Freelancer profile translated to English.
Back to original languageAbout Corentin
Hello and welcome,
For several years, I have been assisting clients of all backgrounds, from SMEs to CAC40 companies, with their information system security assessment needs. More specifically, my missions focus on the following areas:
- Technical audit, including penetration testing and configuration reviews:
• Needs qualification (e.g., web application security audit to assess its robustness)
• Performing penetration tests and/or configuration reviews
• Identifying vulnerabilities, qualifying associated business risks, and sharing recommendations for remediation
• Formalizing a report summarizing the overall security level assessment and detailing all technical tests performed
• Delivering technical and managerial debriefings
- Incident response:
• Incident qualification (often crisis situations, like ransomware)
• Analyzing attacker traces to determine their actions
• Assisting in the implementation of defense and remediation measures to restore the IS to normal operation
If you would like to know more about my areas of expertise, or if they already match your needs, please do not hesitate to contact me to discuss them!
French
Native or bilingual
English
Fluent
Spanish
Conversational
Can work on-site
Paris (up to 50km)
Experience
- StoïkCSIRT AnalystBANKING AND INSURANCESeptember 2022 - January 2024 (1 year and 4 months)Paris, FranceIncident Response:Investigation and forensics on Active Directory, Windows, Linux, O365, Splunk, AWS environments, etc.- Analysis of compromise vectors and reconstruction of attack chains (phishing, ransomware, credential theft, data exfiltration).- Crisis management and support for remediation and full reconstruction of an IS (restoration, hardening, account reset, business continuity).- Development of detailed technical reports and post-incident analyses (timeline, IoCs, corrective recommendations).Insured Support:- Assessment of insureds' security maturity and identification of non-compliance with insurability criteria.- Implementation of action plans to make companies cyber insurable (MFA, immutable backups, network segmentation, privileged account management, EDR, etc.).- Training and awareness on incident management, ransomware prevention, and information system hardening.- Recommendations on cybersecurity best practices and support for their implementation (Cloud, O365, AD, workstations).Tool Development and Automation:- Design of internal tools for O365 compromise analysis, Active Directory configuration review and hardening, and backup and infrastructure compliance verification.- Development of scripts and dashboards to facilitate the detection of indicators of compromise and technical auditing.- Contribution to the continuous improvement of the internal SOC/CSIRT and the formalization of incident response procedures.
- WAVESTONECybersecurity Consultant | Penetration Testing & Incident ResponseCONSULTING AND AUDITSFebruary 2019 - August 2022 (3 years and 6 months)Paris, FrancePenetration Testing:- Web & API Applications- Mobile Applications (iOS & Android)- Internal Information Systems (including Active Directory & backup infrastructures)- Cloud Infrastructures (Azure AD, AWS, Google Workspace)- External Footprinting (analysis of exposed external servers, etc.)- Red Teaming (phishing, business application compromise, etc.)- Citrix Infrastructures- WorkstationsConfiguration Reviews:- Active Directory- Cloud Infrastructure (AWS, Azure AD, Google Workspace)- Operating Systems (Windows, Linux, macOS)- Office 365 Environment- Applications (databases, backup solutions, etc.)- Virtualization (Docker, Kubernetes, OpenShift)- Security Solutions (firewall, router, switch, etc.)Incident Response (examples of cases handled):- Ransomware- Active Directory Compromise- Cloud Infrastructure Compromise- Identity Theft- Phishing- etc.Forensics (log analysis):- Active Directory- Cloud Infrastructure (AWS, Azure AD, Google Workspace)- Operating Systems (Windows, Linux, macOS)- Office 365 Environment- Applications (databases, backup solutions, etc.)- Virtualization (Docker, Kubernetes, OpenShift)- Security Solutions (firewall, router, switch, etc.)
Reviews
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineer - Security of Systems and NetworksTélécom SudParis2019
Certifications
- PASSILSTI
- ESSI (Information Systems Security Expert)ANSSI - National Cybersecurity Agency of France