You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Najam Ul SaqibNU

Najam Ul Saqib

Application & Cloud Security Engineer | Azure

€125/day
Tallinn, EE
3-7 years

Average response time: 1 hour

About Najam

If you're building on Azure or modern cloud infrastructure and want to ensure it’s secure before attackers find the gaps — I can help.

I’m a cybersecurity consultant and founder of Exfiltra, helping startups and enterprises secure their applications, cloud infrastructure, and DevOps pipelines.

I have worked with organizations generating $6B+ in annual revenue and helped companies strengthen security across cloud environments, applications, and compliance programs.

I personally lead security engagements and, when needed, bring in specialists from my team at Exfiltra to support larger or complex projects.

Most clients hire me when they want to:

✔ Secure Azure / AWS / GCP environments
✔ Perform professional penetration testing
✔ Implement DevSecOps and secure CI/CD pipelines
✔ Prepare for SOC 2, ISO 27001, HIPAA, FedRAMP, or CMMC
✔ Improve security posture using industry frameworks

CORE EXPERTISE

AZURE & CLOUD SECURITY
• Azure security architecture reviews
• Microsoft Defender for Cloud & Sentinel
• Identity security (Entra ID / Conditional Access)
• Cloud configuration reviews and CIS Benchmark hardening

APPLICATION SECURITY & PENETRATION TESTING
• Web application penetration testing
• API security testing
• Mobile application security testing
• Network and cloud penetration testing
• Assessments aligned with OWASP Top 10 and OWASP ASVS

DEVSECOPS & SECURITY AUTOMATION
• Secure CI/CD pipelines (Azure DevOps / GitHub Actions)
• Infrastructure as Code security (Terraform / Bicep)
• SAST and DAST integration in pipelines

SECURITY TOOLS
• Snyk
• Semgrep
• OWASP ZAP
• Burp Suite
• Wazuh
• CrowdStrike
• Microsoft Sentinel

AI & LLM SECURITY
• AI application threat modeling
• Prompt injection and model abuse testing
• Secure architecture for AI-powered applications
  • English

    Native or bilingual

  • Urdu

    Native or bilingual

  • Punjabi

    Fluent

  • Hindi

    Conversational

Remote only
Primarily works remotely

Experience

  • Exfiltra
    Founder
    September 2025 - Today (9 months)
    Tallinn, Estonia
    SDLC Engineering: Building security into design, code reviews, and deployments so it's "secure by design," not "bolted on."
    Spring Security PenTest Cybersecurity
  • Perseus Group,
    Senior Security Engineer
    February 2024 - August 2025 (1 year and 6 months)
    • • Established and led the VA/PT department, conducting comprehensive penetration testing and vulnerability assessments across cloud platforms, infrastructure, web apps, mobile apps, and thick clients.
    • • Performed in-depth static and dynamic security testing using both manual techniques and automated tools.
    • • Architected a cost-efficient SOC leveraging Wazuh for real-time monitoring of Azure-hosted production servers.
    • • Secured multiple Azure subscriptions by deploying and managing Microsoft CSPM tools.
    • • Directed and supervised the security team, ensuring efficient operations and continuous improvement.
    • • Implemented robust access control measures in the cloud, utilizing IAM and RBAC to enforce a least-privilege model.
    • • Advised stakeholders on achieving and maintaining SOC2 compliance.
    • • Eliminated hard-coded secrets across multiple products by adopting Azure Managed Identities.
    • • Trained and mentored team members in best practices for secure software development.
  • Tecvity
    Co-Founder
    May 2022 - May 2025 (3 years)
    At Tecvity, I led the Cybersecurity Services Department, overseeing strategy, delivery, and innovation in security offerings tailored for diverse client needs. In addition to heading cybersecurity, I played a cross-functional leadership role, managing financial planning, sales strategy, and key operational decisions to drive overall business growth.
    Key achievements:
    • - Built and scaled the cybersecurity practice from the ground up, delivering secure solutions across various industries.
    • - Spearheaded business development efforts, contributing to revenue growth through strategic client engagements and partnerships.
    • - Directed financial operations, ensuring fiscal responsibility and operational efficiency.
    • - Worked closely with co-founders and senior teams to shape and execute the company's vision and roadmap.

Recommendations

Be the first to recommend Najam

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Certified Network Security Specialist Secure Coding Course Practical Network Penetration Tester (PNPT)
    Certified Network Security Specialist Secure Coding Course Practical Network Penetration Tester (PNPT)
  • Bachelor of Science
    PUCIT
    2021
    Bachelor of Science

Categories