Abdullah H.

Breached, infected, deploying AI, or investigating something? I'm a cybersecurity consultant covering incident response, malware analysis, OSINT and AI security. I find the problem, fix it, and document it so you can prove it. Top Rated, 100% Job Success Score, 5+ years hands-on, MS in Information Security, EC-Council certified in digital forensics, Response usually within a few hours. AI & LLM Security Security assessment against the OWASP Top 10 for LLMs: prompt injection, jailbreaks, training-data and output leakage, insecure output handling, excessive agency and permission scoping. Hardened deployment of AI agents and autonomous tooling with sandboxed execution, OS-level firewall rules and runtime validation across Windows, macOS and Linux. Self hosted and local model builds with Ollama, LM Studio and vLLM where the data can't leave your infrastructure. Red teaming with Garak and PyRIT. AI usage policy and governance aligned to the NIST AI Risk Management Framework and ISO 42001. Malware Analysis & Reverse Engineering Static and dynamic analysis with Ghidra, IDA Pro, Binary Ninja, x64dbg, PEStudio, Detect It Easy, dnSpy, Cuckoo Sandbox, Any.Run, Triage, YARA and Sysinternals. Unpacking, deobfuscation, C2 and persistence identification, IOC extraction, MITRE ATT&CK mapping. You get a plain-English answer: what it is, what it did, what it took, and whether it's still there. OSINT & Threat Intelligence Fraud investigation, vendor and counterparty due diligence, digital footprint and attack surface mapping, brand and impersonation monitoring, breach and credential exposure checks, threat actor research. Maltego, SpiderFoot, Shodan, Censys, theHarvester, Recon-ng, Have I Been Pwned, MISP and OpenCTI. Structured, sourced reports you can act on. Incident Response & Digital Forensics Breach investigation, compromised device and account analysis, timeline reconstruction, containment, eradication and verified recovery. Autopsy, FTK Imager, Volatility, KAPE, Velociraptor, Wireshark, Splunk and the Windows event and registry artifact set. Reports written to hold up in front of a lawyer, insurer or board. Penetration Testing & Vulnerability Assessment Web application, API and network testing with Burp Suite Pro, OWASP ZAP, Metasploit, Nmap, Nessus, Nikto, SQLmap, Wireshark, Kali Linux and BloodHound. Testing mapped to OWASP and PTES, findings ranked by real business risk with remediation your team can actually follow. Security Hardening & Endpoint Protection EDR, antivirus, firewall and WAF deployment and tuning. Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Cloudflare and Wordfence. Secure Windows and Linux builds to CIS Benchmarks, Active Directory and Group Policy hardening, BitLocker and VeraCrypt encryption, and DLP with Microsoft Purview, Symantec DLP and Digital Guardian. GRC & Compliance NIST CSF, ISO 27001, CIS Controls, SOC 2, GDPR, HIPAA and PCI-DSS. Risk assessments, gap analysis, security policies, playbooks, SOPs and statements of work written to be used rather than filed. Privacy & High-Risk User Consulting Device hardening for travel and border crossings, full-disk encryption, secure deletion, encrypted backup and restore, password manager and vault setup, secure communications. For journalists, executives, and anyone who needs their devices to be quiet. Security Training & Documentation Tailored programs, syllabi, awareness material and technical writing for teams and government entities. How I work: plain English, no jargon dumps, a written summary after every session, and strict respect for your data. You keep control of your systems and your credentials throughout. Tell me what's happening and when you first noticed it. I'll tell you straight away whether I'm the right person for it.