Freelancer profile translated to English.

Description

I work as a senior pentester specializing in application security, with a simple goal: identify what can truly be exploited and help you fix it effectively.

I specialize in application penetration testing: web applications, APIs, mobile applications, as well as related environments that directly impact the attack surface (AWS/Azure cloud, infrastructure components, workstations). I also work on IoT and OT contexts where applications are at the heart of business processes.

My approach is resolutely offensive, pragmatic, and business-risk oriented. Each pentest aims to demonstrate realistic, exploitable, and relevant attack scenarios, rather than producing simple lists of vulnerabilities. I work according to recognized standards (OWASP Top 10, OWASP API Security, OWASP Mobile, PTES), with particular attention to attack chains and the real impact for the organization.

What sets me apart: my specialization and my high standards for the most critical applications. I conduct and monitor sensitive pentests, from the scoping phase to patch validation: in-depth vulnerability analysis, prioritization based on real risk, support for technical teams, and targeted re-tests. Result: vulnerabilities are actually fixed, not just documented.

I work with both SMEs and large corporations, either directly or as a subcontractor. I am accustomed to working with various stakeholders: development teams, security managers, architects, and decision-makers.

Usual deliverables:

– application pentests (web, API, mobile)

– detailed technical reports and executive summaries

– re-tests and remediation validation

If you are looking for a specialized, rigorous, and results-oriented pentester, capable of discussing real exploitation rather than theory, I am ready to get involved.

Languages

French
Native or bilingual
English
Native or bilingual
Dutch
Fluent

Workplace preferences

Can work on-site

Bruxelles (up to 50km)

OFEP
Pentester
CONSULTING AND AUDITS
February 2021 - Today (5 years and 6 months)
Bruxelles, Belgium
Senior pentester with in-depth expertise in offensive security, with a strong specialization in penetration testing of web applications, APIs, mobile applications (iOS/Android), as well as IoT and OT environments. Extensive experience also in infrastructure perimeters, including workstations, servers, internal networks, Active Directory environments, and cloud platforms (AWS and Azure).
Accustomed to working throughout the security testing cycle, from the scoping and perimeter definition phase to the executive and technical reporting of results. Mastery of the main market methodologies and standards (OWASP Top 10, OWASP ASVS, OWASP API Security, PTES, MITRE ATT&CK), with a pragmatic approach focused on risks and business impact. Ability to identify, exploit, and demonstrate complex vulnerabilities, then formulate clear, prioritized, and realistic recommendations for technical and decision-making teams.
Interventions carried out for a wide range of organizations: small and medium-sized enterprises, public institutions, and large international groups, both in direct assignments and as a subcontractor for recognized market players.
Accustomed to integrating into various organizational contexts, from agile or DevSecOps environments to more traditional or industrial infrastructures.
Comfortable in critical and regulated environments, with significant experience in constraints related to production, business continuity, and compliance (ISO 27001, NIS2, client requirements). Recognized for my autonomy, methodological rigor, and ability to simplify complex technical issues for non-expert audiences, while maintaining a high level of detail for operational teams.
Security Audit Web Pentest PenTest Pentesting Penetration Testing
BNP PARIBAS
Security engineer & pentester
BANKING AND INSURANCE
September 2018 - February 2021 (2 years and 5 months)
Bruxelles, Belgium
Security Engineer specializing in application security for the banking sector, with strong expertise in application penetration testing (web, API, mobile). Responsible for managing and monitoring pentests for critical applications: analysis of results, risk prioritization, coordination with development teams, and remediation control. Rigorous approach focused on compliance, resilience, and business risk reduction.