Freelancer profile translated to English.
Back to original languageAbout Bertrand
With 25 years of professional IT experience, I am an engineer with a dual DevSecOps and Data Engineer profile seeking new opportunities. Passionate about cybersecurity, intelligence gathering, and search engines, I have held various positions allowing me to acquire cross-functional expertise. Ready to take on new challenges, I am motivated to contribute to the success of innovative projects.
French
Native or bilingual
English
Conversational
Remote only
Primarily works remotely
Experience
- ProHacktiveDATA ENGINEER & SECURITY DEVELOPER & CYBER INTELLIGENCETECHFebruary 2020 - November 2023 (3 years and 9 months)Gap, FranceProHacktive is a startup that commercialized a device called Sherlock. This device was designed to perform 24/7 security audits of an infrastructure. No configuration needed, just plug it in and the audit starts in black box mode.
- Development of modules for the device:
o Offensive: Zerologon (with setup of a test lab with an AD server and a Windows client machine) / Log4Shell (with setup of the necessary infrastructure) / VLANHopping and older exploits like ShellShock and HeartBleed for example.o Scanner: CDP + SMB scanner correction- Creation & enrichment of the vulnerability database:
o CVE (from NIST)o CWEo CAPECo MITREo CPE dictionaryo CISA KEVo EPSS Scoreo Exploit Kit (from McAfee)o LifeCycleso Malwareso Microsoft KBo Ransomwareso Exploit-dbo Github POCTranslation into French, German, Spanish, Italian, and Portuguese (using Deepl API).Creation of a secure pipeline to update Sherlock devices: setup of a secure tunnel via stunnel. Data synchronization via the rsync tool.Creation of a website in PHP + MongoDB + Bootstrap + HTML to offer free access to the vulnerability database.- Intelligence gathering on Cyber news + e-reputation management: development of the brand image on social networks (LinkedIn, Twitter, Facebook), on YouTube and Google. Creation of a Cybersecurity glossary.
- Work with the CIO:
o Initialization of Macs via an Ansible scripto Management and support of employees for VPN and PKI certificateso Configuration of server access via Saltstacko Installation and configuration of Chatwooto Installation and configuration of Zammado Mobile phone management with SOTIo Monitoring of updates (Gitlab, ...) - WebportageDATA ENGINEER & WEBMASTERTECHSeptember 2010 - September 2013 (3 years)Amiens, FrancePersonal project "French-Spider":Creation of different bots with different roles:• Find new websites• Determine the geolocation of found sites (selection of European sites)• Update information of sites already in the database• Search for online stores• Find product pages• Find pages containing legal notices• Find company contact details (postal address, phone, email)• Categorize sites: construction, games, sports, ecology, etc.• Test the presence of a site in various reputable directories
- ACR GroupeCTO + DevSecOps EngineerDIGITAL AND ITNovember 2004 - February 2019 (14 years and 3 months)Poncin, FranceI am responsible for the development of the architecture and modules that will be sold as packages. I also manage the entire Cloud infrastructure that hosts our solution. We specialize in the construction/real estate sector by selling extranet solutions: Groupe Eiffage, Thalès, Cogedim, AREP, SNCF, Mairie de Vitry, ...
- Creation of a quote search engine:
Our clients sometimes have multiple subsidiaries and needed a tool to centralize quotes and be able to search them easily. We implemented a processing chain: reception of PDF files then processing of information via an OCR to retrieve the text. Some scripts to optimize the text before indexing it in Apache Solr. A Web interface allows clients to search for information in full-text.- Creation of a centralized database of Soil Reports:
In the construction sector, soil reports are expensive and it's problematic when you have multiple subsidiaries to avoid duplicates. We created a centralized database to deposit and search for soil reports.- Duplicates in contact databases:
A recurring problem is de-duplicating our clients' contact databases. We have developed a tool to automate this process.- DevSecOps:
Work on securing the CMS, workstations, Cloud environments (OVH Formation), and the CI/CD pipeline
Recommendations
Be the first to recommend Bertrand
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Data EngineerDataScientestFormation de Data Engineer de DataScientest, avec certification de l’École des Mines Paris - PSL. Au format bootcamp (programme intensif de 13 semaines). 1 - Introduction à Python : Introduction à Python pour la Data Engineering 2 - Compléments : Programmation orientée objet, Web Scrapping, RGPD & Ethique 3 - Programmation avancée : Linux et Bash, Tests unitaires avec Python, Git/Github 4 - Big Data Variété : SQL, Base de données NoSQL (MongoDB), ElasticSearch, Neo4j, Hbase, Redis 5 - Big Data Volume : PySpark, Scala, Scala Spark, Java, Java Spark, Hadoop & Hive 6 - Streaming de données : Kafka, Streaming avec Spark, Flink 7 - DataViz' & Machine learning : DataViz' avec Matplotlib, Machine Learning pour les Data Engineers, Matplotlib - Compléments, Statistiques exploratoires 8 - DevOps - Isolation : FastAPI, Docker, MLFlow, Flask, Dash, Sécurisation des API, AWS - Cloud Practitionner 9 - DevOps - Orchestration : Kubernetes, Airflow, Jenkins, AWS - Solution Architect + Une journée : AZ-900 : Azure Fondamentals
- DESS Multimedia Information SystemsUniversité Amiens Picardie Jules Verne1998Mention très bien
Certifications
- Python for Data EngineeringDataScientest2024
- Web Scraping with BeautifulSoupDataScientest2024