Freelancer profile translated to English.

Description

IT security consultant with 13 years of experience, specializing in integrating security into application development, Agile, and DevOps contexts (DevSecOps).

I assist my clients with projects involving:

DevSecOps transformation and agile security (Strategy, Governance Model, etc.)
Development and management of the Security Champions program
Integration of Security into development projects (Secure SDLC, Threat Modeling, tooling: SAST, DAST, SCA, etc.)
Securing Cloud / Container platforms (Docker, Kubernetes, IaC, Public Cloud)
Cybersecurity: Risk analysis and management, security posture and maturity; compliance, etc.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris 12e Arrondissement (up to 50km)

FinTech
DevSecOps Referent
BANKING AND INSURANCE
November 2025 - February 2026 (3 months)
- Benchmark and integration of CNAPP and DevSecOps tools (AI powered);
- Definition and implementation of DevSecOps security processes for ISO27001 certification;
- Definition of remediation and maturity improvement plan for practices.
CNAPP DevSecOps
Secteur technologies et services SaaS
DevSecOps Referent and Security Champions Lead
SOFTWARE PUBLISHING
October 2023 - October 2025 (2 years)
- Development and management of the Security Champions community within R&D teams;
- Establishment and management of the Secure Development policy and SDLC (and alignment with CRA);
- Management of AppSec/DevSecOps posture through a maturity assessment approach;
- Definition and implementation of the Operational Model for the PSIRT organization;
- Study of GenAI security risks and challenges for R&D, validation of the solution and definition of the usage framework.
Secure SDLC Application Security DevSecOps Generative AI Threat Modeling
Secteur transport et logistiques
AppSec / DevSecOps Advisor
LOGISTICS AND SUPPLY CHAIN
June 2023 - December 2025 (2 years and 6 months)
- Establishment and management of the Group-level DevSecOps roadmap
- Promotion and onboarding of divisions into the DevSecOps Framework
- Study and assessment of the security of the Cloud development platform
DevSecOps cybersecurity CNAPP CI/CD