Ali H.
PenTest, AppSec, AppDev, AI, SaaS, MVP | CEH, CHFI, CPENT, Security+
𝗛𝗔𝗥𝗗 · 𝗲𝗻 · 𝗖𝗢𝗗𝗘 - 𝐏𝐞𝐧𝐭𝐞𝐬𝐭 𝐲𝐨𝐮𝐫 𝐬𝐭𝐚𝐜𝐤. 𝐇𝐚𝐫𝐝𝐞𝐧 𝐲𝐨𝐮𝐫 𝐜𝐨𝐝𝐞. 💼 SERVICES 🔒 𝐏𝐞𝐧𝐓𝐞𝐬𝐭 for web and mobile apps, APIs, and auth flows 🔎 𝐀𝐩𝐩𝐒𝐞𝐜: security audits and secure code review (OWASP Top 10) ⚙️ 𝐀𝐩𝐩𝐃𝐞𝐯: secure web and AI development (React, Node) 🧠 𝐀𝐈, 𝐒𝐚𝐚𝐒, 𝐌𝐕𝐏: production platforms that ship fast and stay locked down ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 𝟏𝟎𝟎% 𝐉𝐨𝐛 𝐒𝐮𝐜𝐜𝐞𝐬𝐬 | 𝐂𝐄𝐇 | 𝐂𝐇𝐅𝐈 | 𝐂𝐏𝐄𝐍𝐓 | 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲+ | 𝐌𝐒 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 (𝐏𝐈𝐄𝐀𝐒) | 𝟗+ 𝐲𝐞𝐚𝐫𝐬 in tech | Available now I find and fix security holes in web applications, APIs, and AI systems. I also build the apps: 𝐀𝐩𝐩𝐃𝐞𝐯, 𝐀𝐈, 𝐒𝐚𝐚𝐒, and 𝐌𝐕𝐏𝐬. I bring 𝐂𝐄𝐇, 𝐂𝐇𝐅𝐈, 𝐂𝐏𝐄𝐍𝐓, 𝐂𝐨𝐦𝐩𝐓𝐈𝐀 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲+, an MS Cyber Security degree from PIEAS, and 9+ years shipping production software, so I test like an attacker and fix like a developer. I look for problems at the code level, not just what an automated scanner prints out. My MS thesis research found a novel denial of service attack in LoRaWAN IoT networks and built a working mitigation. Most security freelancers cannot read your source code. I can, because I spent years writing the kind of code I now test. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎓 CREDENTIALS → 𝐂𝐄𝐇 (EC-Council), certified August 2026. Score 105 → 𝐂𝐇𝐅𝐈 (EC-Council), certified September 2026 → 𝐂𝐏𝐄𝐍𝐓 (EC-Council), certified August 2026. 24 hour practical exam → 𝐂𝐨𝐦𝐩𝐓𝐈𝐀 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲+, certified August 2026 → 𝐌𝐒 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 (PIEAS): cryptography, forensics, malware analysis, ethical hacking → MS thesis: LoRaWAN DoS attack and mitigation (NS-3, defended 2023) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🛡️ PROOF PROJECTS → 𝐇𝐞𝐚𝐥𝐭𝐡𝐜𝐚𝐫𝐞 𝐀𝐏𝐈: multi-tenant, JWT and OAuth, RBAC, rate limiting, 40+ endpoints → 𝐀𝐈 𝐜𝐡𝐚𝐭 𝐡𝐚𝐫𝐝𝐞𝐧𝐢𝐧𝐠: prompt injection filtering, rate limits, validated API before the LLM → 𝐘𝐨𝐮𝐫𝐊𝐞𝐲: AES-GCM encryption at rest, secp256k1 key management → 𝐇𝐚𝐦𝐚𝐡 𝐀𝐈 𝐭𝐨𝐨𝐥𝐬: secure AI API integration, JWT auth, input validation ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔧 TOOLS Security: Burp Suite, Nmap, Wireshark, Metasploit, Autopsy, IDA Development: React, Node.js, TypeScript, Python, MySQL ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ⭐ TESTIMONIALS "Ali has been impressive. Extremely dedicated, very dependable, and made a big effort to meet deadlines." (CRM Client) "Ali was amazing with his skills, thoroughness, and problem solving. He learned a new specialized domain quickly." (Software Engineer Client) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Industries: Healthcare, SaaS, Fintech, IoT, AI and ML Hours per week: More than 30 Response time: 0 to 4 hours Languages: English (Fluent), Urdu (Native)
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $440
Billed in all: $34,227$34k
$220 in the last 6 months
Across 13 contracts
Earnings, last 30 days
Read once a week before Oct 27, 2026, daily since. Dotted: longer than usual between two readings. Hatched: over two weeks without one.
Skill rankings: Top 22% in Cryptography
Ranked by MRR among everyone on Upwork with the skill.
- #25Secure SDLC76 freelancers · 🇵🇰 #4Top 33%🇵🇰#4 of 8
- #39OWASP109 freelancers · 🇵🇰 #9Top 36%🇵🇰#9 of 22
- #41Cryptography183 freelancers · 🇵🇰 #6Top 22%🇵🇰#6 of 27
- #58Security Assessment & Testing171 freelancers · 🇵🇰 #12Top 34%🇵🇰#12 of 32
- #75Application Security251 freelancers · 🇵🇰 #16Top 30%🇵🇰#16 of 46
- #80Web Application Security246 freelancers · 🇵🇰 #16Top 33%🇵🇰#16 of 46
- #92Ethical Hacking320 freelancers · 🇵🇰 #24Top 29%🇵🇰#24 of 67
- #98AI Security199 freelancers · 🇵🇰 #18Top 49%🇵🇰#18 of 41