Asif H.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

To leverage my 15+ years of experience in Auditing, Consulting, Cyber Security, and Project Management to contribute to the success of a forward-thinking organization. I aim to utilize my skills in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk, and Compliance (GRC), and Information Security to drive innovative solutions, ensure regulatory compliance, and enhance overall security posture. My goal is to work collaboratively with cross-functional teams to implement robust security frameworks, mitigate risks, and support the organization's strategic objectives while fostering a culture of continuous improvement and excellence. Responsible for the continual enhancement and sustenance of new and existing security compliance and risk management programs and supporting the security interests of the organization across all security domains and technology environments. Task with leading and driving the compliance posture of the organization to include PCI DSS, SOC 1 and 2, GDPR, ISO 27001, HIPAA, SOX and other industry related frameworks and standard. GRC (governance, risk, compliance) experience with methodologies, activities, tools and enablers in a highly regulated industry experience in business process analysis, project methodology, or systems development life cycle. Supported revenue augmentation projects through planning, budgeting, supervision, and evaluation. Provided coordination and program management support for Data Center, and Revenue Board. Conducted security assessments of online applications to identify vulnerabilities. Professional Penetration Tester, Security Consultant Motivated and experienced technical and organisational leader with 10 years of experience in government and the private sector - Strong communication, mentoring, and decision-making skills - Recognized for implementing policy and process backed by technical credibility - Certified penetration tester and ethical hacker; knowledgeable in numerous cyber security and information technology tools/protocols including but not limited to Snort, Wireshark, Nessus, Nmap, Burpsuite, ZapProxy, IBM Appscan Source, Nikto, Acunetix Web Application/Network/Mobile Penetration Testing Wordpress/Joomla Security and Malware Analysis/Removal Ethical Hacking Security Consulting iPhone/Android/Blackberry/J2ME Mobile Security Testing Secure Code Review (.NET, JAVA, PHP) Vulnerability Assessment of Network Devices/Databases/Web Server/Application Server Wireless Security Website/server infected with MALWARES or HACKED removal - Web Server Security Assessment of susceptibility to Cross Site Scripting, SQL Injection and Buffer Overflow Vulnerabilities inline with the OWASP framework. In line with a strict code of conduct, and the rules of engagement agreed upfront with yourself, I will simulate the actions of a malicious and determined hacker. Using a proven methodology I will asses your web app for the above vulnerabilities as well as those laid out in the OWASP top 10 2017. Fully knowledge of CWE top 25 most dangerous software errors on application's. Provide full secure with easy concepts & able to understand everyone. Tools using -- NMAP, Burpsuite, Nessus, Wireshark, Acunetix,W3af, xsser,fuzzer nmap,nikto,grabber,matalsploit attacks, website redirecting The output of this assessment will provide you with a peer review report highlighting the following; 1. Discovered Vulnerabilities 2. Explanation of discovery and exploit path 3. Remediation actions 4. Security best practice 5. Technical References 1. Open Source Analysis / Footprinting Conduct reconnaissance using open source information. Analysis of Google entries, relevant websites and available metadata in order to enumerate Usernames, Staff Email Addresses and company IP's which can be used to brute force usernames. 2. Scanning With the IP addresses gleaned from the Open Source Analysis Then I will conduct an in-depth port scan of your network to figure out which ports and services are running. 4. Enumeration Using the port information gleaned above I will then attempt to glean more information about your network setup and hardware specification. 5. Vulnerability Assessment Using the port and service information I will then assess any vulnerabilities using open source channels ExploitDB, Metasploit and known underground forums. 6. Exploitation With prior agreement I can then exploit and vulnerabilities found to best demonstrate the effect and fall out of a potential attack. 7. Reporting The final report will be split into the above 1-6 sections, each with a complete analysis of the discoveries. Discovered vulnerabilities will be detailed with the exploit path as well as the potential outcome.