Freelancers using SplunkFreelancers using Splunk
ProjectsPeople
Jason Smyth's avatar
Jason Smyth
proCopthorne, UK
Cyber expert specialising in Azure Security Services.
$10k+
Earned
4x
Hired
5.0
Rating
22
Followers
Cyber expert specialising in Azure Security Services.
Cover image for Microsoft Sentinel & Splunk ES Engineer for up to 6 months
Microsoft Sentinel & Splunk ES Engineer for up to 6 months
0
13
Cover image for Extended Interview Process for CrowdStrike SIEM Specialist
Extended Interview Process for CrowdStrike SIEM Specialist
0
12
Cover image for Setting up and optimising Microsoft Sentinel
Setting up and optimising Microsoft Sentinel
1
49
Cover image for Configure SIEM Security Operation using Microsoft Sentinel
Configure SIEM Security Operation using Microsoft Sentinel
0
40
Splunk(1)
Aaliya Khalil's avatar
Aaliya Khalil
Abu Dhabi - United Arab Emirates
SOC Analyst | Threat Detection & SIEM Log Analysis
New to Contra
SOC Analyst | Threat Detection & SIEM Log Analysis
Cover image for Most small IT teams collect
Most small IT teams collect logs but never actually investigate them. That's exactly what attackers count on. Over the past several months, I've been building hands-on SOC skills — analyzing Windows Event Logs, running SIEM investigations in Splunk and Wazuh, and reconstructing full attack timelines across ransomware, brute-force, and phishing scenarios. Here's what I've learned: logs don't lie. Every failed login attempt, every unauthorized account creation, every suspicious process execution leaves a trace. The challenge is knowing where to look and how to connect the dots. Some things I can help you identify from your logs: • Brute-force attack patterns and successful compromise indicators • Unauthorized account creation and credential manipulation • Suspicious authentication anomalies and privilege escalation attempts • Attack timelines mapped to MITRE ATT&CK techniques I deliver structured investigation reports that turn raw log data into clear, actionable findings — so you know exactly what happened and what to do next. If your team is sitting on unreviewed logs or needs support investigating a security event, I'd love to help. 👉 Check out my service below — starting at $30. https://contra.com/s/7FecLZcc-soc-analyst-log-investigation-and-threat-detection-support?r=alkhal_vio107rc
0
77
Cover image for Ransomware Attack Chain Investigation - Splunk SOC Analysis
Ransomware Attack Chain Investigation - Splunk SOC Analysis
0
7
Cover image for Brute Force Attack Detection & Investigation - Wazuh SIEM
Brute Force Attack Detection & Investigation - Wazuh SIEM
0
16
Cover image for Splunk Log Analysis and Investigation: Ransomware Chain
Splunk Log Analysis and Investigation: Ransomware Chain
0
8
Splunk(4)
Sadiqvali Mahaldar's avatar
Sadiqvali Mahaldar
Anantapur, India
MVP Development Expert | UI/UX Designer | Framer Expert
New to Contra
MVP Development Expert | UI/UX Designer | Framer Expert
Cover image for Why JWT isn't enough to
Why JWT isn't enough to secure your app When I first started building authentication systems, I thought: "If I'm using JWT, my app is secure." I was wrong. JWT solves authentication—it tells your server who the user is. It doesn't automatically solve: Authorization (What is the user allowed to do?) Token theft Token revocation after logout XSS or CSRF attacks Rate limiting Input validation Secure storage of tokens A secure application is built with layers, not a single technology. Here's what I consider a solid authentication stack: Short-lived access tokens Refresh token rotation HttpOnly & Secure cookies Role-Based Access Control (RBAC) Input validation and sanitization Rate limiting Security headers Continuous logging and monitoring One lesson I've learned: Security isn't something you add after your app works. It's something you design into every feature from the beginning. JWT is one piece of the puzzle—not the whole picture. What's one security practice you think every full-stack developer should implement by default?
0
164
Cover image for I wanted to see
I wanted to see how far I could push a simple idea: a beauty website that feels as elegant as the work behind the brand. So I went with a dark, editorial direction — soft photography, oversized typography, subtle gold details, and plenty of breathing room. The hero section is intentionally simple. No overwhelming animations. No unnecessary elements. Just a strong visual, a clear message, and one obvious next step: Book an Appointment. I’d probably build this in Framer with subtle image reveals, smooth scrolling, and a few micro-interactions to bring it to life. Still experimenting with the direction, but I really like how the minimal approach came together. Would you go for this kind of look for a beauty brand?
0
39
Cover image for MVP Development Specialist | Turning
MVP Development Specialist | Turning Ideas into Scalable Products. We also create separate services rather than one generic "development" service: MVP Strategy & Technical Roadmap MVP UI/UX & Product Design Full-Stack MVP Development AI-Powered MVP Development SaaS MVP Development MVP Architecture & System Design MVP Code Review & Technical Audit MVP Development for Non-Technical Founders
0
71
Cover image for Great Applications Start with Great
Great Applications Start with Great Architecture A beautiful application can attract users. But strong system design and architecture is what keeps it reliable, scalable, and maintainable as the business grows. At MVPHUB.IN (http://MVPHUB.IN), we help startups and businesses transform application ideas into scalable, reliable, and production-ready architectures. What happens without proper architecture? Poor scalability Frequent failures Complex & difficult-to-maintain code Rising infrastructure and maintenance costs Slow feature delivery Poor user experience What strong architecture gives you: High scalability High availability & reliability Modular and maintainable systems Better performance Faster feature delivery Lower long-term maintenance costs Better user experience Our approach: Understand → Design → Architect → Build → Scale We focus on designing systems that are not just built for today, but prepared for tomorrow's users, traffic, features, and business growth. Design it right. Build it once. Scale forever. If you're building an MVP, SaaS platform, web application, mobile backend, or enterprise application and need help with system design or architecture, let's connect. MVPHUB.IN (http://MVPHUB.IN)Think Architecture. Build Better. Scale Smarter. #SystemDesign #SoftwareArchitecture #SolutionArchitecture #SaaS #MVP #ScalableSystems #SoftwareEngineering #WebDevelopment #CloudArchitecture #Startup #TechConsulting #MVPHUB Shorter Contra version Your application doesn't fail because you lack features. It fails when the foundation isn't designed to scale. At MVPHUB.IN (http://MVPHUB.IN), we help startups and businesses design scalable, reliable, maintainable software architectures before complexity becomes a problem. From MVP architecture to enterprise-scale systems, we focus on: System Design Software Architecture API & Backend Architecture Database Design Scalability & Performance Cloud Architecture SaaS Architecture Architecture Reviews Design it right. Build it once. Scale forever. Think Architecture. Build Better. Scale Smarter. #SystemDesign #SoftwareArchitecture #SaaS #MVP #Scalability #TechConsulting #MVPHUB
0
104
Splunk(1)
Adil Shahzad's avatar
Adil Shahzad
proLahore, Pakistan
Senior DevOps & DevSecOps Engineer · Cloud Security
Senior DevOps & DevSecOps Engineer · Cloud Security
Cover image for Fraud and abuse detection wired
Fraud and abuse detection wired into a SIEM Card-testing and brute-force detection routed to on-call with a runbook attached to every alert. Who it was for: A payments platform exposed to automated card-testing traffic. The problem. Automated enumeration against payment endpoints is both a fraud loss and an availability threat, and it doesn't announce itself. Without detection it looks like ordinary traffic until the chargebacks arrive. What I did. Built the log pipeline into the SIEM, then wrote detections for card-testing patterns, brute force and anomalous transaction behaviour. Tuned edge rate-limiting and bot controls to cut volume at the perimeter. Every alert routes to on-call with a runbook attached, so whoever is paged at 3am has the next step in front of them. The result. Repeat attempts are caught as they start rather than reconstructed afterward, and response is a documented procedure instead of improvisation.
0
43
Cover image for Driving SAMA CSF maturity from Level 2 to Level 3
Driving SAMA CSF maturity from Level 2 to Level 3
0
1
Cover image for Zero-downtime repository and pipeline migration Around
Zero-downtime repository and pipeline migration Around 70 enterprise repositories moved to a new platform with history, policies and access intact. Who it was for: A large international organisation running enterprise development at scale. The problem. Source control and CI/CD had to move platforms without stopping delivery. Losing commit history, branch protection or access mappings would have been worse than not moving at all. What I did. Inventoried repositories and pipelines, then ran a staged cutover that preserved history, branch policies and access controls. Rebuilt pipelines on the target platform and wired in code scanning and quality gates on arrival, so the migration also raised the security baseline rather than just relocating it. The result. Roughly 70 repositories migrated with no delivery downtime, and automated vulnerability detection in place from day one on the new platform.
0
56
Cover image for FinOps automation across seven environments Automated
FinOps automation across seven environments Automated scheduling and rightsizing that took roughly $280k a year out of the cloud bill. Who it was for: A large regional bank running seven cloud environments. The problem. Seven environments, most of them idle outside working hours, and no visibility into which team was spending what. Cost conversations were happening after the invoice rather than before. What I did. Established a cost baseline per environment, then automated resource scheduling so non-production stopped paying for nights and weekends. Rightsized the workloads that were provisioned for peaks that never came. Built daily and weekly cost reporting so stakeholders could see the trend without asking for it. The result. Around $280k of annual run-rate removed, with ongoing reporting that keeps the saving from creeping back.
0
50
Splunk(1)
Gsinfotechvis Pvt Ltd's avatar
Gsinfotechvis Pvt Ltd
Pimpri-Chinchwad, India
Provide innovative IT Solutions for Growth & Success
Provide innovative IT Solutions for Growth & Success
Cover image for Comprehensive IT Solutions & Security Services
Comprehensive IT Solutions & Security Services
0
15
Cover image for AI-Driven Digital Marketing
AI-Driven Digital Marketing
1
6
Cover image for Intelligent AI & ML Solutions
Intelligent AI & ML Solutions
0
8
Cover image for AI Support & Optimization Solutions
AI Support & Optimization Solutions
1
6
Splunk(1)
ibukun Babalola's avatar
ibukun Babalola
Lagos, Nigeria
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
Cover image for Built a complete enterprise-grade SOC
Built a complete enterprise-grade SOC environment from scratch: featuring Wazuh SIEM with custom detection rules, Security Onion with Suricata IDS/IPS and Zeek network monitoring, Active Directory with advanced security logging via Group Policy, and Windows Server with Sysmon telemetry. Designed and executed MITRE ATT&CK-aligned attack simulations from Kali Linux and validated detection coverage through red team exercises. Achieved over 95% detection rate across all tested techniques and tactics. This project served as the foundation for understanding how detection engineering decisions translate into real gaps and how to close them.
1
0
34
Cover image for Performed a read-only Microsoft 365
Performed a read-only Microsoft 365 security assessment for an 11-user UK logistics company, uncovering two Critical findings: MFA disabled on Global Administrator accounts and an active email forwarding rule on the Finance Manager's mailbox consistent with Business Email Compromise. Delivered a clear priority action plan, all remediable within 72 hours using tools already included in the client's existing M365 licence along with SharePoint sharing controls and Conditional Access policy configuration to close legacy authentication gaps.
0
26
Cover image for Conducted a full cybersecurity risk
Conducted a full cybersecurity risk assessment for NexaSoft's AWS EKS-hosted Employee Self-Service HR Portal, processing sensitive employee PII including payroll, health records, and government-issued ID. Identified three Critical and five High risks across Azure AD SSO, cloud IAM configuration, and insider privilege controls, aligned to ISO 27001. Delivered a prioritised 90-day remediation roadmap using native AWS and Azure tooling, reducing all Critical risks before go-live and supporting the client's ongoing ISO 27001 certification obligations under Australia's Privacy Act 1988.
0
26
Cover image for Delivered a GRC-aligned cybersecurity risk
Delivered a GRC-aligned cybersecurity risk assessment for an Azure-hosted AI-Driven HR Analytics Service processing employee PII and behavioural data. This engagement went beyond conventional security reviews to address AI-specific risks including data poisoning and model bias that carry direct legal exposure under the Canadian Human Rights Act and the proposed AI and Data Act (AIDA). Identified five High risks and produced a mitigation strategy using Azure-native controls, alongside governance recommendations to ensure compliant and auditable AI decision-making ahead of AIDA enforcement.
0
27
Splunk(1)