Freelancer profile translated to English.

Back to original language

Description

Experienced cybersecurity consultant, with over 12 years of expertise in technical and operational security.

Over the years, I have led numerous missions, including:

In-depth security audits,
Strategic cybersecurity support,
Management and execution of security projects (Active Directory, Cloud, PAM - Cyberark),
PCI DSS Audit and Certification (former QSA),
Definition of detection strategy,
SOC implementation and audit,
Security incident response and management.

I am also a certified auditor for key ANSSI frameworks, PDIS, PRIS, and SecNumCloud.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to km)

WELAN
Cybersecurity Consultant
CONSULTING AND AUDITS
March 2020 - Today (6 years and 3 months)
Paris, France
Consulting firm structured around 5 activities:
- Technical Audits and Penetration Testing
- Defense
- Detection
- Security Incident Response
- Compliance / GRC
XMCO
Security Consultant - PCI QSA - Head of Security Incident Response Department
CONSULTING AND AUDITS
October 2012 - March 2020 (7 years and 5 months)
Paris, France
Head of the Security Incident Response Department (2019 - 2020)
- Management of missions related to large-scale security incidents with reconstruction of an information system
- SOC (Security Operations Center) Audit
- Commercial management and development of the department
- Definition of security policies and procedures related to the operation of IS dedicated to incident response activities

Senior Security Consultant / Manager / PCI QSA (2016 - 2019)
- Qualified PCI QSA auditor (PCI DSS audit and certification)
- Consulting and support for security and/or compliance projects
- Project manager for an internal SaaS solution

Security Consultant and Penetration Tester (2012 - 2016)
- External, internal, and application penetration testing missions
- Digital investigation (Forensics) missions
- Technical and organizational audits conducted according to security standards/norms (ISO 2700X, PCI DSS, SOX, etc.)
- Architecture review
- Configuration audits of Middleware systems and applications (DBMS, Web Server, etc.)
- Security awareness training sessions
- Phishing and Social Engineering tests