Freelancer profile translated to English.

Back to original language

Description

Experienced cybersecurity consultant with over 12 years of expertise in technical and operational security.

Over the years, I have led numerous missions, including:

In-depth security audits,
Cybersecurity strategic support,
Security project management and execution (Active Directory, Cloud, PAM - Cyberark),
PCI DSS Audit and Certification (ex-QSA),
Detection strategy definition,
SOC implementation and audit,
Security incident response and management.

I am also certified as an auditor for key ANSSI frameworks: PDIS, PRIS, and SecNumCloud.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to km)

WELAN
Cybersecurity Consultant
CONSULTING AND AUDITS
March 2020 - Today (6 years and 4 months)
Paris, France
Consulting firm structured around 5 activities:
- Technical Audits and Penetration Testing
- Defense
- Detection
- Security Incident Response
- Compliance / GRC
XMCO
Security Consultant - PCI QSA - Head of Security Incident Response Unit
CONSULTING AND AUDITS
October 2012 - March 2020 (7 years and 5 months)
Paris, France
Head of the Security Incident Response Unit (2019 - 2020)
- Managed missions related to major security incidents, including information system reconstruction
- SOC (Security Operations Center) audits
- Commercial management and development of the unit
- Defined security policies and procedures for the operation of IS dedicated to incident response activities

Senior Security Consultant / Manager / PCI QSA (2016 - 2019)
- Qualified PCI QSA auditor (PCI DSS audit and certification)
- Consulting and support for security projects and/or compliance initiatives
- Project manager for an internal SaaS solution

Security and Penetration Testing Consultant (2012 - 2016)
- External, internal, and application penetration testing missions
- Digital investigation (Forensics) missions
- Technical and organizational audits conducted according to security standards/norms (ISO 2700X, PCI DSS, SOX, etc.)
- Architecture reviews
- System and Middleware application configuration audits (DBMS, Web Server, etc.)
- Security awareness training sessions
- Phishing and Social Engineering tests