Aamir T.

I help businesses identify security weaknesses, protect cloud environments, and meet compliance requirements. With 15+ years of hands-on experience in Cybersecurity and Information Security, I provide Penetration Testing, GRC Consulting, Security Audits, Risk Assessments, and practical security solutions. My work focuses on more than finding problems. I help startups, SaaS companies, and enterprises understand security risks, strengthen their defenses, prepare for compliance audits, and implement effective security controls. 𝐂𝐎𝐑𝐄 𝐄𝐗𝐏𝐄𝐑𝐓𝐈𝐒𝐄 & 𝐒𝐄𝐑𝐕𝐈𝐂𝐄𝐒 𝟏. 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐏𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐓𝐞𝐬𝐭𝐢𝐧𝐠 - Web Application, API, Network & Cloud Penetration Testing - Vulnerability Assessment & Security Testing - Security Risk Assessment & Remediation - Security Architecture & Infrastructure Hardening - Network Security & Threat Analysis 𝟐. 𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲, 𝐆𝐑𝐂 & 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 - ISO 27001 Consulting, Gap Analysis & Security Audits - SOC 2 Readiness, Compliance Assessments & Control Reviews - NIST Framework Assessments & Risk Management - Information Security Governance, Policies & Procedures - Regulatory Compliance, Security Documentation & Audit Support - Technical, Compliance & Security Course Reviews 𝟑. 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐃𝐞𝐯𝐒𝐞𝐜𝐎𝐩𝐬 - AWS & Microsoft Azure Security Assessments - Cloud Security Audits & Misconfiguration Reviews - Identity & Access Management (IAM) - DevSecOps & CI/CD Pipeline Security - Windows & Linux Infrastructure Security 𝟒. 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 & 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 - SOC Analysis, SIEM & Security Monitoring - Splunk, Log Analysis & Threat Detection - Security Incident Investigation & Response - Security Event Analysis & Risk Mitigation 𝐑𝐄𝐋𝐄𝐕𝐀𝐍𝐓 𝐏𝐑𝐎𝐉𝐄𝐂𝐓 𝐄𝐗𝐏𝐄𝐑𝐈𝐄𝐍𝐂𝐄 My Upwork experience includes web penetration testing, SIEM/SOC operations, industrial and OT network security assessments, SEC/FINRA-related compliance reviews, Google Workspace security investigations, firewall reputation remediation, and technical cybersecurity course reviews. I have also worked on security documentation, compliance assessments, technical investigations, and evaluations of security tools and solutions. These projects have involved identifying security gaps, reviewing technical evidence, assessing risks, and preparing clear reports and recommendations for clients. 𝐏𝐑𝐎𝐅𝐄𝐒𝐒𝐈𝐎𝐍𝐀𝐋 𝐂𝐄𝐑𝐓𝐈𝐅𝐈𝐂𝐀𝐓𝐈𝐎𝐍𝐒 & 𝐓𝐑𝐀𝐈𝐍𝐈𝐍𝐆 - CISA – Certified Information Systems Auditor (ISACA) - CEH – Certified Ethical Hacker (EC-Council) - eCPPT – Certified Professional Penetration Tester (INE) - ISO/IEC 27001:2022 Lead Auditor Training & Competency (Mastermind Assurance) - Microsoft Certified: Azure Administrator Associate 𝐖𝐇𝐀𝐓 𝐘𝐎𝐔 𝐂𝐀𝐍 𝐄𝐗𝐏𝐄𝐂𝐓 𝐖𝐇𝐄𝐍 𝐖𝐎𝐑𝐊𝐈𝐍𝐆 𝐖𝐈𝐓𝐇 𝐌𝐄 I believe good cybersecurity consulting should make complex security issues easier to understand and resolve. My approach is to understand your business and technical environment, identify the most important risks, and provide practical recommendations supported by clear findings. Whether you need a penetration test, an ISO 27001 or SOC 2 compliance assessment, a cloud security review, GRC consulting, or ongoing security support, I focus on delivering work that helps you make informed decisions and improve your security posture. 𝐋𝐄𝐓'𝐒 𝐒𝐄𝐂𝐔𝐑𝐄 𝐘𝐎𝐔𝐑 𝐁𝐔𝐒𝐈𝐍𝐄𝐒𝐒 If you need an experienced Cybersecurity and Information Security professional who understands both technical security challenges and business compliance requirements, I'd be happy to discuss your project and how I can help.