Umar Farooq

Cybersecurity Analyst

Fiverr • Freelance

Dec 2023 - Present • 2 yrs 8 mos

As a Freelance Cybersecurity Analyst, I help businesses, startups, and individuals identify, assess, and remediate security vulnerabilities in web applications, networks, and Linux systems. I perform penetration testing, vulnerability assessments, security audits, and configuration reviews to improve overall security and reduce potential risks. My work follows OWASP Top 10 and NIST best practices, ensuring every assessment is ethical, accurate, and professionally documented. I have hands-on experience using industry-standard tools such as Burp Suite, Nmap, Nessus, Wireshark, Metasploit, OWASP ZAP, SQLmap, Gobuster, Nikto, Hydra, Kali Linux, and Snort IDS/IPS. I conduct both manual and automated security testing to identify vulnerabilities including SQL Injection (SQLi), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), security misconfigurations, authentication weaknesses, and other common web application and network security issues. In addition to security testing, I perform Linux system hardening, configure firewalls using UFW and iptables, automate security tasks with Bash scripting, and assist clients in implementing practical security improvements. Every project includes a detailed report outlining identified vulnerabilities, risk levels, proof of findings, and actionable remediation recommendations. My goal is to provide reliable, confidential, and high-quality cybersecurity services while helping clients strengthen their security posture through clear communication, timely delivery, and professional support.

Cybersecurity Analysst

Trilogix Cloud • Temps plein

Dec 2025 - Apr 2026 • 4 mos

As a Cybersecurity Intern at Trilogix Cloud, I contributed to securing cloud-based and web applications by performing vulnerability assessments, implementing security controls, and strengthening Linux and network security through hands-on projects. Key Responsibilities & Achievements: * Performed web application security assessments to identify and remediate vulnerabilities, including SQL Injection (SQLi), Cross-Site Scripting (XSS), and other OWASP Top 10 risks. * Conducted manual and automated vulnerability scanning, validated remediation efforts, and documented security findings. * Automated security tasks such as log analysis, system auditing, and vulnerability checks using Bash shell scripting. * Configured and managed Web Application Firewalls (WAFs) to enhance application security against common web-based attacks. * Applied Linux system hardening techniques by securing user accounts, managing file permissions, disabling unnecessary services, and improving system configurations. * Configured and maintained firewall rules using UFW and iptables to strengthen network security and reduce the attack surface. * Installed, configured, and tested Snort IDS/IPS for real-time intrusion detection, network monitoring, and threat alerting. * Prepared technical reports, security documentation, and remediation recommendations while collaborating with the technical team on security improvements.

Cyber security Analyst

Developers Hub Corporation • Temps plein

Apr 2025 - Jun 2025 • 2 mos

As a Cybersecurity Intern, I contributed to real-world offensive and defensive security projects with a focus on web application testing, Linux system hardening, and network protection. Key Responsibilities & Achievements: 🛠️ Developed and secured a deliberately vulnerable web application to demonstrate common exploits (e.g., SQL Injection, XSS). 🔍 Performed manual and automated vulnerability assessments; implemented and validated effective security patches. ⚙️ Automated security tasks (log analysis, system audits, vulnerability scans) using Bash shell scripting. 🧱 Deployed and configured Web Application Firewalls (WAFs) to mitigate OWASP Top 10 threats. 🐧 Applied Linux hardening techniques: managing user privileges, securing configurations, and disabling unsafe services. 🔐 Configured firewalls (iptables, ufw) to control network traffic and minimize attack surface. 🧪 Installed and tested Snort as an IDS/IPS for real-time intrusion detection and alerting. 📄 Delivered weekly technical reports and a detailed first-month video assessment documenting tools, findings, and mitigations.