Nicolas T.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Your Partner for Risk-Based Security, Audit Readiness & Operational Resilience | $65/hr 🗽 U.S. 🌍 Global & willing to travel Proven Track Record in Regulated & Enterprise Environments I’m a Security Engineer from the United States with 10+ years of experience helping regulated organizations strengthen their security posture through risk-based decision making, audit readiness, and operational security. I work directly with leaders, auditors, penetration testers, vendors, and engineering teams to ensure security programs are not just compliant, but effective, prioritized, and aligned to real business risk. Why I Stand Out 🔹 Risk-Based Security Approach I help organizations prioritize security investments and remediation efforts based on real risk, reducing noise and focusing on what materially impacts the business. 🔹 Engineer-First Execution I translate compliance requirements (SOC 2, PCI-DSS, NIST, HIPAA, CMMC) into practical, implementable solutions that work in real environments. 🔹 Audit & Compliance Expertise Experienced in control implementation, remediation tracking, evidence preparation, and working directly with auditors to ensure successful outcomes. 🔹 Real-World Risk Reduction Focused on vulnerability management, DevSecOps integration, and IAM governance to reduce exploitable attack surface, not just produce reports. Core Services 🔹 Audit Readiness & Remediation Control implementation, gap assessments, remediation tracking, audit support, and evidence preparation. 🔹 Risk-Based Vulnerability Management Threat-informed prioritization, CI/CD integration, SAST/DAST, dependency scanning, and actionable remediation strategies. 🔹 DevSecOps & Cloud Security IAM, secrets management, container security, encryption, logging, and secure CI/CD pipeline implementation. 🔹 Identity & Access Governance (IAM) Access reviews, RBAC enforcement, onboarding/offboarding processes, and policy alignment. 🔹 Security Assessments Cloud, network, application, and API security assessments aligned to real-world risk. Who I Work With 🔹 Regulated organizations preparing for audits 🔹 Enterprise teams building or maturing security programs 🔹 SaaS & cloud-native companies implementing DevSecOps 🔹 Organizations needing risk-based prioritization, not just tooling and reports I help teams execute, remediate, and operationalize security in a way that is sustainable long-term. 📞 Let’s connect for a 30-minute discovery call to build a risk-informed, audit-ready, and operationally effective security program.