Hire the Best Information Security Analysts
in India

Most developers focus only on building apps. I help startups transform ideas into scalable SaaS and mobile products built for growth, performance, and long-term success. I’m Smeet S, a Flutter Developer specializing in Startup MVPs, SaaS Applications, AI-powered mobile apps, and scalable cross-platform solutions for iOS & Android. Over the past 5+ years, I’ve helped startups and businesses launch 60+ mobile applications across industries including AI, SaaS, ecommerce, health & fitness, marketplaces, and on-demand platforms. Tech Stack: Flutter, Firebase, Supabase, Node.js, REST APIs, AI/ChatGPT Integrations, Stripe, RevenueCat, Push Notifications, and Scalable Cloud Backends. From validating an MVP idea to launching a production-ready app, I focus on building applications that are: ✔ Scalable architecture ✔ Fast & responsive performance ✔ Modern UI/UX experiences ✔ User-focused functionality ✔ Built for long-term business growth 🚀 What I Can Help You Build ✔ Startup MVP Applications ✔ SaaS Mobile Platforms ✔ AI-Powered Mobile Apps ✔ Social Media & Community Mobile Apps ✔ Video Calling & Live Streaming Applications ✔ Subscription-Based Applications ✔ Marketplace & Ecommerce Apps ✔ Food Delivery & On-Demand Service Platforms ✔ Finance & Budget Management Applications ✔ Health, Fitness & Wellness Mobile Apps ✔ Education & eLearning Mobile Applications ✔ Travel, Hotel & Ticket Booking Applications ✔ Real Estate & Property Listing Mobile Apps ✔ Productivity & Task Management Applications ✔ Real-Time Chat & Notification Systems ✔ Internal Business Tools & Admin Dashboards ✔ Mobile Apps with ChatGPT & AI Integrations ✔ Video & Audio Streaming Mobile Platforms ✔ Cross-Platform Flutter Apps for iOS & Android ✔ Scalable Backend-Connected Applications 💡 Why Founders & Startups Work With Me Building a successful app takes more than just writing code. I help clients: ✔ Validate ideas quickly ✔ Reduce development costs ✔ Launch MVPs faster ✔ Build scalable app architecture ✔ Improve user experience ✔ Prepare products for long-term growth I prioritize: ✔ Clear communication ✔ Fast execution ✔ Transparent timelines ✔ Clean architecture ✔ Long-term scalability ✔ Business-focused development No overpromising. No unnecessary complexity. Just reliable development and smooth delivery. ✨ Let’s Build Your MVP or Mobile App Whether you need: ✔ A startup MVP ✔ A SaaS mobile application ✔ AI-powered app features ✔ A complete Flutter mobile app ✔ Or a scalable product ready for launch I can help turn your idea into a polished, production-ready application. 📩 Send me your app idea, requirements, or project goals, and I’ll provide: ✔ Honest feedback ✔ Suggested technical approach ✔ Estimated timeline ✔ Clear next steps Let’s turn your idea into a successful product. - Smeet S

6+ years as a Security Researcher, CEH v12 and ISO 27001 Certified Lead Security Auditor, I help startups, SaaS companies, and enterprises secure everything they build and run from a single web app to multi-cloud infrastructure, AI/ML systems, and full compliance programs. My approach is simple: security isn't a scanner dump, it's a clear view of your real risk plus a prioritized, actionable plan to fix it. Coming from a strong software engineering background, I read source code, follow data flows, and reason about architecture, so I catch the business-logic and design flaws that automated tools always miss. 🌐 APPLICATION SECURITY & PENETRATION TESTING Full-stack web, mobile, and API pentesting across the OWASP Top 10 & API Security Top 10: broken access control, IDOR, SSRF, injection (SQL/NoSQL/command/template), XSS, CSRF, insecure deserialization, auth/session flaws, and business-logic abuse. Apps built on React, Angular, Vue, Next.js, Node.js, Python (Django/Flask/FastAPI), Java (Spring), PHP (Laravel), Ruby on Rails, .NET, and Go, plus Android/iOS (OWASP MASVS). Every finding is manually verified to remove false positives, CVSS-scored, and shipped with developer-ready remediation and a free retest. Tools: Burp Suite Pro, OWASP ZAP, Nmap, Metasploit, Nuclei, sqlmap, Nessus, ffuf. ☁️ CLOUD SECURITY ( AWS, AZURE & GCP) IAM and least-privilege reviews, network segmentation (VPC/VNet, security groups, NACLs), encryption/KMS, logging and monitoring (CloudTrail, GuardDuty, Azure Defender, GCP Security Command Center), and CIS Benchmark hardening aligned to Well-Architected security pillars. I find misconfigurations, exposed storage (S3/Blob/GCS), over-permissive roles, and privilege-escalation paths, and design secure cloud architectures with CSPM tools like Prowler and ScoutSuite. ⚙️ DEVSECOPS & INFRASTRUCTURE SECURITY Security built into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure DevOps), container and Kubernetes security (image scanning with Trivy/Grype, RBAC, network policies, Pod Security Standards), and Infrastructure-as-Code review for Terraform, CloudFormation, Ansible, and Pulumi (Checkov, tfsec, Terrascan). I integrate SAST, DAST, SCA, and secrets scanning (Semgrep, Snyk, SonarQube, Gitleaks, TruffleHog) into automated pipelines, with secrets management via HashiCorp Vault, AWS Secrets Manager, and cloud KMS securing the full software supply chain from commit to deploy. 🤖 AI / ML SECURITY I secure AI, ML, and LLM-powered features against the OWASP Top 10 for LLM Applications and the MITRE ATLAS framework: prompt injection, jailbreaks, sensitive-data and training-data leakage, insecure output handling, model denial-of-service, supply-chain risks, and excessive agency in autonomous/agentic systems. I review apps using OpenAI, Anthropic Claude, and open-source models (Llama, Mistral), plus RAG pipelines, vector databases, TensorFlow, and PyTorch and leverage AI defensively for security automation and faster threat detection. 📋 GOVERNANCE, RISK & COMPLIANCE (GRC) As an ISO 27001 Lead Auditor, I lead ISO 27001:2022 implementation, internal audits, gap analysis, ISMS development, Statement of Applicability, and risk treatment plans to get you certification-ready. I also support SOC 2 (Type I & II), GDPR, HIPAA, PCI-DSS, and NIST Cybersecurity Framework alignment, including security policies, risk registers, vendor/third-party risk management, awareness training, and audit-ready documentation. 🧠 SECURITY ENGINEERING & RESEARCH Secure code review across multiple languages, threat modeling (STRIDE, attack trees), reverse engineering (including Java/bytecode and anti-tamper analysis), malware analysis fundamentals, network security, and security architecture design. I also build cybersecurity training programs and translate complex risk into language both executives and developers understand. 🤝 HOW I WORK 1️⃣ Free scoping call to understand your stack, goals, and concerns 2️⃣ Testing/assessment with clear, regular communication 3️⃣ A prioritized report - Executive Summary + technical detail + exact fixes 4️⃣ A free retest and debrief once your team remediates Every engagement is handled with strict confidentiality and full authorization. I don't oversell if you don't need a service, I'll tell you honestly. 📩 Message me with a few details about your project and I'll reply with practical, no-pressure next steps.

I am an 7 experienced Cyber Security Specialist with a strong focus on protecting digital assets, securing networks, and identifying vulnerabilities before attackers do. I help businesses safeguard their systems, applications, and data against cyber threats while ensuring compliance with industry security standards. With hands-on experience across network security, application security, and cloud environments, I deliver practical and scalable security solutions tailored to business needs. ✅ What I Can Help You With 🔹 Vulnerability Assessment & Penetration Testing (VAPT): ============================================== Web & network vulnerability assessments Manual and automated penetration testing OWASP Top 10 security issues remediation 🔹 Network & Infrastructure Security: ============================== Firewall configuration & hardening IDS/IPS setup and monitoring Secure network architecture design 🔹 Web Application Security: ======================== Website & API security testing Secure authentication & access control Fixing SQL Injection, XSS, CSRF, and other vulnerabilities 🔹 Cloud & DevSecOps Security: ========================== AWS, Azure, GCP security best practices Cloud misconfiguration audits Secure CI/CD pipelines 🔹 Security Compliance & Risk Management: ==================================== ISO 27001, SOC 2, HIPAA, PCI DSS guidance Risk assessment and security gap analysis Security policies, SOPs, and documentation 🛠 Tools & Technologies: ==================== Burp Suite, Metasploit, Nessus, Nmap, Wireshark SIEM & log analysis Linux, Windows Security OWASP ZAP, Kali Linux Cloud security tools (AWS Security Hub, Azure Security Center) 💡 Why Clients Choose Me: ======================= ✔ Clear and actionable security reports ✔ Strong communication & quick response time ✔ Focus on real-world, business-friendly security solutions ✔ 100% confidentiality and ethical standards 🎯 How I Work : -------------------- 1.Understand your system, business, and risk level 2.Perform thorough security testing and analysis 3.Provide a detailed vulnerability report with fixes 4.Support remediation and re-testing If you’re looking for a reliable Cyber Security expert who takes security seriously and delivers real value let’s connect. 📩 Message me to discuss your project and secure your business today.

🚨 If your application, SaaS platform, or cloud environment has never undergone a professional security assessment, you may have unknown vulnerabilities that attackers can exploit. I’m a Certified Penetration Tester and Ethical Hacker providing Vulnerability Assessment and Penetration testing (VAPT) services for web applications, APIs, cloud infrastructure, mobile apps, SaaS platforms, and network environments. My goal is not just to find vulnerabilities — but to help you understand real security risks and fix them effectively. I perform manual penetration testing supported by professional security tools to identify exploitable weaknesses such as authentication flaws, privilege escalation paths, injection vulnerabilities, and business logic issues. You will receive a clear and actionable security report that helps developers resolve issues and allows management to understand the real business impact. 🎯 My Services - Vulnerability Assessment & Penetration Testing (VAPT) - Web Application Penetration Testing (OWASP Top 10) - API Penetration Testing (REST, GraphQL, authentication flaws, IDOR, injection) - Cloud Infrastructure Security (AWS, Azure — misconfigurations, IAM, exposed services) - Network Penetration Testing (internal & external) - Mobile Application Security (Android & iOS) - SaaS Platform Security & Penetration Testing (multi-tenant logic, RBAC, privilege escalation) - CMS Security (WordPress, Laravel, custom apps) - Retesting after remediation 📋 What You Will Receive A clear, structured security report designed for both technical teams and business stakeholders, including: • Executive summary for management and decision-makers • Detailed vulnerability findings with severity ratings • CVSS scoring and risk prioritization • Proof-of-concept evidence (screenshots, request/response captures) • Business impact explanation for each issue • Step-by-step remediation guidance for developers • Retesting validation after fixes are applied • Reporting that can support ISO 27001 and SOC 2 compliance preparation 🏆 Certifications - Certified Ethical Hacker Practical — EC-Council - eLearnSecurity Junior Penetration Tester (eJPT) — INE - Certified API Penetration Tester — APISec University - IBM Cybersecurity Analyst - Cisco Verified Ethical Hacker - ISO 27001:2022 Lead Auditor 🛠️ Tools I work with Burp Suite Pro, OWASP ZAP, Nmap, Nessus, Metasploit, MobSF, Wireshark, Postman, and custom Python/Bash scripts and so on. Whether you're preparing for a security review, compliance audit, or investor due diligence, I can help you understand your attack surface and security risks. 📩 Send me your scope or asset list and I’ll help you determine the best testing approach.

Senior Information Technology Auditor & Cyber Security Consultant Technical Leadership * Enterprise Risk Management * Risk Compliance * Performance Optimization * Identity and Access governance* Security Controls implementation A dedicated and strategic Cyber Security Professional with 10 years of extensive experience in cybersecurity and technology operations, risk assessment, internal audit execution, testing and controls implementation across the financial and tech industries. A principled leader focused on providing outstanding leadership while ensuring team development and growth. Driven to lead by example, with a verified ability to improve control infrastructure, lead risk mitigation, and facilitate the optimization of company performance through system integrity and security. Open to opportunities at the intersection of finance, technology and innovation.

I am top rated Freelancer, Completed approx. 135 project. “My motto is deliver quality result in reasonable rate.” Profile Overview 1. I have been a professional tester since 10+ years; I have experience in Manual, Automation Penetration Testing. 2. Availability 24*7 on Skype or Phone 3. Single freelancer completed Approx. 125 testing project on upwork 4. Completed 22,000 hours on Upwork 5. Good Knowledge of Agile methodology 6. Good Experience working with large remote team Award and Certificate 1. Certified tester in ISTQB form UK Testing Board 2. Certified tester of QTP(11.0) form HP. 3. CEH Certified PEN Tester 4. CISA Certified Information Security Analyst 5. Top 1% freelancer award from upwork. 6. Got top 10% in software testing test on upwork. Application Tested 1. eCommerce Application(Magneto,WordPress,OpenCart and etc) 2. Game Application, 3. ERP Application , 4. Mobile Application and Game 5. Facebook Game 6. Healthcare application 7. Travel Domain 8. Social Networking website 9. WordPress website (Front-end and Back-end), 10. WordPress Plugin, 11. WordPress Theme Testing Type: Manual Testing 1. Functional Testing 2. Usability Testing 3. Regression Testing 4. Integration Testing 5. Compatibility Testing 6. Database Testing 7. Beta Testing Automation Testing 1. Functional Automation Testing:HP-QTP, Selenium, Rational tool and Monkey Talk and Robotium (Mobile Automation) 2. Load Testing:HP Loadrunner,jMeter,Silkperformer 3. Security Testing:IBM-Appscan,HP-Webinspect,ZAP Proxy,Kkali Linux ,Burp Suit 4. Test Management Tool: Scopidea,JIRA,Mentis Fogbugz,Assembala,Asana,Teambox,Readbooth Project Management 1. Test case 2. Test Plan 3. Use Cases 4. All Check-list Design 5. WireFrame Design 6. Requirement analysis document design 7. User Manual Design 8. CMMI Process Document Design 9. Able to manage development and Testing Team Devices available for testing 1. Windows XP(32bit,64 bit )-Browser IE(7,8,9) ,Firefox, Chrome,Safari 2. Windows 7 (32bit, 64 bit)-Browser IE (9,10,11) ,Firefox Chrome,Safari 3. Windows 8(64 bit)-Browser IE(9,10,11),Firefox Chrome,Safari 4. Windows 8.1(64 bit)-Browser IE (9,10,11),Firefox Chrome,Safari 5. Windows 10 (64 bit)-Browser Edge,Firefox Chrome,Safari 6. MAC OS X (64 bit) Yosemite –Browser Firefox ,Chrome,Safari Mobile and Tablet 1. iPhone ,6,7,8,10+,11 2. iPad 2,3,iPad 3. Samsung Galaxy Tab 2 4. Android Mobile 5. Samsung Galaxy S10+ Please give me your project detail, I will send you sample report.