Hire the Best Vulnerability Assessment Specialists
in the United Arab Emirates

As an experienced Cyber Security Professional, my proficiency lies in Information Security Services. I have expertise in the areas of Vulnerability Assessment and Penetration Testing. Additionally, I possess various certifications including OSCP, CISM, CISA, CEH, and CHFI. I am currently on the lookout for my next opportunity to utilize my skills in safeguarding your organization's information assets and infrastructure.

Hi. I am a Penetration Tester or ethical hacker or bug bounty hunter with CEH v12 certified from eccouncil and working as Cyber Security Specialist in a well reputed organization where I manage and review all its security related issues on their products. I am Passionate about streamlining processes through the use of Security scenarios. 3+ years using Python, bash to automate and enrich Cyber Security / IT process. Allowing more time to be spent on high value work, rather than redundant tasks. 6+ years in Cyber Security performing Penetration Testing, Vulnerability Assessment, Ethical Hacking.

I specialize in migrating, securing, and managing Microsoft 365 environments for organizations, ensuring accurate implementation from the outset — serving clients ranging from startups with 10 users to enterprises with 10,000 employees. My Track Record • Over 24,500 hours accrued on Upwork across more than 120 clients. • Achieved Top Rated Plus status with a 100% Job Success Score. • Possess over 11 years of practical experience in Microsoft cloud services. • Successfully completed over 200 Microsoft 365 migration projects. • Enterprise-sector experience includes Tier 3 Microsoft Premier Support for Fortune 500 clients, with recognition as Best Employee on two occasions. • Made significant contributions to a Microsoft Partner of the Year organization. MY CERTIFICATIONS (Active, Microsoft-verified) • MS-102 Microsoft 365 Administrator • SC-200 Security Operations Analyst • SC-300 Identity and Access Administrator • SC-400 Information Protection Administrator • MD-102 Endpoint Administrator • AZ-900 Azure Fundamentals • MS-900 • SC-900 WHAT I DELIVER • Cloud Migrations and Tenant Management I facilitate seamless migrations from platforms such as Google Workspace, on-premises Exchange, GoDaddy, Zoho, IMAP, or tenant-to-tenant configurations. This includes cutover, staged, hybrid, and IMAP methods, covering email, files, SharePoint, and other data types. My services encompass tenant setup, DNS configuration, licensing management, and post-migration optimization for organizations of all sizes. • Security and Compliance Implementation I implement security and compliance measures, including Conditional Access policies, Zero Trust frameworks, Microsoft Defender XDR, Microsoft Sentinel, Purview Data Loss Prevention (DLP), sensitivity labels, and compliance configurations aligned with standards such as SOC 2, HIPAA, ISO 27001, and GDPR. Additionally, I provide full Security E5 implementations tailored for distributed and international teams. • Identity and Access Management My expertise extends to Microsoft Entra ID (Azure AD), hybrid identity solutions utilizing Azure AD Connect, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Identity Management, Role-Based Access Control (RBAC), user lifecycle automation, and periodic access reviews. • Endpoint Management I offer comprehensive endpoint management through Microsoft Intune MDM/MAM, Windows Autopilot, and security baselines for Windows, macOS, iOS, and Android devices. My services include BitLocker encryption, Defender policies, application deployment, and device compliance enforcement. • PowerShell Automation and Scripting I develop automation scripts for bulk provisioning, licensing, compliance reporting, mailbox configuration, migration tasks, and integrations utilizing Microsoft Graph API and Power Automate. • Email Security and Exchange Online My services encompass configuring mail flow rules, implementing anti-spam and anti-phishing measures, DKIM, DMARC, SPF settings, shared mailboxes, distribution groups, archiving solutions, litigation holds, and eDiscovery processes. • Collaboration and Governance I configure Microsoft Teams for enterprise environments, establish guest access policies and retention policies, deploy SharePoint Online solutions, design permission structures, and develop comprehensive information architectures. TOOLS AND PLATFORMS • Microsoft 365 Suite: SharePoint, OneDrive, Microsoft Teams, Microsoft Entra ID, Microsoft Defender (Endpoint, Identity, Cloud Apps, Office 365), Microsoft Purview, Microsoft Sentinel, BitTitan MigrationWiz, ShareGate, SkyKick, Mover, SharePoint Migration Tool (SPMT), SentinelOne EDR, ThreatLocker, Barracuda Email Protection, N-able NCentral, ConnectWise Manage, AutoTask. • Identity & Access Management: Azure AD Connect (Entra Connect), ADFS, WAP, SSO (SAML, OAuth, WS-Fed), Conditional Access, MFA, SSPR, Privileged Identity Management (PIM), Duo Security, Password Hash Sync, and Pass-through Authentication. • Endpoint Management: Microsoft Intune, Windows Autopilot, BitLocker, Windows Update Rings, ASR, Compliance Policies, Configuration Profiles, Windows Hello for Business, Datto RMM, AnyDesk, Windows Remote Desktop (RDP). • Security & Compliance: Zero Trust Architecture, SOC 2, ISO 27001, HIPAA, DLP, Information Protection, SPF/DKIM/DMARC, OME, EOP, ATP, Microsoft Secure Score, Sensitivity Labels, NIST Cybersecurity Framework, GDPR, Insider Risk Management, eDiscovery, and Vanta. HOW I WORK I prioritize clear, direct communication, provide regular updates, and avoid disengagement. • I prioritize clear, direct communication, provide regular updates, and avoid disengaging. • I maintain comprehensive documentation of every change, configuration, and process. • My approach centers on security at all times, regardless of project scope. • I offer flexible availability for one-time projects, ongoing managed services, or dedicated full-time engagements (40 hours per week). • I treat your

I help organizations get audit-ready for ISO 27001 and ISO 42001, and I build AI-powered security that keeps them protected day to day. I'm Dr. Mohamed Atef, founder of InfoSec4TC in Dubai. For 20+ years I've secured government, public-sector, emergency-services, higher-education, and technology organizations across the UAE, Saudi Arabia, and worldwide, turning security and compliance into working systems that pass real audits, not paperwork that sits in a drawer. I'm CISSP-certified and back every engagement with a team holding CISM, CISA, and ISO 27001 Lead Auditor/Implementer credentials, so you always get the right specialist on your project. How I can help: • ISO/IEC 27001: gap analysis, implementation, and certification support • ISO/IEC 42001: AI governance (I led a national-scale AI certification) • Security & compliance audits: ISO, NIST, GDPR, NESA/NCA • Virtual CISO: ongoing security leadership on a monthly retainer • Data classification & DLP across email, endpoint, and cloud • AI-powered SOC & GRC on open-source tools (Wazuh, Shuffle, MISP, eRamba): enterprise-grade protection without enterprise licensing costs I've trained 120,000+ professionals and built CS365, an AI-driven compliance platform, so you get both hands-on expertise and the automation to stay compliant year-round. I work fluently in Arabic (my native language), English, and French, so I can run engagements, workshops, and documentation in whichever language your team needs. Let's start with a free 30-minute call. I'll tell you exactly what your audit or security gap will take: scope, timeline, and cost.

🔐 Protecting Businesses Since 2009 — Trusted by Microsoft, Yahoo, Facebook, Sony & More 🔐 With 15+ years of hands-on cybersecurity experience, I've responsibly disclosed critical vulnerabilities to some of the world's most recognized companies — and been officially acknowledged by all of them. I don't just talk security; I've proven it at the highest level. What I do for you: Whether you're a startup or an enterprise, I help you find and fix your weaknesses before attackers do. My work spans penetration testing, ethical hacking, vulnerability assessments, malware removal, and secure development — delivered with clear reports and actionable fixes. 🌐 Hall of Fame & Bug Reports: ✔ Microsoft — Identified critical infrastructure vulnerabilities ✔ Facebook — Contributed to platform security hardening ✔ Yahoo — Reported security gaps in digital assets ✔ Sony — Secured key systems against active threats ✔ AVG & Bitdefender — Strengthened antivirus defenses 🚀 Core Services: ✔ Web & Network Penetration Testing ✔ Vulnerability Assessment & Reporting ✔ Malware Detection & Removal ✔ Cloud & Mobile Application Security ✔ Red Team Exercises & Threat Hunting ✔ Incident Response & Forensic Analysis ✔ WordPress & CMS Security ✔ Secure Code Review & DevSecOps ✔ OSINT Investigations ✔ Security Awareness Training 💻 Development Skills: Python | Golang | PHP | Java | C# | Bash | PowerShell [ CEH | OSCP | CompTIA Security+] 🔒 Your security is only as strong as the expert behind it. Let's talk — send me a message or book a consultation call and let's start securing your systems today.

I'm a cybersecurity engineer specializing in AI-powered automation, penetration testing, and vulnerability assessment. 🚨 What I help with: • Simulating real-world cyber attacks • AI-driven threat detection & reporting • Hardening web apps, APIs, networks 🛠️ Tools I work with: Python | GPT-4 API | Kali Linux | Nmap | BurpSuite | Flask | Wireshark | Metasploit 🏆 Highlights: • 3rd place in a national AI cybersecurity hackathon (27 teams competed) • Created Quantum Phantom, a red-team simulation tool used in university-level audits I’m here to help you secure your systems with AI-enhanced solutions that adapt to threats in real time. Let’s work together to keep your environment safe.