cryptography - Social Engineering - Cloud Security - Identity and Access Management (IAM) - Security Operations Center (SOC) Management - Vulnerability Assessment - Penetration Testing - Incident Response and Digital Forensics - Web Application Security - Security Architecture Design 🎓 Certifications: - Certified Information Systems Security Professional (CISSP) - Certified Ethical Hacker (CEH) - CompTIA Security+ - Certified Information Security Manager (CISM) - Certified Cloud Security Professional (CCSP) - EC-Council Certified Security Analyst (ECSA) - Certified Offensive Security Expert (OSCE) - Offensive Security Certified Professional (OSCP) - Certified Information Systems Auditor (CISA) - GIAC Penetration Tester (GPEN) - Cisco Certified CyberOps Associate 💼 Previous Experience: - SaveAs Ltd (Senior Information Security Consultant, Auditor) - 2006 - Noreg Ltd. (Information Security Consultant, Auditor) - 2009 - AXA Group Hungary - Information Security Professional, IT audit manager - 2012 - Vodafone Group - Technology Security Project Manager - 2014 - TES Global Solutions - Lead Information Security operation consultant and architect - 2017 - BDO UK LLP - Information Security operation consultant and engineer - 2017 - FedEx - Global Security Operation Consultant - 2018 - Royal Bank of Scotland - Cyber Security Engineer - 2019 - Security-Consultan - Principal Security, Compliance and Certification consultant - 2022 🏆 Accomplishments: ➡️Successfully Conducted Advanced Penetration Tests on High-Profile Systems [Performed comprehensive penetration testing on critical infrastructure for clients, identifying and mitigating multiple high-risk vulnerabilities, which helped prevent potential data breaches and strengthened overall security posture.] ➡️Developed a Custom Exploit Detection System [Designed and implemented a proprietary system for detecting zero-day exploits in real-time, significantly enhancing the organization's ability to identify and respond to sophisticated attacks before they could cause damage.] ➡️Led a Major Incident Response and Forensics Investigation [Headed an incident response team during a high-profile security breach, quickly containing the threat performing an in-depth forensic analysis that led to the identification of the attacker's tactics, techniques, and procedures (TTPs), and the improvement of future defense strategies.] ➡️Achieved Industry-Recognized Certifications in Cybersecurity [Earned multiple certifications in cybersecurity and ethical hacking, including CEH, OSCP, and CISSP, which demonstrate a commitment to professional growth and expertise in identifying, assessing, and mitigating cyber risks.] I'm committed to delivering top-notch security solutions tailored to your specific needs, whether you're an individual, a small business looking to fortify your defenses, or a large enterprise seeking to mitigate sophisticated cyber threats. Let's collaborate to protect your digital assets and uphold the confidentiality, integrity, and availability of your information. Reach out to me today, and let's make your online environment secure!

I am an 7 experienced Cyber Security Specialist with a strong focus on protecting digital assets, securing networks, and identifying vulnerabilities before attackers do. I help businesses safeguard their systems, applications, and data against cyber threats while ensuring compliance with industry security standards. With hands-on experience across network security, application security, and cloud environments, I deliver practical and scalable security solutions tailored to business needs. ✅ What I Can Help You With 🔹 Vulnerability Assessment & Penetration Testing (VAPT): ============================================== Web & network vulnerability assessments Manual and automated penetration testing OWASP Top 10 security issues remediation 🔹 Network & Infrastructure Security: ============================== Firewall configuration & hardening IDS/IPS setup and monitoring Secure network architecture design 🔹 Web Application Security: ======================== Website & API security testing Secure authentication & access control Fixing SQL Injection, XSS, CSRF, and other vulnerabilities 🔹 Cloud & DevSecOps Security: ========================== AWS, Azure, GCP security best practices Cloud misconfiguration audits Secure CI/CD pipelines 🔹 Security Compliance & Risk Management: ==================================== ISO 27001, SOC 2, HIPAA, PCI DSS guidance Risk assessment and security gap analysis Security policies, SOPs, and documentation 🛠 Tools & Technologies: ==================== Burp Suite, Metasploit, Nessus, Nmap, Wireshark SIEM & log analysis Linux, Windows Security OWASP ZAP, Kali Linux Cloud security tools (AWS Security Hub, Azure Security Center) 💡 Why Clients Choose Me: ======================= ✔ Clear and actionable security reports ✔ Strong communication & quick response time ✔ Focus on real-world, business-friendly security solutions ✔ 100% confidentiality and ethical standards 🎯 How I Work : -------------------- 1.Understand your system, business, and risk level 2.Perform thorough security testing and analysis 3.Provide a detailed vulnerability report with fixes 4.Support remediation and re-testing If you’re looking for a reliable Cyber Security expert who takes security seriously and delivers real value let’s connect. 📩 Message me to discuss your project and secure your business today.

TOP RATED Freelancer | 10+ Years of Experience | Your Trusted Compliance Partner 75+ clients served all with 5 * ratings The best Consultant if you are using Vanta, Drata, Scrut or Secureframe They call me "Mr. Compliance- and for good reason. While you focus on growing your business, I take care of everything compliance-related, ensuring you meet industry standards and win more deals with confidence. Whether it's SOC 2, ISO 27001, HIPAA, PCI DSS, CMMC, or FedRAMP, I make compliance effortless so you can unlock new opportunities without the hassle. Why Clients Trust Me: - Seamless Compliance: I simplify audits, security assessments, and certifications—no stress, no delays. - Growth-Driven Compliance: Compliance isn’t just a checkbox; it’s a competitive advantage. I help shorten sales cycles by getting you audit-ready fast. - End-to-End Support: From policies to risk assessments, vendor due diligence, and security questionnaires—I handle it all. - vCISO Services: Need expert guidance but not ready for a full-time CISO? I offer affordable virtual CISO (vCISO) solutions tailored to your business. - Security Strategy & TPRM: Managing third-party risks? Struggling with cloud or endpoint security? I’ve got you covered. - Maximizing Compliance Tools: Already using Vanta, Drata, Hyperproof, or Scrut but unsure what’s next? Let’s optimize your investment. Proactive, not reactive. I don’t just tick boxes—I future-proof your security and compliance programs. ** Tools & Frameworks: 🔹 Tools Expertise: JIRA, Vanta, Hyperproof, Drata, ServiceNow, AWS, Confluence, Archer, Scrut Automation 🔹 Compliance Frameworks: ISO 27001, SOC 2, FedRAMP, NIST, HIPAA, PCI-DSS, CMMC, TPRM, and more 📢 Ready to Make Compliance Work for You? Click "Invite" to connect, and let's build a stronger, more secure, and audit-ready business together. ⚠️ Note: If you're not fully committed to compliance or tend to be unresponsive, I may not be the right fit. I prioritize working with businesses serious about security and compliance success.

CISM-certified Cyber Security Consultant with 9 years of experience implementing and managing comprehensive security solutions. Expertise in endpoint protection, SIEM solution, cloud security and penetration testing. I have a strong ability to assess, mitigate, and respond to complex security threats. I am experienced in leading security projects, creating tailored policies, and providing expert guidance to organizations of all sizes. Experienced in working with global teams across time zones, cultures, and languages AREAS OF EXPERTISE * Endpoint Protection * Threat hunting * SOC Architecture and Implementation * Cloud Security * Azure and Microsoft 365 Security * Vulnerability Assessment and Penetration Testing (VAPT)

Microsoft Azure/365 Platform Consultant has more than 24 years of serving customers using Microsoft technologies including Azure Infra and Security, Defender for Cloud, AD Assessment, Sentinel, Purview, Compliance, MS365, AWS, Google. Assisting for CMMC, HIPAA and NIST; Microsoft Certifications: ✔ Microsoft Certified: Azure Solutions Architect Expert ✔ Microsoft Certified: Identity and Access Administrator Associate ✔ Microsoft Certified: Azure Security Engineer Associate ✔ Microsoft Certified: Cybersecurity Architect Expert ✔ Microsoft Certified: Information Protection and Compliance Administrator Associate ✔ Microsoft Certified: Security Operations Analyst Associate ✔ Microsoft 365 Certified: Administrator Expert ✔ Microsoft Certified: Azure for SAP Workloads Specialty Other Certifications and Trainings: ✔ Certified Information Systems Security Professional (CISSP) – ISC2 ✔ Certified in Cyber Security (CC) – ISC2 ✔ ISO/IEC 22301:2019 Business Continuity Lead Auditor ✔ ISO/IEC 27001:2022 Information Security Lead Auditor ✔ ISO/IEC 27701:2019 Privacy Information Lead Auditor ✔ Trained in “Certified Information Security Manager” (CISM) ✔ Trained in “Certified Information Systems Auditor” (CISA) Azure Cloud Security Skills: • Microsoft Azure Security Services • M365 Environment Security • Microsoft Defender Suite (Cloud, Identity, Office 365) • Microsoft 365 Copilot Enablement • Cloud Adoption and Migration • Identity and Access Management (IAM) • Cloud Security Posture Management (CSPM) • Security Information and Event Management (SIEM) • Cloud Access Security Broker (CASB) • VPN, Segmentation, WAF, Access Control • Encryption Technologies • SOAR Concepts and Toolsets • Microsoft 365 Copilot Enablement & Prompt Engineering • Microsoft Copilot Studio (Custom Agent & Workflow Design) • Microsoft Purview & Copilot Data Governance Core Competencies: • Threat and Vulnerability Management • Penetration Testing & Red Teaming • System Hardening & Compliance • Application and API Security • Third-Party Risk Management • Team Leadership & Mentorship • Security Frameworks (NIST, ISO 27001, OWASP) • Cloud and Container Security (AWS, Azure, Kubernetes) • DevSecOps Integration • Persona-Based AI Training & Instructional Design • AI Adoption Roadmaps & Change Management • Cross-Functional Business Process Mapping (Legal, Finance, Operations) Thank you for your time and consideration. Yours truly, Manmeet Singh

Profile Summary Seasoned Information Security Professional with 22+ years of experience across, Application Security, VAPT, Cloud Security, Email Security and Risk Governance. I specialize in designing secure, compliant and automated environments that protect enterprise assets from the code level to the cloud. From hardening AI infrastructure to mastering email deliverability, I ensure every layer of the digital stack is resilient. Offensive Security: VAPT, Red Teaming, and OWASP Top 10 mitigation. Infrastructure: Expert-level Linux/Windows migration and AI model pipeline security. Governance: Certified (CISSP, CISA, CISM, CRISC, CGEIT) leader in ISO 27001, PCI DSS, and NIST frameworks. Network Security Architecture: Design and implementation of firewalls (NGFW), IPS/IDS, VPNs, VLAN segmentation, and zero-trust models for enterprise and data center environments. Expertise in deep-packet inspection, application-layer filtering, and threat intelligence integration to detect, prevent, and respond to advanced threats. MFA, SSO, JML workflows, passwordless authentication, IDOR, privilege escalation and governance-driven IAM programmes Code security, data protection, and vulnerability management standards Threat modeling and risk rating using STRIDE/DREAD or CVSS SonicWall TZ 500, 600, SOHOW Plesk & WHM Panel expert, Tomcat, Apache, Ngnix & IIS Database Security hardening MySQL, Mariadb, MSSQL & Oracle HTTP Security Header, Server Side include, XXE, XSLT, CSRF. PKI, SSL TLS 1.2 &1.3 http 1.1, http2, http3 Network Security IPv6/IPv4, ZTNA CrowdStrike/ Sentinel/ Trend Micro Endpoint Security, Microsoft Purview & Symantec DLP Solution SIEM - QRadar, DNIF Google Chronicle & Mandiant SOAR Regular risk assessments and control validation AppSec risk register maintenance Shift Everywhere Security SAST, DAST, IAST, RAP, and SCA tools (Nessus, Qualys Guard, SonarQube, Fortify, Checkmarx, Veracode, Burp Suite, OWASP ZAP, MobSF, Postman) Image vulnerability scanning (Trivy, Clair) DNS Security Kubernetes/Docker configuration hardening Runtime protection for containers Mode Security , Cloudflare WAF Threat Modeling & Attack Surface Reduction MFA, SSO, JML workflows, password less authentication, and governance-driven IAM programmes Security Automation & Infrastructure as Code (IaC) Compliance & Risk Governance (ISO 27002, SOC 2, HIPAA, PCI DSS) Security Operations ( IAM, EDR/MDR SIEM/SOAR, Incident Response) Application, Database & Systems Security Wordpress/Magento/Drupal Security Hardening Cloud-Native & Container Security Cloud Security & AI Platform Expertise Implemented CASB, CSPM, CWPP & CNAPP Amazon Web Services (AWS): Secured workloads leveraging EC2, S3, IAM, VPC, CloudFront, RDS, and Route 53 with enterprise controls. Deployed AWS WAF & Shield, GuardDuty, Inspector, Security Hub, and Audit Manager for compliance automation. Container Security - AWS ECS, EKS, ECR, Fargate Integrated Amazon Bedrock Microsoft Azure: Extensive experience with Azure OpenAI, AI Studio, Azure ML, Sentinel, RDP, VPN, Intune Defender for Cloud, and Purview. Deployed Confidential Computing, Data Lake, Cosmos DB, and AKS using secure-by-design principles, encryption-at-rest, and real-time compliance monitoring. Google Cloud Platform (GCP): Implemented Sensitive Data Protection, IAM, VPC, SCC, Confidential Computing, Cloud Armor, and KMS for resilient data governance. Applied AI/ML security frameworks (SAIF, Model Armor, Guardrails) to safeguard sensitive workloads and mitigate model-level risks. Email Security SPF, DKIM, DMARC, BIMI, RBL, Blocklist check , Microsoft Exchange/ O365/Google Workspace/Power MTA, Qmail, Postfix, Smartermail etc, Email phishing Simulation & campaign AI Infrastructure Security N8N and OpenClaw AI workflow configuration. My work includes protecting data pipelines, securing model training and deployment environments, enforcing IAM controls, and hardening GPU/compute clusters. I assess risks in model storage, APIs, and inference endpoints, implement monitoring for data integrity and model misuse, and ensure compliance with security and governance frameworks. I provide actionable recommendations to strengthen resilience, privacy, and the overall security posture of AI systems. Security Audit, Risk Assessment and Audit Compliance, with a strong track record in securing enterprise systems, networks, applications and multi-cloud environments. My professional journey includes leading ISO 27002, ISO42001, HIPAA, PCI DSS, SOX, ITGC, CIS, NIST, NIS2, GDPR, CCPA, HIPPA and SOC 2 audits, implementing GRC frameworks, and ensuring regulatory alignment and risk mitigation across complex organizations. BCP/DR, RPO, RTO, MTTD, MTTR Business Impact Assessment and Privacy Impact assessment GRC Tools - Security Score Card, BitSite, Auditboard, OneTrust, RSA Archer, ServiceNow GRC, Drata & Vanta