I help businesses secure Linux servers, VPS environments, cloud infrastructure, and self-hosted systems by identifying vulnerabilities, removing threats, and hardening production environments before attackers can exploit them. I'm a Certified Ethical Hacker (CEH) with 5+ years of hands-on experience in penetration testing, vulnerability assessment, incident response, malware remediation, and infrastructure security. Security Services ✔️ Web Application Penetration Testing ✔️ Network & Infrastructure Security Assessments ✔️ Linux Server & VPS Hardening ✔️ Malware Removal & Incident Response ✔️ Self-Hosted Platform Security (Nextcloud, osTicket, Redmine, cPanel/WHM) ✔️ Docker & Cloud Security ✔️ Digital Forensics & OSINT Investigations ✔️ DevSecOps Security Reviews Certifications & Expertise ✅ Certified Ethical Hacker (CEH) ✅ Google Cybersecurity Professional Certificate ✅ Top Rated Freelancer | 100% Job Success Selected Security Projects 🔐 Recovered hijacked domains and compromised hosting accounts 🛡️ Removed malware from infected VPS and production servers 🧪 Performed penetration testing and vulnerability assessments for web applications and infrastructure 📦 Hardened Nextcloud and self-hosted production environments 🔥 Built firewall, VPN, and web-filtering solutions for Linux deployments ⚙️ Secured Docker-based and cloud-hosted environments Why Clients Hire Me I don't rely solely on automated scanners. I simulate real-world attack techniques, identify exploitable weaknesses, explain the business impact, and provide clear remediation steps that your team can implement immediately. My goal is simple: Find vulnerabilities before attackers do and help you eliminate them permanently. If you need a cybersecurity professional who can assess, secure, and harden your infrastructure, let's discuss your project.

Security reviews, SOC 2, or ISO 27001 slowing down your deals? I step in as your Virtual CISO, take ownership of your security, align it with business goals, and get you enterprise ready. I work with SaaS and AI companies to remove compliance bottlenecks, accelerate deal cycles by 20-40%, and build security programs that support growth and enterprise sales. $𝟮𝟬𝗠+ 𝗥𝗘𝗩𝗘𝗡𝗨𝗘 𝗘𝗡𝗔𝗕𝗟𝗘𝗗 | 𝟱𝟬+ 𝗖𝗟𝗜𝗘𝗡𝗧𝗦 | 𝗘𝗡𝗗-𝗧𝗢-𝗘𝗡𝗗 𝗘𝗫𝗘𝗖𝗨𝗧𝗜𝗢𝗡 𝗧𝗛𝗘 𝗣𝗥𝗢𝗕𝗟𝗘𝗠 Enterprise deals slow down when security becomes a blocker. A large customer asks for a security review. Then another. Questionnaires pile up, documentation is incomplete, and your team is pulled into processes they are not prepared for. Timelines slip, audits feel unclear, and compliance starts consuming time that should be spent scaling the business. This is where most SaaS, fintech, healthtech, and AI companies hit a wall. 𝗛𝗢𝗪 𝗜 𝗢𝗣𝗘𝗥𝗔𝗧𝗘 I operate as a Virtual CISO, taking ownership of your security and compliance function and turning it into a structured system that supports how your company sells, operates, and grows. Not as an external consultant delivering recommendations but as an embedded operator responsible for execution, structure, and outcomes. 𝗠𝗘𝗔𝗦𝗨𝗥𝗔𝗕𝗟𝗘 𝗥𝗘𝗦𝗨𝗟𝗧𝗦 Companies working this way see measurable improvements. • 𝟮𝟬-𝟰𝟬% 𝗳𝗮𝘀𝘁𝗲𝗿: Enterprise sales cycles are reduced as security reviews stop delaying deals. • 𝟯𝟬-𝟱𝟬% 𝘀𝗵𝗼𝗿𝘁𝗲𝗿: Audit preparation timelines are shortened by 30-50% through structured controls and documentation. • 𝟱𝟬%+ 𝗿𝗲𝗱𝘂𝗰𝘁𝗶𝗼𝗻: Time spent on security questionnaires drops significantly, by more than half. • 𝗙𝗮𝘀𝘁𝗲𝗿 𝘁𝗿𝘂𝘀𝘁: Deal velocity increases as enterprise clients gain faster trust in your security posture. 𝗠𝗬 𝗔𝗣𝗣𝗥𝗢𝗔𝗖𝗛 My approach is execution-first. I work directly with your team to design controls, build documentation, structure your compliance program, and align everything with business objectives. This includes: • SOC 2 readiness and audit execution • ISO 27001 implementation and ISMS structuring • Security documentation and control frameworks • Vendor security questionnaires and enterprise reviews • Risk management, governance, and GRC programs I also support modern environments, including AI systems and cloud infrastructure (AWS, Azure, GCP), ensuring they align with compliance frameworks and enterprise expectations. 𝗪𝗛𝗬 𝗧𝗛𝗜𝗦 𝗠𝗔𝗧𝗧𝗘𝗥𝗦 If you sell to enterprise clients, security and compliance are not optional they are required to unlock revenue. 𝗧𝗛𝗜𝗦 𝗜𝗦 𝗔 𝗦𝗧𝗥𝗢𝗡𝗚 𝗙𝗜𝗧 𝗜𝗙 𝗬𝗢𝗨 𝗔𝗥𝗘 • Preparing for SOC 2 or ISO 27001 and need a clear execution path • Losing or delaying deals due to security requirements • Managing security questionnaires manually and inefficiently • Using tools like Vanta, Drata, Thoropass, Secureframe, or similar but lacking structure • Scaling a SaaS, AI, fintech, or cloud business • Looking for ongoing Virtual CISO support 𝗪𝗵𝗮𝘁 𝗖𝗵𝗮𝗻𝗴𝗲𝘀 𝗪𝗵𝗲𝗻 𝗪𝗼𝗿𝗸𝗶𝗻𝗴 𝗧𝗵𝗶𝘀 𝗪𝗮𝘆 Working this way changes how your business operates. • Security stops being a blocker in sales cycles. • Audit processes become predictable and efficient, with minimal exceptions. • Internal teams regain time previously lost to compliance overhead. • Enterprise readiness improves, enabling access to higher-value accounts. • Risk becomes visible, structured, and actively managed. 𝗠𝗬 𝗧𝗥𝗔𝗖𝗞 𝗥𝗘𝗖𝗢𝗥𝗗 ✓ Enabled clients to unlock and protect over $20M+ in enterprise revenue ✓ Saved clients $50K-$250K by optimizing security tools and compliance strategies ✓ Reduced audit preparation time by 30-50% through structured execution ✓ Cut security questionnaire workload by 50%+, accelerating enterprise deal cycles ✓ Supported 50+ clients across SaaS, fintech, healthtech, and regulated industries ✓ Built SOC 2 and ISO 27001 programs aligned with real business operations ✓ Supported global teams across multiple time zones in long-term engagements ✓ Hands-on experience across governance, risk, compliance, and security programs 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝗻𝗱 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗙𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸𝘀 SOC 2 | ISO 27001 | ISO 27017 | ISO 27018 | ISO 42001 | NIST 800-53 | NIST 800-171 | NIST CSF | NIST AI RMF | FedRAMP | CMMC | CMMI | PCI-DSS | HIPAA | HITRUST CSF | GDPR | TISAX | NERC | FFIEC | C5 | ENISA | CIS CSAT | IRAP | PIPEDA | TX-RAMP | StateRAMP | AZ-RAMP | NY DFS 23 NYCRR Part 500 | EU AI Act 𝗜𝗳 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝘀 𝗯𝗹𝗼𝗰𝗸𝗶𝗻𝗴 𝗴𝗿𝗼𝘄𝘁𝗵, 𝗺𝗲𝘀𝘀𝗮𝗴𝗲 𝗺𝗲. 𝗜'𝗹𝗹 𝘁𝗮𝗸𝗲 𝗶𝘁 𝗳𝗿𝗼𝗺 𝗵𝗲𝗿𝗲. 𝗕𝗼𝗼𝗸 𝗮 𝗳𝗿𝗲𝗲 𝟲𝟬-𝗺𝗶𝗻𝘂𝘁𝗲 𝗮𝗱𝘃𝗶𝘀𝗼𝗿𝘆 𝗰𝗮𝗹𝗹. 𝗜'𝗹𝗹 𝗺𝗮𝗽 𝘁𝗵𝗲 𝗳𝗮𝘀𝘁𝗲𝘀𝘁 𝗽𝗮𝘁𝗵 𝗳𝗼𝗿𝘄𝗮𝗿𝗱.

Are you looking to identify security vulnerabilities, strengthen your cloud infrastructure, or improve your organization's cybersecurity posture? I help organizations protect their digital environments through penetration testing, cloud security assessments, Zero Trust architecture, vulnerability management, compliance consulting, and cybersecurity strategy development. With 15+ years of experience in cybersecurity, network security, and cloud infrastructure, I have designed and secured complex enterprise environments for organizations across multiple industries, including supporting security initiatives for large-scale environments such as AT&T, Amazon, USDA, and T-Mobile. My expertise includes: ✓ Penetration Testing & Vulnerability Assessments – Identifying security weaknesses, analyzing risks, and providing actionable remediation recommendations. ✓ Cloud Security Architecture – Securing AWS, Azure, and GCP environments through IAM, access controls, security monitoring, and best practices. ✓ Zero Trust Security Implementation – Designing secure access models based on identity verification, least privilege, and continuous security validation. ✓ Network Security & Infrastructure Hardening – Firewall configuration, VPN security, secure network architecture, and threat prevention. ✓ Security Compliance & Risk Management – Supporting frameworks including NIST, ISO 27001, HIPAA, PCI DSS, GDPR, and FedRAMP requirements. ✓ SIEM, SOAR & Threat Detection – Improving security monitoring, incident response, and threat intelligence capabilities. ✓ Fractional CISO Advisory Services – Helping organizations develop cybersecurity strategies, policies, risk management plans, and security roadmaps. How I help clients: ✔ Perform cybersecurity assessments to identify vulnerabilities before attackers exploit them. ✔ Review and improve cloud security posture across AWS, Azure, and GCP environments. ✔ Design secure enterprise architectures aligned with industry standards. ✔ Support compliance readiness and security improvement initiatives. ✔ Provide practical security recommendations backed by real-world enterprise experience. My approach combines deep technical expertise, industry best practices, and business-focused security solutions. I focus on understanding your environment, identifying risks, implementing effective controls, and delivering clear recommendations that improve your security posture. Certifications: • Cisco Certified Internetwork Expert (CCIE) • Certified Ethical Hacker (CEH) • Cisco Certified Network Professional (CCNP) Whether you need a penetration test, cloud security review, vulnerability assessment, compliance guidance, or ongoing cybersecurity advisory, I can help you build a more secure and resilient environment.

I am currently a fifth year student at the Rochester Institute of Technology set to graduate in 2026 with a BS/MS in Computing Security, as well as a previous information security intern for Factory Mutual, Wegmans, and AmTrust Financial. I have extensive experience in Information Technology, Information Security, Systems Administration, and Cybersecurity. Previous work I have done for clients: - Full corporate network penetration testing and remediation recommendations, finding vulnerabilities across servers, desktops, point-of-sale systems, routers, and IOT devices (such as security cameras) - Search engine enumeration of domain, identifying easily accessible file footprint and highlighting sensitive metadata - Security Information and Event Management tool implementation at all steps of the process, from importing data sources to creating alerts and triage documentation - Red team engagement with custom tooling and break scheduling for competition use

UpWork Recognition: Expert-Vetted | Top-Rated Plus | 100% Job Success Score I provide affordable cyber security solutions to startups, small and medium-sized businesses, non-profits, and other organizations. I organizations that need improved security but don't have the budget to support an enterprise level. I work with these companies to create a security solution that is both affordable and effective. In today's world of ever-increasing cyber threats where small businesses are targeted more frequently, it is vital that these companies have IT Security systems in place. Statistics show that nearly half of small companies that suffer a cyber breach never recover. SPECIALITES: • Vulnerability Analysis • Penetration Testing • Compliance Assessment • Network Security Planning • Consultation • Managed Security Services • Risk Assessment & Management CMMC, HIPAA, SOC2, GDPR,

I identify critical vulnerabilities in web applications, APIs, mobile apps, and cloud infrastructure before attackers exploit them. As a Penetration Testing Engineer, I conduct authorized security assessments daily and deliver findings development teams can actually act on. Certified across CRTA, CRTOM, CPPS, CASP, and CompTIA PenTest+, with ISO/IEC 27001 and ISO/IEC 20000 qualifications. Black Hat MEA 2025 finalist. Top 1% on TryHackMe globally. 🎯 Services: Web Application Testing - OWASP Top 10, SQL injection, XSS, CSRF, authentication bypass, session management, IDOR, SSRF, SSTI, path traversal API Security - REST/GraphQL testing, JWT exploitation, authorization bypass, BOLA, mass assignment, rate limiting, data exposure Mobile Security - iOS/Android testing, APK/IPA analysis, Frida instrumentation, certificate pinning bypass, insecure storage Network Pentesting - External/internal assessments, Active Directory, Kerberoasting, privilege escalation, lateral movement Cloud Security - AWS misconfigurations, IAM issues, S3 exposure, SSRF to metadata service, exposed credentials Source Code Review - Security review for .NET, Java, Node.js, and Python applications 🛠️ Tech Stack: Burp Suite Pro, Metasploit, Nmap, Frida, MobSF, JADX, SQLmap, Nuclei, Nessus, Wireshark, Hydra, Gobuster, ffuf, Ghidra, Volatility3 Languages: Python, Bash, Go, Java, C/C++, JavaScript, Node.js Cloud: AWS, Azure | Databases: MySQL, PostgreSQL, MongoDB 📦 You Get: ✅ Executive summary + CVSS-rated technical report ✅ Proof-of-concept exploits with reproduction steps ✅ Remediation guidance developers can implement immediately ✅ Free retesting for critical and high severity findings ✅ Clean deliverables ready for compliance documentation 💼 Industries: Fintech, SaaS, Healthcare, E-commerce, Blockchain, Government Compliance: ISO 27001, PCI-DSS, SOC 2, HIPAA testing experience Don't wait for a security incident. Contact me today for a comprehensive security assessment.

As a skilled and experienced ethical hacker and penetration tester, I bring a comprehensive understanding of cybersecurity to every project I take on. With a deep commitment to ethical practices and a dedication to helping clients protect their digital assets. My approach is rooted in a thorough understanding of the latest trends and developments in the field, allowing me to identify and address vulnerabilities in even the most complex systems. Whether you need a comprehensive security audit, a targeted vulnerability assessment, or assistance with network security, I have the expertise to deliver results that meet your needs. With a keen eye for detail and a natural ability to problem-solve, I am confident in my ability to secure your digital assets and protect your business from potential cyber attacks. By working closely with you to understand your unique needs and goals, I can develop a customized solution that meets your specific requirements. If you're looking for a professional and experienced ethical hacker and penetration tester to help safeguard your digital assets, I would be honored to have the opportunity to work with you.

Penetration tester and cybersecurity specialist offering VAPT for web applications, APIs, and network infrastructure. I find the exploitable weaknesses in your systems before a real attacker does, prove each one with a working proof of concept, and rate it by the actual risk to your business. I've worked both sides of security. I test systems the way an intruder would — real ethical hacking, not a checklist — and as a SOC analyst I've watched those same attacks surface in the logs. So I don't just hand you a list of problems. I can tell you what a real breach would look like on your side and how to catch the next one early. Most "penetration test" reports are a scanner's output dumped into a PDF and padded with false positives. I don't work that way. Every finding is tested by hand, proven with a working PoC, and written so your developers fix what counts instead of chasing noise. What I do: - Web application penetration testing — full OWASP Top 10 coverage - API security testing for REST and GraphQL - Internal and external network and infrastructure VAPT - Vulnerability assessment with clear remediation guidance - Cloud and SaaS security assessments - SOC support: SIEM monitoring, log analysis, threat detection, incident response - Reviewing existing scan results and stripping out the false positives What I regularly find: SQL injection, SSTI, command injection, XSS, CSRF, IDOR and broken access control, authentication and session flaws, business logic abuse, API weaknesses, and server and cloud misconfigurations. Every report gives you a severity rating, the business impact in plain English, steps to reproduce, and remediation your developers can ship right away. All work is fully authorized, kept inside the agreed scope, and confidential. Send me your scope, or just tell me what's keeping you up at night, and I'll walk you through how I'd test it and exactly what you'll get back.

I am a passionate cybersecurity enthusiast with a strong background in coding, particularly in web development. I possess numerous awards, certifications and experience that validate my expertise in these fields. In an ever-evolving world, I am constantly driven to acquire new knowledge and skills within the realm of cybersecurity and most importantly share them with others.

Senior Offensive Security Engineer – Top quality manual penetration testing and remediation guidance. I am a senior penetration tester with 8 years of experience in offensive security. I offer world-class penetration testing services and security consultancy at an affordable rate. During my career I have helped clients across AI startups, fintech, e-commerce, logistics, healthcare, social media (Meta), and more – finding vulnerabilities, fortifying defenses, and ensuring compliance (HIPAA, GDPR, NIST, etc.). Services & Expertise - Penetration Testing Services (Web, Network, Cloud): Deep-dive testing to uncover vulnerabilities in your web apps, networks, cloud (AWS, Azure, GCP). I provide clear findings with steps to fix them. - Red Teaming & Adversary Emulation: Simulate real-world cyber attacks to test and improve your organization's readiness. We mimic advanced adversaries to identify gaps in your detection and response. - Generative AI Security & AI Security Consulting: Secure your AI systems (LLMs) from threats like prompt injection and data leaks with specialized generative AI security consulting. - Vulnerability research: Review your application source code to find security flaws and developer friendly guidance on fixing the vulnerabilities. - Cybersecurity & Compliance Consulting (NIST, HIPAA, GDPR, SEC): Guidance to meet security standards and regulations. I help implement controls and best practices to comply with NIST, HIPAA, GDPR, SEC, etc., while improving overall security. - Cloud Security (AWS Security, Azure, GCP): Protection for your cloud infrastructure and DevOps pipeline. Harden servers and configurations and apply best practices. - System Administration & Security Engineering: Secure setup and management of servers, networks, and IT systems. I ensure everything is configured, patched, and monitored according to industry best practices. Why Choose Me? - Security assessments are conducted carefully without interrupting day to day business activities, results are thoroughly validated, zero noise. - Real-time reporting: Findings are reported in real time in a developer-friendly format, making it easy to prioritize and schedule fixes while reducing the window of exposure to potential exploitation. - Clear Communication & Reliability: Expect friendly, prompt communication and total professionalism. I provide regular updates and clear developer friendly reports. Your time and trust are valued, and I deliver on schedule and on budget. - Customized Solutions: No one-size-fits-all. I tailor my services to your specific needs, tech stack, and industry. Whether you need HIPAA compliance for a health app or prepare your app for SOC2 audit, I adapt to deliver the right solution. - Continuous Improvement: I stay on top of emerging threats – from the latest generative AI security issues to new developments in AWS Security – so you always get cutting-edge protection. Please Note (Ethical Hacking Only) I only conduct legal, authorized cybersecurity work. I do not offer any illegal or unethical hacking services (no social media account hacking, password/credential recovery, private investigation, or crypto scam recovery). Thank you for understanding! Ready to Secure Your Business? Let's talk! Feel free to reach out for a consultation or with any questions.