You will get a cloud security audit with vulnerability remediation and SOC 2 prep
Project details
You'll get a clear-eyed security audit of your cloud and application stack — plus the fixes, not just a scary PDF. As a former Cyber Operations & Solutions Architect, I assess your AWS/GCP/Azure environment and CI/CD for real risk: misconfigurations, over-permissive IAM, exposed secrets, vulnerable dependencies, and missing controls. You get a prioritized findings report (severity-ranked, mapped to CVEs and OWASP), hands-on remediation of the critical issues, and hardening across IAM, secrets management, WAF, and network. Heading into SOC 2? I map gaps to the controls and get you audit-ready. I also bake security into your pipeline with SAST/DAST scanning (Snyk, Trivy, SonarQube) so you ship fast without shipping risk. Tell me your stack and your goal — audit, remediation, or SOC 2 prep — and I'll scope it.
Cybersecurity Expertise
Audit, Risk Assessment, Gap AnalysisTechnology Type
Firewall, IaaS, Operating System, SaaS, Web ApplicationCybersecurity Regulation
SOC 2What's included
| Service Tiers |
Starter
$299
|
Standard
$799
|
Advanced
$1,799
|
|---|---|---|---|
| Delivery Time | 5 days | 10 days | 21 days |
Compliance Plan | - | ||
Gap Analysis | |||
Implementation | - |
Frequently asked questions
78 reviews
(76)
(0)
(2)
(0)
(0)
This project doesn't have any reviews.
CC
Cole C.
Feb 15, 2026
Build Reusable Scraper for Dynamic Web Content (Low-Code Preferred)
KM
Kieran M.
Oct 20, 2025
Extract order data from Amazon Seller Central
OG
Osher G.
Oct 9, 2025
Build Automation to make searchable transcript database
EC
Erin C.
May 29, 2025
Web Scraping Specialist for Automotive Parts Data Collection
FI
Faizul I.
Jan 31, 2025
CRM Bot Creation and Automated Pipeline Setup
Top tier developer. Must hire!
About Sooraj
Senior Python Engineer | DevOps, Security, Scraping & AI Automation
84%
Job Success
Cochin, India - 12:10 pm local time
Need cloud infrastructure that runs itself, a security posture that survives an audit, or hard-to-reach data extracted and automated end to end? You just found the engineer who ships all three — faster, cleaner, and more reliably than anyone else on this page. 200+ completed upwork projects, a wall of 5-star "must hire" reviews, TWO Master's degrees (AI + Data Science), and a background as a Cyber Operations & Solutions Architect. Hiring me isn't a gamble — it's the obvious choice.
I don't just write scripts. I design secure, scalable systems — production cloud platforms, hardened CI/CD, and "unblockable" data + automation pipelines — that turn manual chaos into a reliable competitive advantage, delivered straight to your cloud, database, CRM, or Google Sheet.
🚀 WHAT I DO BEST
⚙️ DevOps, Cloud & Platform Engineering (SRE) End-to-end DevOps and Site Reliability Engineering on AWS, GCP, and Azure. Infrastructure as Code (IaC) with Terraform, Ansible, and CloudFormation; containers and orchestration with Docker, Kubernetes, and Helm; and rock-solid CI/CD via GitHub Actions, GitLab CI, and ArgoCD. I add observability (Prometheus, Grafana, CloudWatch), autoscaling, and zero-downtime deploys so your platform is fast, cost-efficient, and truly "set-it-and-forget-it."
🔐 DevSecOps, Security Engineering & AppSec Security baked into the pipeline, not bolted on. I harden cloud and CI/CD with SAST/DAST and dependency scanning (Snyk, Trivy, SonarQube, OWASP), vulnerability and CVE remediation, secrets management (HashiCorp Vault), least-privilege IAM, WAF and network hardening, and SOC 2 / compliance readiness. Ship fast — without shipping risk.
🕷️ Web Scraping & Data Extraction Large-scale scraping, crawling, and data extraction from ANY website, API, or dynamic JavaScript page. I defeat Cloudflare, CAPTCHAs, rate limits, IP bans, and anti-bot protection using Scrapy, Selenium, Playwright, Puppeteer, BeautifulSoup, and rotating residential proxies — high-performance crawlers built for millions of pages.
🤖 Automation, AI & LLM Integration Workflow automation and RPA with n8n, Zapier, Make, and custom Python that delete repetitive manual work. Plus AI/LLM integration — custom chatbots and AI agents on OpenAI GPT-4o, Claude, and Gemini with LangChain, RAG, and vector databases — wired into real workflows for document Q&A, classification, and content pipelines.
☁️ Data Engineering & Pipelines (ETL) Reliable ETL and data pipelines with Python, Pandas, Apache Airflow, and SQL/NoSQL (PostgreSQL, MySQL, MongoDB) — clean, validated data delivered to your warehouse, database, or CRM, plus interactive dashboards in Power BI, Tableau, and Looker Studio.
🛠️ CORE TECH STACK Python • Bash • Linux • AWS (Lambda, EC2, S3, EKS, CloudFormation) • GCP • Azure • Terraform • Ansible • Docker • Kubernetes • Helm • ArgoCD • CI/CD • GitHub Actions • GitLab CI • Jenkins • Prometheus • Grafana • Snyk • Trivy • SonarQube • OWASP • HashiCorp Vault • IAM • WAF • SOC 2 • Scrapy • Selenium • Playwright • Puppeteer • BeautifulSoup • Proxy Management • CAPTCHA Bypass • Headless Browsers • n8n • Zapier • Make • FastAPI • Flask • Django • REST API • GraphQL • Webhooks • OpenAI • Claude • LangChain • RAG • NLP • Airflow • Pandas • NumPy • PostgreSQL • MySQL • MongoDB • Power BI • Tableau
🎯 INDUSTRIES & USE CASES Cloud migrations and infrastructure setup, CI/CD and Kubernetes rollouts, security audits, vulnerability remediation and SOC 2 readiness — alongside e-commerce price & competitor scraping (Amazon, Shopify, Walmart, eBay), market research, CRM automation (HubSpot, Salesforce, Airtable, Notion), AI chatbots and document pipelines, and ETL/data migration. Trusted by SaaS startups, fintech, e-commerce, real estate, healthcare, and agencies.
✅ WHY CLIENTS HIRE ME — AND RE-HIRE ME
Proven track record: 133+ jobs, $40K+ earned, consistent 5-star "top-tier developer, must hire" reviews.
Fast delivery: quick turnaround with clean, documented, maintainable code and a Loom walkthrough on handover.
Built to last: my infrastructure, scrapers, and automations don't break the moment something changes — I engineer for the long term.
Security-first: data integrity, privacy, and system hardening are baked into everything I ship.
Clear communicator: responsive within 0–4 hours, fluent English — no jargon, no surprises, no missed deadlines.
💬 LET'S TALK Tell me what you're stuck on — a flaky deployment, a security gap, a broken pipeline, or an "impossible-to-scrape" site — and I'll tell you exactly how I'd solve it, free and no obligation. Click the green "Invite" or "Hire" button and let's hop on a quick 10-minute discovery call to map out your project.
Your infrastructure, data, and workflows — secured, automated, and working for you, starting this week. Let's build something that runs itself. 🚀
Steps for completing your project
After purchasing the project, send requirements so Sooraj can start the project.
Delivery time starts when Sooraj receives requirements from you.
Sooraj works on your project following the steps below.
Revisions may occur after the delivery date.
Scope & access
We define scope (cloud accounts, apps, pipelines) and your goal. You grant read-only access; I confirm rules of engagement in writing first.
Assess & scan
Automated scans (Snyk, Trivy, SonarQube, cloud posture) plus manual review of IAM, secrets, network, and configs — surfacing real, exploitable risk, not noise.