Cédric B., Cybersecurity Consultant — Identity Security

Freelancer profile translated to English.

Back to original language

Description

When identity falls, everything falls.

I specialize in post-compromise identity analysis:

how far can an attacker go starting from a simple user account?

Active Directory and Entra ID are the nervous system of the IS.

My role: provide a clear, quick, and decision-oriented verdict.

🔍 What I do

- Assumed Breach Diagnosis on Active Directory / Entra ID (essentially, what an attacker can do from a compromised account/workstation)

- Identification of exploitable attack paths towards:

* Domain Admin

* Global Admin / Identity Control

Prioritization of real, not theoretical, risks

Immediately actionable recommendations

👉 No compliance audit

👉 No automatic scanner

👉 No 80-page report

⚙️ Methodology

Analysis from a machine connected to the internal network or from a user account

Realistic hypothesis:

- standard user account

- or compromised workstation

Combination:

- human expertise

- recognized tools (without SaaS dependency)

Decision-oriented delivery, not purely technical.

Languages

English
Conversational
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 10km)

Orsys
Cybersecurity Trainer
CONSULTING AND AUDITS
November 2021 - Today (4 years and 7 months)
Cybersecurity trainer:
- Introduction and advanced techniques in penetration testing / web auditing
- Forensic analysis (analysis following a security incident)
- Malware analysis (malicious software)
Training Awareness
Université Paris Descartes
University Professor
EDUCATION AND E-LEARNING
February 2018 - Today (8 years and 4 months)
Paris, France
Teaching the following subjects:
- Cybersecurity: offensive and defensive security. Performing internal / external penetration tests. Protecting resources.
- Forensic analysis: how to react to a security incident? How to detect the attack vector(s)?
Pedagogy PenTest
Freelance
Pentester - Cybersecurity Consultant
January 2017 - Today (9 years and 5 months)
- Penetration testing (internal / external / web)
- Post-incident analysis / crisis management
- Training and awareness
Active Directory Entra ID Penetration Testing Security Awareness Training

Check out Cédric's experience

AL

EB

Anne Laure Brachet and 1 other person have recommended Cédric

A

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

B

Baptiste Duhen

Fullstack developer

4.6

(4)

5

A

Amed Hamou

Senior Lead Developer

4

(2)

7

A

Audrey Champion

Web developer

4.3

(3)

4

Signup to reveal

OSCP
Offensive Security
2016
https://www.offensive-security.com/pwk-oscp/
AWAE
Offensive Security
2020
https://www.offensive-security.com/awae-oswe/

Cybersecurity Expert