Freelancer profile translated to English.
Back to original languageAbout Amaury
Vice-Champion of France in cybersecurity, Pentester since 2019 with over 200 missions completed for startups, SMEs, and large corporations.
I regularly conduct security audits as part of compliance (ISO 27001, SOC 2, client audits) or before going live.
My missions include:
- Web penetration tests (SaaS applications, APIs, internal platforms, E-commerce sites)
- Cloud penetration tests (AWS, GCP)
- Infrastructure penetration tests (internal networks, Active Directory, Wi-Fi, SCADA Systems)
- LLM / Chatbot penetration tests
- External attack surface analysis (public IPs, domains and subdomains, OSINT research)
- Red Team exercises and phishing campaigns
- Technical training for developers and administrators (application security, pentest, best practices).
- Cybersecurity awareness sessions for employees.
Each mission includes:
- a detailed report with exploitation proof
- risk prioritization
- concrete remediation recommendations
- a debriefing session with technical teams to discuss and transfer skills
Example report and methodology details available upon request.
French
Native or bilingual
English
Fluent
Can work on-site
Lyon (up to 50km), Aix-en-Provence (up to 30km), Lyon (up to 100km), Paris (up to 30km), Marseille (up to 30km)
Experience
- ETHICAL PIANISMPentesterNovember 2019 - Today (6 years and 7 months)Freelance Pentester since 2019, working for startups, SMEs, and large corporations to identify and fix vulnerabilities before they are exploited.Main missions:• Web penetration tests: SaaS applications, APIs, internal portals.• Cloud Audit: Security of AWS and GCP environments, IAM configurations, storage, data exposure, and cloud attack surface.• Infrastructure penetration tests: Active Directory, internal networks, privilege escalation, lateral movement, critical account compromise.• Red Team: Realistic attack simulations to assess the detection and response capabilities of teams.• Phishing and awareness campaigns: Social engineering tests to measure employee resilience.
- Yes We HackBug Bounty HunterDIGITAL AND ITMay 2024 - Today (2 years and 1 month)Active bug bounty hunter on public and private programs, specializing in discovering vulnerabilities on web applications and APIs.Work on:• Classic and advanced vulnerabilities: Chaining vulnerabilities, SSRF exploitation, authentication bypass, injections, IDOR, and access control circumvention.• Application logic analysis: Identifying flaws related to design errors or business logic.• Cloud and API environment testing: Misconfigurations, exposed endpoints, poor token and permission management.• Reporting and communication with security teams: Submitting vulnerabilities with detailed PoCs, evidence, and remediation recommendations.
- NSOCCybersecurity EngineerTELECOMMUNICATIONSMarch 2018 - December 2018 (10 months)Lyon, FranceParticipation in IT security and systems administration activities as part of a cybersecurity apprenticeship.Involvement in several aspects of infrastructure and application security, including:• Performing black-box penetration tests to identify exploitable vulnerabilities on exposed systems• Administration and securing of network infrastructure (OpenLDAP directory management, Fortinet firewall configuration, access management)• Participation in GDPR compliance efforts and improvement of data protection practices• Development of Python scripts to automate certain security and administration tasksThis experience allowed me to work on both offensive (pentest) and defensive (administration and compliance) aspects, while developing tools to improve operational efficiency.
Reviews
Recommendations
CG
TG
+1
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master "Cybersecurity Expert"It-Akademy2018
- Self-taught training-Formation en autodidacte sur root-me.org (2500 points), microcorruption (500 points), avec laboratoire de pentest et lecture de livres spécialisés.
Certifications
- Comptia Pentest+Comptia Pentest+
- Vice-Champion of France CybersecurityWorldSkills2022