Salman N.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

I am a Senior Cybersecurity and network Engineer and Penetration more than 15 years of hands-on experience securing enterprise, banking, academia, and high-availability infrastructure. My work spans offensive security, defensive architecture, and secure network design, which allows me to protect systems not just at the application layer, but all the way down to the network and transport layers. I do not provide “scan-and-send” security. I provide engineering-grade security. I have personally led and executed security assessments for financial platforms, cloud-based services, and mission-critical production systems including banking applications, payment systems, identity services, VPN gateways, and web infrastructures. I also design real-world penetration testing labs and Capture-The-Flag environments used to validate the security posture of complex systems under realistic attack conditions. Security & Networking Expertise I am CCNA-certified and have extensive experience designing, securing, and troubleshooting enterprise networks. I work with: Routing, switching, and segmentation Firewalls, IDS, WAFs, and traffic filtering SSL/TLS hardening and secure communications Load balancers and reverse proxies Email and DNS security I also specialize in VPN technologies including IPSec, SSL-VPN, OpenVPN, L2TP, StrongSwan, and OpenSwan, helping organizations build secure remote access, site-to-site connectivity, and zero-trust tunnels that remain stable under production workloads. This means I can secure not only your applications, but also the network paths they travel on. What makes my work different Most freelancers rely heavily on automated scanners. I perform manual, attacker-grade security engineering. I focus on: Business-logic vulnerabilities Authentication and session flaws Access-control bypasses Injection and chained exploits Cloud and VPN misconfigurations Backdoors, persistence, and hidden malware These are the vulnerabilities that real attackers use and automated tools routinely miss. All assessments follow OWASP ASVS, OWASP Top 10, MITRE ATT&CK, OSSTMM, NIST RMF, and PCI-DSS frameworks and are validated through hands-on exploitation, not just reports. Proven real-world impact I have discovered and responsibly disclosed zero-day vulnerabilities in: Microsoft Windows SMB Microsoft Hotmail FastMail email platform These were published by major security platforms such as Exploit-DB and Packet Storm, demonstrating real-world exploitation skill—not just theory. Who should hire me You should work with me if: You have been hacked, infected, or compromised You run financial, SaaS, or customer-data platforms You need real penetration testing, not checkbox compliance You want stable, secure VPN and network infrastructure You care about long-term protection, not temporary fixes I am not the cheapest option — I am the one that ensures your system stays secure when it matters most. If you want your infrastructure protected the same way I secure banks, cloud platforms, and high-risk production environments, I am ready to help.