Eva G.

I'm a cybersecurity engineer and consultant who helps startups and growing companies build security from the ground up, before attackers find the gaps. I've secured 20+ organizations across 4 continents, built SOCs monitoring millions of events monthly, and reduced incident response time by 93%. From building Security Operations Centers from scratch to automating threat detection with SOAR platforms to performing penetration tests that exposed critical vulnerabilities before they became headlines - I help you scale securely. WHO I WORK WITH I specialize in three types of clients: - SaaS companies that need penetration testing before major releases or funding rounds - Startups building their first serious security infrastructure (SOC, incident response, monitoring) - Growing businesses that need to automate security operations without hiring a full security team WHAT I DO PENETRATION TESTING & WEB SECURITY I break into applications the way real attackers do—then show you exactly how to fix it. My pentests go beyond automated scanners to find logic flaws, authentication bypasses, and API vulnerabilities that tools miss. - OWASP Top 10 exploitation and remediation - API security testing (REST, GraphQL, WebSocket) - Authentication and authorization bypass testing - Manual code review for critical security flaws - Detailed reports with fix recommendations and risk ratings SOC BUILDING FROM SCRATCH Most startups can't afford a $500K+ SOC. I build lean, effective Security Operations Centers that monitor threats 24/7 without enterprise budgets. - Threat detection strategy and use case development - SIEM deployment and configuration (Splunk, ELK, Wazuh) - Log aggregation from cloud platforms (AWS, GCP, Azure) - Alert tuning to reduce false positives by 80%+ - Incident response playbooks and runbooks SOAR AUTOMATION & AI-DRIVEN SECURITY Stop burning hours on repetitive security tasks. I automate threat response so your team focuses on what matters. - SOAR platform implementation (Shuffle, Cortex, Phantom) - Automated incident triage and response workflows - Integration with SIEM, EDR, and ticketing systems - AI/ML models for anomaly detection and threat hunting - Custom Python automation for security operations MY APPROACH 1. **Discovery Call** - I learn your business, tech stack, and biggest security concerns 2. **Security Assessment** - I identify gaps in your current security posture 3. **Roadmap & Execution** - Clear priorities, timelines, and deliverables 4. **Knowledge Transfer** - You understand the "why" behind every recommendation RECENT PROJECTS - Built a full SOC for a fintech startup processing $2M/month in transactions - Performed penetration test for a SaaS platform, found 7 critical vulnerabilities pre-launch - Automated incident response workflows that reduced MTTR from 4 hours to 15 minutes - Developed AI-powered threat detection reducing alert fatigue by 65% TOOLS & TECHNOLOGIES - Pentesting: Burp Suite, OWASP ZAP, Metasploit, Nuclei, ffuf, SQLMap - SIEM/Logging: Splunk, ELK Stack, Wazuh, Graylog - SOAR: Shuffle, Cortex XSOAR, TheHive, Google Chronicle - Cloud Security: AWS Security Hub, GuardDuty, Azure Sentinel - Programming: Python (automation), Bash, PowerShell - AI/ML: Scikit-learn, TensorFlow for threat detection models WHY WORK WITH ME? ✅ I explain complex security issues in business terms (not just technical jargon) ✅ Fast turnaround - I know startups move quickly ✅ Transparent communication - Daily/weekly updates depending on project ✅ Practical solutions - I prioritize fixes based on actual risk, not fear LET'S TALK SECURITY Whether you need a one-time pentest, a full SOC buildout, or ongoing security automation, I'm here to help. Click "Invite to Job" or send a message with: 1. What you're building 2. Your biggest security concern right now 3. Your timeline Looking forward to being a trusted security partner of your organisation!