Freelancer profile translated to English.

Back to original language

Description

I secure and make your applications reliable from their design by working with your development and DevOps teams:

- Security automation in CI/CD

- Container security: Kubernetes / Openshift

- Evangelization and training of development teams in security best practices

I also carry out audits and one-off security missions, contact me for more details.

Areas of expertise:

Security: OSCP and OSWE certified (pentest / code audit).

Containers: Kubernetes / Openshift certified.

Development: Senior developer experience: Java / javascript / python / php ..., certified in Openshift development

DevOps: Software factories (gitlab/jenkins), CI/CD

DevSecOps is a concept that involves integrating security into all phases of software development by working closely with all relevant teams:

- Developers

- DevOps

- Ops

- ...

Learn more:

Mobility: Paris region depending on transport

Mission duration: short missions accepted

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 30km)

Amundi
DevSecOps Consultant
BANKING AND INSURANCE
February 2024 - Today (2 years and 4 months)
Paris, France
- DevSecOps: Supporting development teams on security-related issues

- Implementation and maintenance of vulnerability scanning tools in CI/CD

- Security of artificial intelligence and deep learning applications

- Validation of production release security

- Support for applying group security standards

- Code audit / pentest - validation of audits and organization/monitoring of remediation

- Vulnerability scanning (SAST/DAST/SCA): BURP, InsightAppSec, Coverity, Blackduck...

- Applications: Java (Quarkus / Spring Boot), javascript/typescript (react), C# .NET, python...
- Kubernetes: k3s, rancher, sysdig...
- Authentication: Keycloak, OpenID, SAML
- DevOps, CI/CD: docker/podman, Rancher, Azure DevOps, Jenkins
Sécurité applicative DevSecOps intelligence artificielle
Groupement les Mousquetaires - STIME
DevSecOps / Application Security Referent
RETAIL (LARGE RETAILERS)
November 2019 - Today (6 years and 6 months)
Châtillon, France
- DevSecOps: Security automation in the CI/CD pipeline
- Training developers in security
- Security Referent: Supporting development teams on security-related issues
- Code audit / pentest
- Analysis of scan reports
- Application scanning: BURP, CAST, Checkmarx, MicroFocus
- Applications: Java (spring boot), javascript (angular, react)
- Audit: BURP, kali, python
- DevOps, CI/CD: gitlab-CI, docker, openshift, google cloud, Jenkins
devsecops Cybersécurité PenTest Formation
ERI bancaire
Java Developer / Cybersecurity Consultant
BANKING AND INSURANCE
July 2019 - Today (6 years and 11 months)
Paris, France
- Java development
- Implementation of continuous integration / automated deployment
- Fixing security issues (banking authentication applications)
- Responding to client security requirements (central banks, deposit banks...)
- Code audit: clean code + pentest
- Securing infrastructure (SaaS banking solution)

Développement DevOps sécurité applicative pentest