I am a Certified Information Security Analyst with over 13years of proven experience in Enterprise-Level and Start-up Information Security as well as IT Operations. My expertise spans across securing and optimizing complex infrastructures, with a deep focus on threat intelligence, Security Engineering , and Cyber Compliance management. I have successfully contributed to both federal contracts and private sector engagements, delivering tailored security solutions to meet specific organizational needs and regulatory requirements.
Core Competencies:
• Cyber Security Architecture & Engineering: Skilled in designing and deploying robust security architectures across diverse IT landscapes, integrating best-in-class technologies to mitigate risks and enhance defense capabilities.
• Threat Intelligence & Forensics: Expertise in analyzing evolving threat landscapes, developing proactive defense mechanisms, and leading forensic investigations to identify root causes and ensure comprehensive remediation.
• Vulnerability Management: Proven ability to assess, prioritize, and address security vulnerabilities through targeted mitigation strategies, ensuring that infrastructure remains resilient and aligned with industry standards.
• Compliance & Governance: Extensive experience in aligning security initiatives with regulatory frameworks such as NIST, ISO 27001, PCI-DSS, GDPR, and HIPAA, ensuring that all security controls meet or exceed compliance standards.
Key Experience:
•Senior Cyber Security Architect: Designed and implemented scalable, secure infrastructures for both on-premise and cloud-based environments. Applied zero-trust principles, multi-layered defenses, and advanced encryption technologies to safeguard sensitive data and critical business assets.
•Senior Cyber Security Engineer: Led engineering efforts to secure enterprise networks, deploying next-generation firewalls, intrusion detection systems (IDS), and endpoint protection solutions. Developed automation scripts to streamline security processes and optimize incident response times.
•Senior Cyber Security Compliance Consultant: Provided end-to-end compliance consulting services, guiding organizations through the intricacies of regulatory requirements. Developed and implemented security policies, audit protocols, and risk management frameworks to ensure ongoing compliance and governance.
Leadership & Project Management:
•Led cross-functional teams in cybersecurity projects, driving initiatives from planning through execution while ensuring security objectives were met within scope, time, and budget constraints.
•Acted as Adjunct Team Leader, managing diverse cybersecurity teams in federal and private sector environments, ensuring successful delivery of critical security solutions while fostering collaboration and skill development.
Technical Expertise:
• Proficient in cloud security for platforms such as AWS, Azure, and Google Cloud, implementing advanced security configurations for both public and hybrid cloud environments.
• Hands-on experience with security tools such as SIEM (Splunk, QRadar), IDS/IPS, endpoint security, and security automation platforms.
• Extensive knowledge in DevSecOps, integrating security practices within CI/CD pipelines to ensure continuous delivery of secure code.
As a Senior Cyber Security Architect/Engineer/Compliance Consultant, I bring a strategic, results-driven approach to every project, with a focus on protecting assets, ensuring compliance, and delivering scalable security solutions that evolve with emerging threats and organizational goals.
Internet Security
Penetration Testing
Vulnerability Assessment
Information Security
Firewall
Network Security
Cybersecurity Management
Security Policies & Procedures Documentation
Network Monitoring
Security Infrastructure
Network Penetration Testing
Cloud Security
Compliance Consultation
DevOps
Incident Response Readiness Assessment
Chase B.
Sanborn, North Dakota
$75/hr
5.0
10 jobs
If you are dealing with a hacked system, a persistent network compromise, or require a confidential internal investigation, you need an expert who goes beyond basic virus scans. I am a certified Forensic Examiner and Security Engineer (GCIH, GCFE) actively managing enterprise-level security for over 350,000 endpoints.
With a track record of investigating over 6,000 security incidents, I specialize in immediate threat containment, deep-dive digital forensics, and complete infrastructure recovery. I tailor my incident response to the exact needs of your organization:
Rapid Malware & Virus Removal (For Business Owners & Webmasters)
When a system or website is compromised, speed is critical. I execute immediate WordPress virus removal, ransomware containment, and phishing remediation. I don't just delete the visible malicious files like some freelancers, I am an incident response analyst and perform manual threat hunting to uncover the root cause, eradicate the infection, and harden your environment so attackers cannot return.
Breach Mitigation & Confidential Investigations (For Executives & Legal)
I provide enterprise-grade breach response and breach mitigation. I conduct highly sensitive HR investigations, user activity analysis, and data exfiltration tracking. Whether you are dealing with corporate espionage, insider threats, or a compromised Microsoft 365 environment, I deliver the concrete root cause analysis and forensic reporting required to manage liability and rebuild stakeholder trust. The essence of Digital Forensics is to build evidence that can withstand the scruitiny of court.
Advanced Digital Forensics & Incident Response (For IT & Engineering Teams)
For teams facing advanced persistent threats (APTs) or complex malware, I bring tier-3 SOC analysis and advanced threat detection engineering directly to your environment. I specialize in mapping lateral movement, analyzing privilege escalation (including Kerberoasting and Pass-the-Hash), and executing complete infrastructure recovery across Windows, Linux, and Cloud architectures (Azure, Entra ID, Google Workspace).
Core Methodologies & Technical Toolchain
File System & Registry Forensics: Executing deep-dive root cause analysis using KAPE, Magnet AXIOM, Autopsy, and the Eric Zimmerman suite for precise MFT carving, prefetch analysis, registry analysis, and system profiling.
User Activity & USB Tracking: Tracing insider threats and compromised accounts through jump lists, LNK files, SRUM data, and comprehensive browser web history analysis (Hindsight, BrowsingHistoryView).
Enterprise EDR & Network Analysis: Utilizing Palo Alto XSIAM/XDR, Microsoft Defender 365, Wazuh, and Velociraptor for active intrusion detection, event log analysis (EvtxECmd), network forensics, and live host investigation.
Exploit Defense & Active Directory Security: Proactive vulnerability scanning and Active Directory hardening against Golden Ticket attacks and LLMNR spoofing utilizing BloodHound, Nmap, and Sysinternals.
Beyond professional incident triage, I am a SANS Advisory Board member and I bring my expertise to present at cybersecurity conferences. If your digital assets and reputation are on the line, I can clean up the mess and write a report that regains trust in your stakeholders.
Let’s connect to investigate the threat, lock down your network, and get your business back online.
Vulnerability Assessment
Website Security
Information Security
Cyber Threat Intelligence
Cybersecurity Tool
Cybersecurity Monitoring
Malware Removal
Malware Detection
Network Analysis
Digital Forensics
NIST Cybersecurity Framework
Linux
Incident Response Plan
Cybersecurity Management
Cloud Security
Malware Website
WordPress Malware Removal
Threat Detection
Information Security Threat Mitigation
Phishing Detection
Jon S.
Dacono, Colorado
$65/hr
5.0
23 jobs
Cloudflare blocking real customers - or failing to stop bots, scrapers, login abuse, and malicious traffic?
I help businesses diagnose and fix Cloudflare WAF, bot-protection, rate-limiting, DNS, SSL/TLS, and origin-security problems without applying generic settings that break checkout flows, APIs, or legitimate users.
I’m a US-based, CISSP-certified security engineer with 19 years of IT and cybersecurity experience and multiple recent Cloudflare engagements on Upwork. I can help you:
• Analyze Security Events and identify what is actually being blocked
• Build and tune custom WAF and rate-limiting rules
• Reduce bots, scraping, credential abuse, and unwanted traffic
• Fix false positives affecting customers, APIs, or administrators
• Review DNS, DNSSEC, SSL/TLS, caching, and origin exposure
• Document every change, its purpose, and its rollback path
Every engagement is scoped in writing before production changes begin. I operate through an insured US LLC.
Send me the symptoms you’re seeing, your Cloudflare plan, and whether the priority is stopping abuse, fixing false positives, or reviewing the current configuration. I’ll tell you the most practical next step.
Vulnerability Assessment
Web Application Firewall
Website Security
Cybersecurity Management
Cloudflare
Network Security
Information Security
Malware Removal
Security Testing
Cloud Security
Security Analysis
Firewall
WordPress
Incident Response Plan
Information Security Audit
Amazon Web Services
Application Security
Database Security
VPN
WordPress Malware Removal
Faruk A.
Haledon, New Jersey
$65/hr
5.0
8 jobs
Server down, hacked, locked out, slow, or not working right? I’ll find the cause and fix it.
I troubleshoot, administer, recover, and secure Linux and Windows servers.
I also work with AWS/VPS environments, WordPress, web servers, DNS, SSL, SSH/RDP, email systems, Docker, and compromised infrastructure.
I bring 20+ years of hands-on IT experience, including supporting hundreds of production Linux servers and working across Windows environments, web infrastructure, automation, and enterprise security.
I don't just apply temporary fixes. I investigate the root cause, restore service safely, verify the result, and help reduce the chance of the same problem happening again.
Small one-time troubleshooting jobs are welcome.
I CAN HELP WITH:
• Linux server administration: Ubuntu, RHEL, AlmaLinux, CentOS
• Windows Server administration and troubleshooting
• SSH/RDP access, authentication, users, sudo, permissions, firewall, and ports
• CPU, memory, disk, filesystem, storage, LVM, and performance problems
• Failed services, processes, systemd, cron, logs, and application errors
• Server patching, backup, recovery, monitoring, and hardening
• Compromised servers, malware, unauthorized access, and incident investigation
• AWS EC2, Lightsail, and VPS setup, migration, recovery, and troubleshooting
• Apache, Nginx, IIS, cPanel, WHM, PHP, and MySQL/MariaDB
• WordPress repair, migration, malware cleanup, and hacked-site recovery
• DNS, Cloudflare, SSL/TLS, HTTPS, AutoSSL, and Let's Encrypt
• SMTP, email delivery, SPF, DKIM, DMARC, and mail server troubleshooting
• 403, 404, 500, 502, 503, redirects, and connectivity errors
• Docker, Docker Compose, application hosting, and service troubleshooting
• Python and Bash scripting, automation, monitoring, and log analysis
LINUX & WINDOWS SERVER TROUBLESHOOTING
A reboot may bring a server back. It doesn't explain why it failed.
I investigate logs, processes, services, CPU and memory usage, storage, filesystems, network connectivity, ports, permissions, authentication, scheduled jobs, application errors, and recent changes to determine what actually happened.
If SSH stopped working, RDP is inaccessible, a service won't start, disk space disappeared, CPU usage suddenly increased, permissions broke, or an application went offline, I work from the evidence before making changes.
SECURITY & COMPROMISED SERVER RECOVERY
If a Linux or Windows server, VPS, or website may be compromised, I investigate suspicious processes and files, user accounts, login activity, SSH activity, scheduled tasks, services, permissions, web logs, persistence mechanisms, and other indicators of compromise.
After recovery, I can help reduce repeat incidents through patching, SSH hardening, firewall rules, account cleanup, permission review, exposed-service reduction, and practical server hardening.
WORDPRESS & WEB SERVER RECOVERY
WordPress hacked, redirecting, slow, showing errors, or completely offline?
I troubleshoot beyond WordPress itself when necessary.
That can include plugins, files, permissions, malware, PHP, MySQL/MariaDB, Apache/Nginx, SSL certificates, DNS, logs, redirects, hosting configuration, and underlying server resources.
AWS, VPS, DNS, SSL & EMAIL
I troubleshoot AWS EC2/Lightsail, VPS hosting, DNS, Cloudflare, SSL/TLS certificates, HTTPS, SMTP, and mail-server problems.
This includes broken DNS, expired certificates, Let's Encrypt/AutoSSL failures, SPF/DKIM/DMARC configuration, email delivery problems, redirects, firewall/connectivity issues, and server migrations.
PYTHON & BASH AUTOMATION
I build practical Python and Bash automation for server health checks, monitoring, log collection and parsing, reporting, storage cleanup, scheduled tasks, security checks, and repetitive infrastructure work.
HOW I WORK
My background combines system administration, troubleshooting, automation, and information security.
I have hands-on experience with RHEL, Ubuntu, Windows Server, Python, Bash, Apache, Nginx, IIS, AWS, VMware, Docker, DNS, SIEM, DLP, CrowdStrike, production infrastructure, and enterprise security environments.
My troubleshooting process is straightforward:
Understand the symptoms
Gather evidence
Identify the root cause
Make the safest appropriate fix
Test and verify the result
Explain what happened and what should be done next
Have a Linux or Windows server problem and aren't sure what's causing it? Send me the symptoms or error message. I’ll take a look at what may be going wrong and explain how I would approach it.
Python
Bash
Linux System Administration
Python Script
Script
Red Hat
Information Security
Network Monitoring
WordPress
Malware Removal
Linux
Ubuntu
LAMP Administration
LEMP Stack
Information Security Audit
Karol O.
Silver Spring, Maryland
$15/hr
4.0
2 jobs
IT and Cybersecurity professional with experience in technical support, troubleshooting, networking, system configuration, vulnerability assessment, and security analysis. Skilled in identifying and resolving technical issues, assessing security risks, and applying cybersecurity best practices. Dedicated to providing reliable solutions that improve system performance, security, and user experience.
Customer Service
Technical Support
Hardware Troubleshooting
Microsoft Active Directory
Microsoft Office
Software Configuration Management
Windows Administration
Windows Server
Ubuntu
Linux
macOS
Network Monitoring
PHP
JavaScript
CSS
SQL
OWASP
NIST Cybersecurity Framework
CIS Control Assessment
PCI DSS
Andrew H.
Toledo, Ohio
$150/hr
5.0
57 jobs
I specialize in Cybersecurity, threat mitigation (hacking cleanup and repair) and system administration on a enterprise scale, as well as full stack development.
Complete, integrated and reliable solutions to the most challenging and unique business IT needs, no matter the complexity or difficulty.
Fluent in PHP, HTML, JavaScript, Node, and several other programming languages.
Experienced Network architect
Cybersecurity preventative monitoring and protection, threat detection, and response
Cloud Infrastructure management, consulting, and deployment
Web & Database migration, management and repair
I am your complete IT solutions provider, with over 5+ years of experience!
Vulnerability Assessment
WordPress
PHP
DevOps
System Hardening
Information Security
IT Consultation
Security Infrastructure
Cloud Architecture
Cloud Management
Malware Removal
Cloud Security
Security Engineering
System Administration
Security Assessment & Testing
Risk Management
Governance, Risk Management & Compliance
Cybersecurity Management
Information Technology Strategy
How it works
Post a job for freePost a job
Tell us what you need. Create your own job post or generate one with AI then filter talent matches.
Hire top talent fast
Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.
Collaborate easily
Use Upwork to chat or video call, share files, and track project progress right from the app.
Payment simplified
Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.
Don't just take our word for it
“Upwork provides an umbrella-level of security. I can see a talent’s work history and ratings. I can hold payments in escrow. I can communicate through Upwork Messages instead of working through my email address.”
KD
Kim Darling
Emerald Tiger
“Upwork is the best platform to hire skilled professionals when we're not looking for a full-time employee. All the companies in our portfolio use Upwork to find talent across a wide range of fields.”
DM
David Merry
Kinetic Investments
“Our very specific requirements can be a challenge—With Upwork, we’re able to access a bigger community to ensure the success of our projects.”
KK
Katja Krohn
Summa Linguae
How do I hire a Internet Security Specialist in the United States on Upwork?
You can hire a Internet Security Specialist in the United States on Upwork in four simple steps:
Create a job post tailored to your Internet Security Specialist project scope. We'll walk you through the process step by step.
Browse top Internet Security Specialist talent on Upwork and invite them to your project.
Once the proposals start flowing in, create a shortlist of top Internet Security Specialist profiles and interview.
Hire the right Internet Security Specialist for your project from Upwork, the world's largest work marketplace.
At Upwork, we believe talent staffing should be easy.
How much does it cost to hire a Internet Security Specialist?
Rates charged by Internet Security Specialists on Upwork can vary with a number of factors including experience, location, and market conditions. See hourly rates for in-demand skills on Upwork.
Why hire a Internet Security Specialist in the United States on Upwork?
As the world's work marketplace, we connect highly-skilled freelance Internet Security Specialists and businesses and help them build trusted, long-term relationships so they can achieve more together. Let us help you build the dream Internet Security Specialist team you need to succeed.
Can I hire a Internet Security Specialist in the United States within 24 hours on Upwork?
Depending on availability and the quality of your job post, it's entirely possible to sign up for Upwork and receive Internet Security Specialist proposals within 24 hours of posting a job description.
Find more freelancers
Top states for Internet Security Specialists in the United States