Need an AI/LLM application pentested before launch? I'm a CREST-registered, OSCP-certified penetration tester currently doing product security at HackerOne. In the last 7 years I've found vulnerabilities reported in the Hall of Fame at SkyScanner, Under Armour, Western Union, Binance, and Intel. AI/ML Security Specialist & Senior Penetration Tester | OSCP • CREST CRT • CREST CPSA • ISC2 CC • ISO 27001 LA | 7+ Years | Currently Product Security @ HackerOne I help AI startups and SaaS companies ship products that don't get breached. My focus: securing LLM applications, MCP servers, agentic systems, and the REST/GraphQL APIs that power them — using the same offensive playbook that earned me Hall of Fame recognition from SkyScanner, Under Armour, Redox, Western Union, Indeed, Binance, and Intel. ━━━━━━━━━━━━━━━━━━━━━━ AI / ML SECURITY (PRIMARY) ━━━━━━━━━━━━━━━━━━━━━━ ✅ LLM Vulnerability Assessments aligned with OWASP Top 10 for LLM Applications (2025) — prompt injection, sensitive info disclosure, supply-chain, data/model poisoning, improper output handling, excessive agency, system prompt leakage, vector/embedding flaws, misinformation, unbounded consumption ✅ AI Red Teaming using PyRIT, Garak, DeepTeam, PentAGI, Strix — single-turn + multi-turn jailbreaks, indirect injection, tool-poisoning, RAG poisoning ✅ Model Context Protocol (MCP) Security — auditing MCP servers/clients for tool poisoning, OAuth/token theft, command-injection (CVE-2025-6514, CVE-2025-49596 class issues), capability-confusion, and STDIO RCE patterns ✅ Threat Modeling for Generative AI mapped to MITRE ATLAS + NIST AI RMF + OWASP Agentic AI Top 10 (Dec 2025) ✅ MLSecOps & AI Security in CI/CD — automated red-team pipelines via N8N, Nuclei, ars0n framework, OWASP Nettacker, integrated into GitHub Actions/GitLab/Jenkins so every model + prompt change is tested before merge ━━━━━━━━━━━━━━━━━━━━━━ TRADITIONAL VAPT (SECONDARY) ━━━━━━━━━━━━━━━━━━━━━━ ✅ Web App & API Penetration Testing — Django, FastAPI, NestJS, REST, GraphQL with Burp Suite Pro ✅ OWASP Top 10:2025 + OWASP API Top 10 — IDOR, SSRF, auth bypass, business-logic flaws, mass assignment, JWT/session attacks ✅ Mobile (Android/iOS), Network (internal/external), Cloud (AWS/Azure/GCP) pentesting ✅ Smart Contract Security Audits — Solidity, common DeFi attack patterns ✅ DevSecOps — SAST/DAST integration, WAF tuning, secure-SDLC consultation ━━━━━━━━━━━━━━━━━━━━━━ PROOF OF WORK ━━━━━━━━━━━━━━━━━━━━━━ - Hall of Fame: SkyScanner, Under Armour, Redox, Western Union, Indeed, Binance, Intel - Currently: Product Security Analyst @ HackerOne (the world's largest bug-bounty platform) - Active: Lead AI Product Security freelancer for a US-based AI startup building agentic LLM tooling - Certs: OSCP (offensive security), CREST CRT (UK gold-standard pentest), CREST CPSA, ISC2 CC, ISO 27001 LA ━━━━━━━━━━━━━━━━━━━━━━ WHAT YOU GET ━━━━━━━━━━━━━━━━━━━━━━ 1. A scoping call within 24 hours under NDA 2. Hybrid manual + automated testing (zero scanner-only "100-page PDF" reports) 3. Executive summary + technical findings, each with reproduction steps, CVSS, business impact, and developer-friendly remediation 4. Mapping to your compliance frameworks: SOC 2, ISO 27001, HIPAA, PCI-DSS, EU AI Act, NIST AI RMF 5. Free remediation re-test within 30 days — every finding re-validated until closure ━━━━━━━━━━━━━━━━━━━━━━ IDEAL CLIENTS ━━━━━━━━━━━━━━━━━━━━━━ 🚀 AI/ML startups shipping LLM apps, RAG systems, MCP servers, or agentic workflows that need a real adversary before launch or before SOC 2 🌐 SaaS / fintech / healthtech teams needing OWASP-aligned web + API VAPT with a clean, auditor-ready report If you're building with GPT-4o, Claude, Llama, Gemini, custom fine-tunes, LangChain, LangGraph, CrewAI, AutoGen, or MCP — and you need someone who actually breaks things instead of running a scanner — let's talk. 📩 Send your scope (and ideally a 1-line description of the LLM/agent stack). You'll get a tailored test plan within 24 hours. Keywords: AI Security, LLM Security, AI Red Teaming, AI Penetration Testing, GenAI Security, Prompt Injection Testing, Jailbreak Testing, MCP Security, Model Context Protocol Audit, MLSecOps, OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS, Agentic AI Security, RAG Security, Vector Database Security, Penetration Testing, VAPT, Web Application Penetration Testing, API Penetration Testing, REST API Security, GraphQL Security, Burp Suite Pro, OWASP Top 10, Mobile Pentest, Cloud Security AWS Azure GCP, Smart Contract Audit, DevSecOps, SAST DAST, OSCP, CREST CRT.

Full Stack and AI engineering leader who designs and builds production-grade applications using React, Node.js, Python, and AWS. Amazon and Verizon alum with deep experience in distributed systems, IoT platforms, real-time data pipelines, and applied AI/LLM integrations. Hands-on developer comfortable building frontend interfaces, backend APIs, ML pipelines, and cloud-native architectures. Combines strong product intuition with the ability to architect, code, and deploy intelligent systems that scale globally.

I’m a Web & Mobile Developer with a strong background in Quality Assurance, giving me a development approach focused not only on building features, but also on reliability, usability, and product quality. I develop modern web and mobile applications from frontend interfaces to backend APIs, databases, integrations, and deployment. My previous QA experience helps me identify edge cases early, troubleshoot complex issues, and deliver stable applications with fewer production problems. I can help with: * Full-stack web application development * iOS & Android mobile development * React / Next.js frontend development * React Native & Flutter applications * Node.js & Python backend development * REST API and third-party integrations * SaaS and business application development * Database design and integration * Bug fixing and performance optimization * QA, testing, and application troubleshooting * Existing application maintenance and modernization * Cloud deployment and CI/CD I’m comfortable working with existing codebases as well as developing products from scratch, with a focus on clean implementation, maintainability, and a smooth end-user experience.

SKILLS -Data structure -Web Apps with flutter -Mobile Apps with flutter (Android & IOs) -Desktop Apps for windows -Create Read Update And Delete (crud) operations with firebase -Hive Api consumption

Job Objective Years of Experience: 20 years Desired Position: Architect Preferred Location: Shenzhen Personal Highlights Core Strengths: 10+ years of full-stack / architecture experience | Former co-founder of a SaaS company | Hands-on implementation of AI Agents Profile & Positioning Over 10 years of full-stack development and architecture experience, with a hybrid profile as an AI technology expert, SaaS high-availability architect, and engineering efficiency specialist. Skilled in cross-departmental collaboration and complex business logic abstraction, effectively bridging business pain points and technical implementation. Focused on cloud-native architecture, large-model application deployment, and AI Agent (intelligent agent) practices. As a former co-founder, I have both 0-to-1 product commercialization capabilities and team management experience. I stay current with AI frontiers (e.g., OpenAI Claude/OpenCode) and

Hi, I’m Natalie! My bread and butter is as a freelance senior UX researcher and UX/UI designer. However, I also wear a lot of hats as a leader. A "unicorn", some might say. 🦄 I also specialize in product design strategy consultation, AI adoption, product strategy, business and marketing optimization, process efficiency, vibe coding, leadership and decision-making, and more. You have a need, I make it happen. My background lies in EdTech, psychology, art, and child development, plus proficiency in Spanish. My work is driven by empathy, fueled by curiosity, and grounded in a strong sense of social and environmental responsibility. I love uncovering honest, often vulnerable user stories and translating those insights into thoughtful, impactful design solutions. I bring both a balance of creative vision and strategy as well as practical focus and task-mastering to the table — thinking big while keeping scope realistic and stakeholders and clients happy, too. I am curious, empathetic, and passionate about product design and development, and making an impact in the areas that need it most. When I’m not deep in research or design, you’ll probably find me off-grid, backpacking in the Northern California mountains, creating art, or traveling internationally. I’m drawn to companies with heart — and I’m excited to contribute to work that truly makes a difference. Please get in touch if you or someone you know has a freelance need. ------------------------------------------------------------------------------------------------------- Skills: Leadership, Communication, Vibe Coding, AI Adoption, User Experience Research, Innovation Strategy, Personas, User Journey Mapping, Wireframing, Prototyping, Usability Testing, Presentations, Surveys, Statistics, Data Collection and Analysis, LMS research and design Tools: Claude Code, GitHub, Figma, Miro, Fullstory, Qualtrics, Asana, AirTable, Tally, Google Analytics, Sketch, Adobe XD, Balsamiq, Zeplin, UX Folio, Dribbble, InDesign, Illustrator, Photoshop

AI Hardware & On-Device AI Engineer 🤖 AI Agents · 🧠 Embedded Systems · ⚡ GPU Optimization · 🔒 Privacy-First AI ABOUT ME I design and build end-to-end AI systems that run on real hardware, focusing on on-device intelligence, safety, and high performance. My background is in embedded systems, firmware, and real-time Linux. I work across the full stack — from hardware bring-up and kernel-level development to AI inference optimization and agent system design. Today, I specialize in building AI agents that run fully on-device, optimized for low latency, privacy, and efficient hardware usage. CORE EXPERTISE 🔹 AI Agent Systems (on-device, real-time execution) 🔹 AI Agent Safety (sandboxing, control flow, secure execution) 🔹 GPU & Inference Optimization (CUDA, TensorRT, quantization) 🔹 Embedded Systems (firmware, RTOS, Linux BSP, drivers) 🔹 Privacy-First AI (fully local pipelines, no cloud dependency) 🔹 Hardware–Software Co-Design (system architecture to silicon) WHAT I CAN HELP BUILD ⚙️ On-device AI agents (voice assistants, automation systems) ⚙️ Edge AI systems (Jetson, embedded Linux platforms) ⚙️ High-performance inference pipelines (GPU/accelerator optimized) ⚙️ Low-latency real-time AI systems ⚙️ Embedded AI products combining hardware + software CURRENT FOCUS 🚀 Building a production on-device AI agent product 🛡️ Developing safe AI agent runtime systems 🧩 Moving toward designing a custom AI inference chip SKILLS AI Agents · Embedded Linux · Firmware · CUDA · TensorRT · GPU Optimization · Python · C/C++ · Real-Time Systems · Edge AI · System Design · ML Inference AVAILABILITY 🌍 Open to remote freelance and long-term collaborations If you're building AI products that need to run fast, locally, and reliably on hardware — I can help design and optimize the full system.

Hi, I'm Carlin 👋, after advising on over $15bn of M&A for clients including Shell, Chevron and Carlyle, OpenAI hired me to teach their models how to do that work. Now I build the systems and software that automate processes across departments. Around $450k of value created so far, by replacing the reporting, analytics, risk and customer operations work that businesses normally hire teams to do. --- The longer, sit down version Pleasure to meet you. I'm Carlin 👋 I spent my career in M&A, advising on over $15bn of transactions for clients including Shell, Chevron and Carlyle. Then OpenAI hired me to train their models on that work, which meant a year spent on the other side of the problem: finding exactly where these systems are excellent, where they quietly fail, and what has to be true before a business can trust the output. I now build the systems and software that automate processes across a business. Around $450k of value created so far. My favourites include: – Risk and fraud monitoring (surfacing suspicious accounts, transactions and exposure as they happen, rather than after the loss) – Reporting and analytics automation (live dashboards fed by automated pipelines, so month-end stops being a reconstruction exercise) – Compliance and regulatory reporting (assembled from live data instead of rebuilt by hand every cycle) – Customer operations and CRM (records in one place, feedback captured and routed, follow-up that runs itself) – Internal tooling (the small pieces of software that remove a recurring manual job entirely) I work with LLM models such as Anthropic's and OpenAI's, and also use Zapier and Make where required. I am also comfortable with more or less every CRM and project management tool (think HubSpot, Salesforce, Monday, Asana, Notion, Airtable, etc) and can build custom API integrations wherever the off-the-shelf connector doesn't exist. If you're looking for someone who gets excited about automating processes and building systems that don't fall over, then I'm your guy. Whether you work with me for a day, a week or a year, you'll get high-quality builds and communication that doesn't go quiet. Looking forward to talking.

Hi! I’m a Senior Full-Stack Engineer and Fractional CTO with over 10 years of experience building and scaling web applications, leading teams, and delivering high-quality software. I’ve worked across startups and established companies, building production systems end-to-end, from architecture to clean and reliable code. Since I’m new on Upwork, I’m offering discounted rates for my first clients. You get senior engineering quality at an accessible rate while I build my Upwork profile. What I can help you with: • Full-Stack Development – TypeScript – React / Next.js – Node.js – Serverless applications – API design and development • Backend Engineering – Authentication and permissions – Payments and billing systems – Microservices – Real-time features (WebSockets) – Database design and optimization • Cloud / DevOps – AWS (Lambda, S3, EC2, RDS, CloudFront) – CI/CD pipelines – Infrastructure as code – Monitoring and logging setups • CTO & Architecture Consulting – Product and technical roadmaps – System design and architecture – Code reviews and audits – Security best practices Why clients choose me: • Reliable, predictable delivery • Clear, consistent communication • Clean, scalable, well-structured code • Product thinking, not just coding • Calm, professional, and easy to work with Special offer for my first Upwork clients: A free 10-minute code or architecture review so you can see my approach before making a decision. Feel free to message me. I respond quickly.

Most business software does not need a large development team or a six-month project. I help founders and small businesses turn manual processes, disconnected systems and product ideas into reliable working software — often within days rather than months. I have 20+ years of software development experience and have built and maintained real production systems, not just prototypes. Today I use AI-assisted development extensively to move much faster, while bringing the architecture, debugging and operational experience needed to make sure the result actually keeps working after the demo. I’m a particularly good fit when you need someone who can understand the business problem first and then build the solution himself. Typical projects include internal tools and dashboards, API integrations, workflow automation, customer or booking portals, payment integrations, small SaaS products, MVPs and prototypes, and taking an AI-built or “vibe-coded” application from prototype to production. My main stack includes PHP / Symfony, TypeScript / JavaScript, Angular, Next.js / React, PostgreSQL, Docker, REST APIs and modern AI-assisted development workflows. I’m also comfortable working with existing systems, external APIs, deployment, logging, background processes and production infrastructure. My background is broader than software engineering alone. I’ve run my own businesses for many years, so I naturally think about processes, costs, revenue, user experience and whether something is actually worth building. I prefer lean projects with a clear outcome. Sometimes that means building the complete solution. Sometimes the best result is a much smaller tool or automation than you originally thought you needed. Based in the Netherlands. Available for remote work and, for Dutch clients, occasional on-site sessions when useful. If you have a process that wastes time, systems that should talk to each other, or an idea you want turned into a working product, send me the problem. I’m happy to think through the simplest way to solve it.