Freelancer profile translated to English.
Back to original languageAbout Denis
Cybersecurity Consultant / Senior Pentester – +7 years of experience
I support companies in identifying and reducing their cyber risks through technical and organizational security audits, penetration tests, and realistic offensive approaches.
With over 100 missions completedwithin a specialized cybersecurity firm, I have supported organizations in sensitive sectors (banking, energy, insurance, transport, industry…) in evaluating their security level and improving their resilience against threats.
Areas of Intervention
🔍Reconnaissance & Attack Surface Mapping
OSINT, identification of exposed assets, external exposure analysis
💻Application Penetration Testing
Web Applications, Mobile, APIs, Web Services - approach based on OWASP guidelines
🏴☠️Internal Pentests & Red Team / Purple Team Approach
Active Directory, internal networks, critical infrastructures, backup environments
🏗️Architecture and Organizational Security Audits
Cloud, on-premise environments, security governance, CISO support
⚙️Configuration Review & Hardening
Windows/Linux systems, network equipment, security recommendations
My approach combines an offensive vision, realistic risk analysis, and a strong operational focus: factual findings, prioritized recommendations, and action plans adapted to business constraints.
Available for ad-hoc penetration testing, security audits, or cybersecurity team support missions.
French
Native or bilingual
English
Fluent
Remote only
Primarily works remotely
Experience
- PWC FranceCybersecurity Manager - PentesterCONSULTING AND AUDITSMarch 2023 - Today (3 years and 5 months)**Supervision of over 100 penetration testing projects**, including mentoring and supporting a team of four junior pentesters, from execution to deliverable submission.Support to the operational security teamin managing cybersecurity incidents.**Review and improvement of server and workstation logging policies**, to optimize SOC detection capabilities based on the MITRE ATT&CK framework.Automation of key tasksin repetitive vulnerability management and operational security, aiming for time and efficiency gains.
- WAVESTONECybersecurity AuditorCONSULTING AND AUDITSJanuary 2019 - Today (7 years and 7 months)Courbevoie, FranceAssessment of client exposure on the InternetMapping of publicly accessible assets to identify sensitive information or vulnerable services that could impact information system security.Penetration tests on critical web applicationsPerforming black-box and gray-box tests to assess application security. Identifying vulnerabilities that could compromise data confidentiality, integrity, or availability."Red Team" oriented penetration testsSimulation of internal attacks aimed at replicating the behavior of a malicious insider. Objectives achieved:- Access to executives' email- Demonstration of the ability to propagate ransomware- Extraction of customer databases- Compromise of fund transfer management services- A technical debrief with the client's SOC allowed for the assessment of post-exploitation detection capabilities.Organizational and architecture auditsConducted based on interviews (business and technical) and documentary analysis, to assess the maturity of IS security.
Reviews
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineer in Information System, Networks, Network SecurityESIEE PARIS2018Ingénieur en Système d'Information, Réseaux, sécurité des réseaux
- University Exchange, Computer and Network SecurityUniversité de Montréal - École Polytechnique de Montréal2016Echange universitaire, Sécurité Informatique et des Réseaux
Certifications
- CRTO (Certified Red Team Operator)Zero-Point Security2025
- PT0-002 - CompTIA PenTest+CompTIA2024