Andy P.

With over ten years of experience in cybersecurity, I support startups and large companies in securing their Linux, Kubernetes, containerized environments, and AI workloads, while ensuring their compliance with major security standards.

I translate and convert standard requirements (e.g., ISO 27001) into concrete and applicable technical measures.

My work is based on both complex technical missions (writing LSM policies, system hardening, application audits) and strategic issues (security roadmaps, prioritization, maturity development).

Main expertise:

Security Compliance: iso27001, SOC2, STIG, NIST 800-53, and other enterprise frameworks

Linux, Kubernetes, containers, and AI platform security

Low-level policies: SELinux/AppArmor, seccomp, K8s PSS/PSA.

Vulnerability Management: analysis (CVSS), remediation, CVE footprint reduction, identification of critical flaws in images and configurations.

DevSecOps: CI/CD security, supply chain, tools/dependencies, processes, and training.

Other areas of intervention:

AI Security: prompt analysis and hardening, as well as their integration.

Detection & Response: signal architecture, log pipelines, advanced rules.

Incident Response: Linux/K8s forensic analysis, compromise, remediation.

Email & DNS Security: SPF, DKIM, DMARC, DNSSEC governance.

Missions performed:

Support for an AI startup specializing in computer vision on securing product configuration, ML pipeline, and code distribution chain.

Securing an international on-premise storage solutions provider: pentesting, OS and container hardening, Kubernetes compliance.

Would you like to strengthen your workloads, secure your AI environments, improve your compliance, or reduce your CVE exposure? Let's talk.