Freelance Security EngineersFreelance Security Engineers
ProjectsPeople
Abubakar Chan's avatar
Abubakar Chan
proLahore, Pakistan
AI Automation Engineer | Full-Stack Apps & Integrations
$100k+
Earned
66x
Hired
4.9
Rating
147
Followers
ANYTHING_EXPERT

Expert

REPLIT_EXPERT

Expert

+2
AI Automation Engineer | Full-Stack Apps & Integrations
Cover image for Gut Health SaaS Platform Development
Gut Health SaaS Platform Development
0
6
Cover image for Provider Portal for Healthcare MSO
Provider Portal for Healthcare MSO
3
43
Cover image for Magnai | UK Public Affairs
Magnai | UK Public Affairs
6
81
Cover image for Humoni - secure housing in under 72 hours
Humoni - secure housing in under 72 hours
6
139
Security Engineer(2)
Raymond Asogwa's avatar
Raymond Asogwa
proCyprus
Ship your SaaS MVP in weeks - web, mobile, payments.
$25k+
Earned
14x
Hired
4.9
Rating
103
Followers
BOLT_EXPERT

Expert

BOLT_MENTOR_EXPERT

Mentor

+1
Ship your SaaS MVP in weeks - web, mobile, payments.
Cover image for Unexposed – The Document Vault That Can't See Your Documents
Unexposed – The Document Vault That Can't See Your Documents
0
33
Cover image for Bolt Template Development
Bolt Template Development
0
3
Cover image for Full-Stack Mobile App for Couples
Full-Stack Mobile App for Couples
0
2
Cover image for Togethr – Turn Community Voice into Product Momentum
Togethr – Turn Community Voice into Product Momentum
0
141
Security Engineer(1)
Himanshu Kumar's avatar
Himanshu Kumar
proBengaluru, India
Helping founders turn Replit MVPs into secure, scalable SaaS
13x
Hired
5.0
Rating
46
Followers
REPLIT_EXPERT

Expert

Helping founders turn Replit MVPs into secure, scalable SaaS
Cover image for Secure Auth & Multi-Tenant System for Industrial SaaS
Secure Auth & Multi-Tenant System for Industrial SaaS
0
19
Cover image for BuildWise Construction Project Management
BuildWise Construction Project Management
3
4
Cover image for Automated Real-time Booking System Development
Automated Real-time Booking System Development
0
5
Cover image for Workflow Automation for Industrial Services
Workflow Automation for Industrial Services
2
43
Security Engineer(1)
Jason Smyth's avatar
Jason Smyth
proCopthorne, UK
Cyber expert specialising in Azure Security Services.
$10k+
Earned
4x
Hired
5.0
Rating
22
Followers
Cyber expert specialising in Azure Security Services.
Cover image for Microsoft Sentinel & Splunk ES Engineer for up to 6 months
Microsoft Sentinel & Splunk ES Engineer for up to 6 months
0
13
Cover image for Extended Interview Process for CrowdStrike SIEM Specialist
Extended Interview Process for CrowdStrike SIEM Specialist
0
12
Cover image for Setting up and optimising Microsoft Sentinel
Setting up and optimising Microsoft Sentinel
1
51
Cover image for Configure SIEM Security Operation using Microsoft Sentinel
Configure SIEM Security Operation using Microsoft Sentinel
0
41
Security Engineer(1)
Safa Souli's avatar
Safa Souli
Tunis, Tunisia
UI/UX Designer & Developer
5.0
Rating
16
Followers
UI/UX Designer & Developer
Cover image for Curatech – Website Design & Development
Curatech – Website Design & Development
1
6
Cover image for SecureIVAI
SecureIVAI
0
4
Cover image for Genesis Robotics: Transforming Productivity
Genesis Robotics: Transforming Productivity
1
7
Cover image for Qatar University - Redesgin
Qatar University - Redesgin
1
268
Security Engineer(3)
Stephen Kisong'e's avatar
Stephen Kisong'e
Nairobi, Kenya
Cyber Security Analyst
Cyber Security Analyst
Cover image for I conducted an authorized AI
I conducted an authorized AI security assessment of Lily Cybersecurity 7B to evaluate how effectively a hardened system prompt could resist jailbreak and prompt injection attacks. Using Prompt Fuzzer, I ran 15 attack techniques against the model. The system prompt successfully blocked 8 attempts, including most roleplay and social engineering attacks. The successful bypasses mainly used translated or altered wording to disguise the intent of the request. This project demonstrates why system prompts should be supported by input validation, moderation, output filtering, and continuous AI red team testing.
1
151
Cover image for Designed and documented a secure
Designed and documented a secure environment for running Robin, an AI-powered dark web OSINT tool, inside a compartmentalized Qubes OS and Qubes-Whonix setup. The environment was structured to separate research activity, Tor-routed traffic, sensitive credentials, untrusted content, and final reporting. Robin was deployed through Docker inside a dedicated research qube, with traffic routed through sys-whonix and sensitive notes stored separately in an offline vault qube. Disposable qubes were incorporated for opening potentially unsafe links and files. The setup was built around security by compartmentalization rather than relying on a single tool for protection. Particular attention was given to Docker mount restrictions, credential hygiene, network-boundary verification, lawful research scope, and keeping raw research data isolated from personal or client environments. The final result was a repeatable AI-assisted OSINT workflow that supports faster search refinement, result filtering, investigation summarization, and structured reporting while maintaining stronger operational security and clearer separation between collection, analysis, and final output.
0
145
Cover image for A hands-on overview of CAI,
A hands-on overview of CAI, an AI-assisted cybersecurity agent framework configured and explored in a Linux terminal environment. The demonstration focuses on how AI agents can be organized and used to support different areas of cybersecurity testing, analysis, and research. The walkthrough covers command-line navigation, available help options, agent selection, model configuration, and the use of specialized security agents. It includes a closer look at DFIR-focused agents for digital forensics and incident response, along with other agent categories designed for bug bounty research, red team activities, network security, reverse engineering, Wi-Fi security, and reporting. The setup also highlights parallel agent configuration, showing how multiple AI-driven security agents can be prepared for structured analysis and task separation. This makes the environment useful for handling different cybersecurity activities in a more organized and scalable way. Overall, the work reflects practical experience with AI-powered security tooling, terminal-based security environments, agent configuration, cybersecurity automation, and ethical AI-assisted security research.
1
187
Cover image for Performed a manual, black-box security
Performed a manual, black-box security assessment of a locally-hosted large language model served through LM Studio, using Burp Suite as the primary testing tool. The engagement began with no prior knowledge beyond a single IP address, mirroring how an external attacker would approach an exposed AI server discovered on a network. Worked through a full discovery-first methodology: confirming the target was live, enumerating the server's exposed endpoints by probing and reading response codes, extracting the loaded model name directly from the API, and proving the expected request format through the server's own error responses rather than assuming it. This reconnaissance phase converted an unknown target into a complete map of its attack surface. With the attack surface established, executed a series of manual techniques through Burp's Repeater and Intruder tools, including prompt injection, system prompt extraction, role and system-message injection, parameter manipulation, error-message disclosure, and authentication testing. Demonstrated additional Burp capabilities relevant to AI systems, including response comparison to prove behavioral changes under attack, randomness testing of server-generated identifiers, and live request tampering to illustrate a man-in-the-middle scenario against AI traffic. Organized all findings into a structured vulnerability map aligned to OWASP LLM risk categories, recording each technique's result, severity, and supporting evidence. Delivered the work as a complete, reproducible, beginner-accessible walkthrough covering environment setup, discovery, exploitation, and reporting.
0
125
Security Engineer(6)
Guillaume Strohecker's avatar
Guillaume Strohecker
London, UK
AI Agent Security Auditor | Fast, evidence-based reviews
New to Contra
AI Agent Security Auditor | Fast, evidence-based reviews
Cover image for I recently completed a security
I recently completed a security hardening pass on an AI-enabled mobile product. The most important issues weren’t exotic vulnerabilities. They were practical deployment risks: password reset race conditions missing abuse controls weak retention guarantees mobile backup exposure logging and CI gaps Each confirmed finding was fixed and backed by regression tests before the security baseline was marked PASS. One lesson stood out: security reviews are most useful when they produce evidence and actionable fixes, not just scanner output. I’m now offering focused 24-hour AI Agent Security Mini-Audits for founders and small teams. https://contra.com/s/2Z7YgYXU-ai-agent-security-mini-audit?r=guillaume_strohecker_6m06cchc
0
36
Cover image for Mobile Security & Privacy Hardening Security
Mobile Security & Privacy Hardening Security hardening focused on mobile platform protections and privacy-preserving behavior. Android application backup was disabled to reduce risk around locally stored session material, and release builds were hardened to block cleartext traffic while keeping local development support isolated to debug/profile builds. The review also verified that BLE remains anonymous, one-sided interest stays private, precise coordinates are not exposed publicly, and Social Heat remains aggregate and threshold-gated.
0
19
Cover image for API Rate Limiting & Abuse
API Rate Limiting & Abuse Protection Security hardening focused on API abuse resistance. Rate limits were added to registration, login, password-reset request and confirmation, Click Intent creation, and public Heat reads. The limiter was designed with bounded state, explicit email normalization, case-sensitive reset-token fingerprints, expiry sweeping, and fail-closed behavior under saturation. Regression tests verified throttling behavior and recovery.
0
26
Cover image for Authentication & Password Reset Hardening Security
Authentication & Password Reset Hardening Security hardening focused on authentication and account recovery. The work included stronger scrypt password hashing, legacy-hash migration, login timing protections, atomic password-reset token consumption, and session revocation after reset. PostgreSQL concurrency and regression tests verified that a reset token can only be successfully consumed once and that authentication behavior remains safe under failure conditions.
0
31
Security Engineer(5)