Shereen F.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

I'm a senior cybersecurity specialist with 5+ years of hands-on experience in detection engineering, threat hunting, purple team operations, and security operations — including work in OT/IT converged environments. I've built detection pipelines, ran purple team exercises, and managed enterprise security tooling across endpoint, network, and cloud. I build from scratch, document everything, and deliver outputs that align with your environment. Equally comfortable working independently or as part of a team. 🔴 Purple Team & Adversary Simulation Threat emulation mapped to MITRE ATT&CK, detection gap analysis, control validation, red/blue collaborative exercises with actionable outputs 🔵 Detection Engineering & Threat Hunting SIEM detection logic and rule development (Splunk SPL, KQL), proactive threat hunting across endpoint, network and cloud telemetry, incident triage, malware analysis, memory forensics (Volatility 3), Wireshark 🟣 Security Operations & XDR/MDR CrowdStrike, Sophos XDR/MDR, Microsoft Defender XDR, Symantec/Broadcom, DMARC/DKIM/SPF hardening, ISO 27001 Lead Implementer 🔐 Application & Cloud Security Mobile, Web app and API security testing (OWASP Top 10), DevSecOps, CI/CD hardening, Docker/Kubernetes security, AWS security audits, Burp Suite, Nuclei ⚙️ QA Engineering 700+ verified Upwork hours in QA delivery — API testing (Postman, Python), security-focused QA, automation pipelines, cross-functional work with DevOps and product teams If you need someone who can break, test, secure, automate, or improve your application, I can help. Keywords: Detection engineering · Threat hunting · Purple team · XDR/MDR · Incident response · Malware analysis · APT simulation · SOC analysis · Security monitoring · Behavior analysis · Web application security · API security · Application pentesting · Security testing · Vulnerability assessment · Bug bounty style testing · OWASP Top 10 · SANS CWE Top 25 · Security audit · Manual penetration testing · Authentication & access control testing · Cloud security review · DevSecOps · CI/CD security · Docker · Kubernetes · AWS security · Threat detection · Security hardening · QA testing · API testing · Test automation · Regression testing · SDLC QA · Postman · Python automation · Bash scripting · Burp Suite · Nuclei · Subfinder · Amass · Wireshark · Splunk · Microsoft Defender · CrowdStrike · Symantec Endpoint · ISO 27001 · Cybersecurity consultant · Security audit for startups · Secure application · Harden server · Fix security issues