Freelance Security Engineers

Freelance Security EngineersFreelance Security Engineers

Projects People

proLahore, Pakistan

AI Automation Engineer | Full-Stack Apps & Integrations

66x: Hired

4.9: Rating

173: Followers

Expert

Expert

+2

AI Automation Engineer | Full-Stack Apps & Integrations

Cover image for Gut Health SaaS Platform Development

Gut Health SaaS Platform Development

1

29

Cover image for Provider Portal for Healthcare MSO

Provider Portal for Healthcare MSO

4

48

Cover image for Magnai | UK Public Affairs

Magnai | UK Public Affairs

6

93

Cover image for Humoni - secure housing in under 72 hours

Humoni - secure housing in under 72 hours

7

155

Security Engineer(2)

Ship your SaaS MVP in weeks - web, mobile, payments.

$25k+: Earned

15x: Hired

4.9: Rating

107: Followers

Expert

Mentor

+1

Ship your SaaS MVP in weeks - web, mobile, payments.

Cover image for Unexposed – The Document Vault That Can't See Your Documents

Unexposed – The Document Vault That Can't See Your Documents

0

40

Cover image for Bolt Template Development

Bolt Template Development

0

11

Cover image for Full-Stack Mobile App for Couples

Full-Stack Mobile App for Couples

0

12

Cover image for Togethr – Turn Community Voice into Product Momentum

Togethr – Turn Community Voice into Product Momentum

0

148

Security Engineer(1)

proBengaluru, India

Helping founders turn Replit MVPs into secure, scalable SaaS

13x: Hired

5.0: Rating

46: Followers

Expert

Helping founders turn Replit MVPs into secure, scalable SaaS

Cover image for Resolved Bot Development

Resolved Bot Development

0

2

Cover image for Development of MyLFA Registration Platform

Development of MyLFA Registration Platform

0

2

Cover image for Secure Auth & Multi-Tenant System for Industrial SaaS

Secure Auth & Multi-Tenant System for Industrial SaaS

0

26

Cover image for BuildWise Construction Project Management

BuildWise Construction Project Management

3

9

Security Engineer(3)

Cyber expert specialising in Azure Security Services.

$10k+: Earned

4x: Hired

5.0: Rating

25: Followers

Cyber expert specialising in Azure Security Services.

Cover image for Microsoft Sentinel & Splunk ES Engineer for up to 6 months

Microsoft Sentinel & Splunk ES Engineer for up to 6 months

0

17

Cover image for Extended Interview Process for CrowdStrike SIEM Specialist

Extended Interview Process for CrowdStrike SIEM Specialist

0

14

Cover image for Setting up and optimising Microsoft Sentinel

Setting up and optimising Microsoft Sentinel

1

58

Cover image for Configure SIEM Security Operation using Microsoft Sentinel

Configure SIEM Security Operation using Microsoft Sentinel

0

51

Security Engineer(1)

Smart Contract Audit for Secure Results

6: Followers

Smart Contract Audit for Secure Results

Cover image for Audit Report: BEING Project

Audit Report: BEING Project

0

20

Cover image for Audit Report: BlindDoge Project

Audit Report: BlindDoge Project

0

10

Cover image for Audit Report: Viku Project

Audit Report: Viku Project

0

12

Placeholder project card media

View more →

Security Engineer(3)

Stephen Kisong'e

Cyber Security Analyst

Cyber Security Analyst

Cover image for Built a controlled Kiso Secure

Built a controlled Kiso Secure AI red teaming lab using Promptfoo to test a local RAG application for prompt injection, system prompt leakage, indirect prompt injection, and sensitive data exposure. The setup used AnythingLLM with a Kiso Secure knowledge base, automated adversarial testing, and a hardened workspace to compare security behavior before and after remediation.

2

0

264

Cover image for This project focused on building

This project focused on building and testing a practical AI security assessment lab for evaluating LLM defenses against prompt injection and jailbreak attacks. I integrated Spikee by Reversec with a locally hosted cybersecurity model running through LM Studio, then added NVIDIA NeMo Guardrails to compare model behavior under three conditions: no guardrails, input filtering, and combined input/output protection. The work included configuring the local model environment, building a custom FastAPI gateway, integrating NeMo Guardrails, troubleshooting model latency and timeout issues, creating a reusable Spikee target, and analyzing attack results using Spikee’s built-in reporting tools. The project also explored different adversarial testing approaches, including prompt injection datasets, obfuscation, encoded attacks, Best-of-N testing, synthetic canary leakage tests, and structured benchmark comparisons. The objective was to measure how much the guardrails reduced successful attacks while keeping the model, dataset, and testing conditions consistent. Tools used: Spikee, NVIDIA NeMo Guardrails, LM Studio, Python, FastAPI, PowerShell, Parrot OS, local LLMs, JSONL datasets, and custom security testing scripts. This project demonstrates a hands-on approach to LLM red teaming, AI safety testing, prompt-injection assessment, and guardrail validation for organizations deploying generative AI systems.

7

2

551

Cover image for I conducted an authorized AI

I conducted an authorized AI security assessment of Lily Cybersecurity 7B to evaluate how effectively a hardened system prompt could resist jailbreak and prompt injection attacks. Using Prompt Fuzzer, I ran 15 attack techniques against the model. The system prompt successfully blocked 8 attempts, including most roleplay and social engineering attacks. The successful bypasses mainly used translated or altered wording to disguise the intent of the request. This project demonstrates why system prompts should be supported by input validation, moderation, output filtering, and continuous AI red team testing.

1

260

Cover image for Designed and documented a secure

Designed and documented a secure environment for running Robin, an AI-powered dark web OSINT tool, inside a compartmentalized Qubes OS and Qubes-Whonix setup. The environment was structured to separate research activity, Tor-routed traffic, sensitive credentials, untrusted content, and final reporting. Robin was deployed through Docker inside a dedicated research qube, with traffic routed through sys-whonix and sensitive notes stored separately in an offline vault qube. Disposable qubes were incorporated for opening potentially unsafe links and files. The setup was built around security by compartmentalization rather than relying on a single tool for protection. Particular attention was given to Docker mount restrictions, credential hygiene, network-boundary verification, lawful research scope, and keeping raw research data isolated from personal or client environments. The final result was a repeatable AI-assisted OSINT workflow that supports faster search refinement, result filtering, investigation summarization, and structured reporting while maintaining stronger operational security and clearer separation between collection, analysis, and final output.

0

263

Security Engineer(8)

Timișoara, Romania

Seasoned cybersecurity leader.

5.0: Rating

8: Followers

Seasoned cybersecurity leader.

Cover image for Firewall Configuration & Rule Review

Firewall Configuration & Rule Review

2

28

Cover image for Security Testing for iOS and Android Mobile Applications

Security Testing for iOS and Android Mobile Applications

1

21

Cover image for Automated Vulnerability Scanning and Security Assessment

Automated Vulnerability Scanning and Security Assessment

1

16

Cover image for Free Vulnerability Scanning Demo - Instant Security Insight

Free Vulnerability Scanning Demo - Instant Security Insight

1

35

Security Engineer(3)

AI Security & DevSecOps Engineer | Cloud Automation

New to Contra

AI Security & DevSecOps Engineer | Cloud Automation

Cover image for SafeShell | Secure Command Execution

SafeShell | Secure Command Execution & Linux Sandboxing (https://github.com/HamzaGhebriche/SafeShell) SafeShell is an open-source Python security tool I developed to inspect potentially dangerous shell commands, enforce execution policies, and run permitted commands within a restricted Linux sandbox. The project focuses on improving command execution safety in development environments, automation workflows, and security-sensitive applications. 🔐 Key Features 1. Command Security Analysis Inspects shell commands before execution. Identifies potentially dangerous command patterns. Generates structured findings and risk information. Supports deterministic command analysis without executing the submitted command. 2. Secure Linux Sandboxing Uses Bubblewrap and Linux security controls to restrict command execution. Implements Linux namespaces and seccomp-based restrictions. Reduces access to host resources through controlled filesystem and runtime configurations. Refuses protected execution when required security mechanisms are unavailable. 3. Security Policies & Access Control Enforces configurable offline execution policies. Supports explicit authorization for permitted operations. Prevents approvals from overriding hard security restrictions. Provides structured execution decisions and status information. 4. Security Automation & Auditing Offers a Python command-line interface. Supports JSON output for integration with automation workflows. Records local execution metadata for review. Provides timeout and output-size controls. 5. Cross-Platform Development Supports command inspection and policy management on Linux, Windows, and macOS. Provides protected execution on supported Linux environments. Includes automated validation through CI pipelines. Technologies: Python, Linux, Bubblewrap, seccomp, Linux Namespaces, Bash, GitHub Actions, JSON, Security Automation. My Role: Independent Developer & Security Engineer. Project Type: Open-source security tool. Current Status: Experimental alpha release (v0.1.0-alpha). SafeShell has undergone automated testing but has not received an independent security audit. It is not intended to serve as a production-grade security boundary.

0

27

Cover image for I developed GitHub Security Gate,

I developed GitHub Security Gate, an automated DevSecOps solution that helps development teams integrate security checks directly into their CI/CD pipelines. The solution combines SAST, secrets detection, dependency scanning, and infrastructure security analysis with configurable security policies. It helps teams identify vulnerabilities earlier, prioritize findings, and prevent code that violates defined security policies from being merged. Technologies: Python, GitHub Actions, Semgrep, Trivy, Gitleaks, Checkov, Syft, Grype.

0

50

Cover image for MCP Security Auditor | AI

MCP Security Auditor | AI Agent & MCP Server Security (https://github.com/HamzaGhebriche/mcp-security-auditor) MCP Security Auditor is an open-source security analysis tool I developed to help engineers identify security risks in Model Context Protocol (MCP) servers and AI-agent integrations. As AI agents increasingly connect to external tools, APIs, and sensitive data, securing these integrations becomes essential. I designed and developed MCP Security Auditor to automate security configuration reviews, identify potentially dangerous implementation patterns, and generate actionable security reports. Key Features: 🔐 MCP Security Analysis Detects risky authentication and authorization configurations. Identifies potentially unsafe tool permissions and execution patterns. Reviews filesystem access and security boundaries. 🤖 AI Agent Security Analyzes security configurations used in MCP integrations. Identifies potentially insecure connections between AI agents and external tools. Supports security reviews of AI-powered applications. ⚙️ Automated Security Auditing Static analysis of Python code and configuration files. Automated security findings with severity classifications. Security reports in JSON, HTML, Markdown, and SARIF formats. Configurable security policies and risk scoring. 🚀 DevSecOps Integration Supports automated security checks in development workflows. Helps developers identify security issues earlier. Provides actionable findings to support remediation. Technologies: Python, MCP, Static Application Security Testing, Security Automation, GitHub Actions, JSON, YAML. Business Value: Helps development teams review MCP integrations, identify risky configurations, and introduce repeatable security checks into their development processes. My Role: Independent Developer & Security Engineer. Project Type: Open-source cybersecurity tool.

0

35

Cover image for VamiAppSec | AI-Powered Application Security

VamiAppSec | AI-Powered Application Security Platform (https://vamiappsec.com/#top) VamiAppSec is an AI-assisted application security platform developed during my professional experience at VamiSec GmbH. I contributed to integrating automated security analysis into development workflows, combining multiple security scanning technologies with AI-assisted vulnerability analysis. My contributions included: • Integrating SAST, SCA, and secrets detection tools. • Automating security scanning through CI/CD pipelines. • Implementing Infrastructure-as-Code security checks. • Supporting SBOM generation and dependency analysis. • Developing security findings aggregation and reporting workflows. • Integrating AI-assisted vulnerability triage and remediation guidance. Technologies: Python, GitHub Actions, Semgrep, Gitleaks, Checkov, Syft, Grype, LLMs, DevSecOps. This experience strengthened my expertise in application security engineering, security automation, and AI-assisted DevSecOps.

0

44

Security Engineer(2)