Hire the Best Web Application Security Freelancers
in Kenya

I help businesses, organizations, and individuals identify security risks, protect their digital assets, and build more secure technology environments. I am a Cybersecurity Analyst, Penetration Tester, and GRC professional with hands-on experience in penetration testing, security assessments, compliance, cloud security, threat detection, and security monitoring. I work with clients to identify vulnerabilities, assess security controls, strengthen their security posture, and prepare for compliance requirements. My areas of expertise include: • Web application and API penetration testing • Vulnerability assessment and security testing • Cloud security across AWS, Azure, and GCP • Security monitoring and threat detection • GRC and compliance readiness in Drata and Vanta • ISO 27001 and SOC 2 readiness and assessments • Security control implementation and testing • Risk assessments and remediation guidance • Security documentation, reporting, and audit support I take a practical approach to cybersecurity by combining technical testing with governance and compliance requirements. My goal is not just to identify vulnerabilities, but to clearly explain their business impact and provide actionable recommendations that your team can implement. Whether you need a penetration test, security assessment, compliance support, or help strengthening your overall security posture, I can help you identify the risks and build a more secure environment.

As an experienced Information Security Expert, I help organizations build data governance, GRC, and IAM programs that pass audits, close compliance gaps, and reduce security risk — without slowing the business down. Over the past 8+ years I've built these programs from the ground up for enterprises including a global NGO, a Fortune 500 tech company (on a project for one of Africa's largest banks), and a multinational FMCG client. Recent results include: Built an enterprise GRC framework aligned to ISO 27001, GDPR, and NIST-CSF — cutting audit non-compliance by 72% and avoiding an estimated $30K+ in penalties Led IAM/access governance using SailPoint and Okta, automating provisioning and cutting onboarding time by 40% Directed risk assessments across 13+ IT systems, cutting overall risk exposure by 70% Designed and delivered security awareness training to 500+ employees, reducing phishing click-through by 52% Ran master data governance and compliance-reporting programs across 24+ systems for a major bank, cutting non-conformities by up to 81% What I can do for you: Design or audit your GRC/compliance program (ISO 27001, GDPR, NIST-CSF, PCI DSS) Build or clean up IAM: access governance, RBAC, Zero Trust, SSO, MFA (SailPoint, Okta, Azure AD) Run a risk assessment, security audit, or vulnerability review and give you a prioritized remediation plan Set up data classification and DLP (Microsoft Purview) so sensitive data is actually protected Write the policies, standards, and documentation your auditors will actually ask for I'm newer to Upwork specifically, but not new to this work — happy to start with a smaller-scope engagement (a policy review, a gap assessment, an access audit) so you can see how I work before committing to something larger. Certifications: CISSP, IBM Cybersecurity Analyst Professional, IBM Data Analysis, Microsoft Secure Access with Azure AD.

I am a Penetration Tester focusing on Cloud, Network, Web, and Mobile Apps. I have significant and well-diversified experience in multiple Cybersecurity domains, including: 1. Cloud Infrastructure: I help secure Cloud Infrastructure such as GCP AWS and Azure. 2.Penetration Testing and Vulnerability Assessment: I specialize in finding vulnerabilities in Web Applications, Mobile Applications, Networks, and Smart Contracts. 3. Bug Bounty Hunting: I find bugs for various companies on HackerOne - @l3s7r0z. I am constantly improving myself and getting better each day in the Cyber Security field. Lester Obbayi - @l3s7r0z

I am a passionate and hard working freelancer. 100% Clients satisfaction is my main Goal. Quality and accuracy is the thing that i can provide for everyone. If you would like high quality work and 100% accuracy work with a fast turn around for a fair price, You can contact me. You wont be disappointed.

I am a dedicated and hardworking cyber security expert with vast experience in Web application pentesting,android apps and mobile security,binary and malware reverse engineering. I believe in communication as the greatest skill in dealing with clients.I am looking forward to working with you great clients