Usman A.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Your systems should be built to withstand attacks, not just keep running. I'm a Senior Cybersecurity and Cloud Security Engineer with extensive experience in secure infrastructure design, vulnerability assessment, penetration testing, and DevSecOps. I help businesses identify exploitable security weaknesses, strengthen their security posture, secure cloud environments, and reduce risks before attackers can exploit them. From web applications and APIs to cloud infrastructure, Kubernetes environments, CI/CD pipelines, and enterprise networks, I focus on finding real security gaps and delivering practical remediation strategies that development and infrastructure teams can implement. 𝐇𝐎𝐖 𝐈 𝐂𝐀𝐍 𝐇𝐄𝐋𝐏 𝐘𝐎𝐔𝐑 𝐁𝐔𝐒𝐈𝐍𝐄𝐒𝐒 𝐖𝐞𝐛 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 & 𝐀𝐏𝐈 𝐏𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: - Manual security testing of web applications, REST APIs, and GraphQL APIs - OWASP Top 10 vulnerability assessments - Authentication, authorization, and broken access control testing - SQL injection, cross-site scripting (XSS), SSRF, and injection vulnerability testing - Business logic vulnerabilities and privilege escalation - Session management, JWT, OAuth 2.0, and API security testing - Multi-tenant application isolation and data exposure testing - Burp Suite-based testing and targeted security automation - Actionable reports with proof of concept, risk ratings, and remediation guidance 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭𝐬 - 𝐀𝐖𝐒, 𝐀𝐳𝐮𝐫𝐞 & 𝐆𝐂𝐏: - AWS IAM, S3, EC2, Lambda, VPC, KMS, and security group assessments - Azure Entra ID, Key Vault, storage, networking, and cloud identity reviews - GCP IAM, Cloud Storage, service account, and network security assessments - Cloud misconfiguration and excessive-permission identification - Public exposure, insecure storage, and network attack surface analysis - Secrets management and credential exposure assessments - Cloud security posture reviews and attack path analysis - Security hardening aligned with CIS Benchmarks and cloud security best practices 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 & 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐏𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: - External and internal network security assessments - Linux, Windows Server, and UNIX security reviews - Firewall, VPN, routing, and network segmentation assessments - Identity and access management reviews - Privilege escalation and lateral movement testing within authorized scopes - Vulnerability validation and exposure analysis - Server hardening and attack surface reduction - Security reviews for FortiGate, Cisco, MikroTik, and related infrastructure 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 & 𝐂𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: - Kubernetes security assessments across EKS, AKS, and GKE - RBAC, service account, and cluster permission reviews - Container image vulnerability scanning - Docker configuration and container isolation assessments - Secrets exposure and insecure workload configuration testing - Network policies and workload security reviews - Kubernetes CIS Benchmark assessments - Runtime security and container supply-chain risk analysis 𝐃𝐞𝐯𝐒𝐞𝐜𝐎𝐩𝐬 & 𝐂𝐈/𝐂𝐃 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 - SAST, DAST, and software composition analysis (SCA) - GitHub Actions, GitLab CI/CD, Jenkins, and Azure DevOps security - Secrets and credential exposure detection - Terraform and CloudFormation security scanning - Container security and software supply-chain risk assessments - Automated security testing integrated into CI/CD pipelines 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 & 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 - Python-based security automation and reporting - Vulnerability prioritization and remediation planning - Security monitoring and alerting - CIS Benchmark assessments - Security controls supporting SOC 2, ISO 27001, HIPAA, and PCI DSS requirements Whether you need a web application penetration test, API security assessment, cloud security audit, Kubernetes security review, or DevSecOps assessment, I can help you identify weaknesses and take practical steps to reduce risk. Let's secure your applications, cloud infrastructure, and critical business systems. Send me a message with your project scope and security objectives, and let's discuss how I can help.