Freelancer profile translated to English.
Back to original languageAbout Florian
Hello đź‘‹
I am aPentesterspecializing inweb applicationsand **APIs**, OSCP and OSEP certified, independent and entrepreneur based in England. I am exclusively dedicated to the security of **web applications**, from public websites and single-page applications to complex APIs and microservices, to help organizations identify, prioritize, and fix truly critical **vulnerabilities**.
🤖 Kalibur: I developed my own cybersecurity AI to multiply my productivity and depth in my tests!
đź’Ž Certifications & Credibility: OSCP and OSEP, practicalcertificationsin **offensive security**, demonstrating concrete expertise in exploitation, post-exploitation, and **advanced web attacks**.
🎯 Services:
▪️ Web application penetration testing (black-box / grey-box / white-box)
▪️ Authentication testing (session management, access controls, business logic)
▪️ API & microservices testing (REST, GraphQL, etc.)
▪️ Advanced exploitation (vulnerability chaining, SSRF, RCE, IDOR, etc.)
▪️ Secure code review & remediation support
▪️ Post-audit debriefings and executive reports
⚙️ Approach & Deliverables:
I combinethorough manualresearch with industry-standard tools and custom techniques to ensure relevant and actionable results. Deliverables includeclear, prioritized reports(executive summary, technical details, secure proof-of-concepts), remediation steps, and optional patch verification.
đź“© Contact:
➡️ Quick response in less than an hour.
➡️ Available 7 days a week via Malt messaging.
Contact me to define a suitable scope and establish acustomized pentestplan for your web applications together.
French
Native or bilingual
English
Native or bilingual
Can work on-site
Paris (up to 50km), Marseille (up to 50km), Lyon (up to 50km), Toulouse (up to 50km), Lille (up to 50km)
Experience
- Scapin LtdPentester / Ethical HackerCONSULTING AND AUDITSAugust 2025 - Today (1 year)Liverpool, United KingdomI help companies secure their web applications by identifying, prioritizing, and fixing critical vulnerabilities through advanced penetration testing and targeted audits. I combine offensive expertise, manual analysis, and professional tools to deliver actionable, clear, and secure reports.I have experience supporting projects from concept to production. I work with startups and large companies in various sectors such as SaaS, e-commerce, healthcare, and cybersecurity, often tackling the most complex technical challenges (APIs, microservices, single-page apps, session management, business logic).I offer more than just tests: I assess architecture and code, simulate advanced attacks (vulnerability chaining, SSRF, RCE, IDOR, authentication bypass), support remediation, and provide actionable recommendations, bringing real added value to your project's security.
- Beauty PieWeb Security EngineerE-COMMERCENovember 2022 - August 2025 (2 years and 9 months)Londres, United KingdomBeauty-pie is an e-commerce website in the beauty sector (Next.js/React.js, Node.js, GraphQL, etc.), with several million daily visitors. I created and led a new internal cybersecurity team, implementing robust processes and practices to secure the platform.Among my achievements:- Training developers on security best practices- Implementing log monitoring and conducting audits for third-party providers- Managing incident logs and organizing security on-calls- Conducting internal penetration tests and coordinating external tests- Creating documentation and repositories for development teamsThrough these actions, I contributed to strengthening the platform's overall security and embedding a security culture within the technical teams.
- Beauty PieWeb and Back-end DeveloperE-COMMERCEMarch 2021 - November 2022 (1 year and 8 months)Londres, United KingdomBeauty-pie is an e-commerce website in the beauty sector (Next.js/React.js, Node.js, GraphQL, etc.), with several million daily visitors. I joined the Customer Experience team as a Full Stack Web and Back-end Developer, participating in the complete redesign of the site in Next.js and the API in Node.js/GraphQL.Among my achievements:- Design and development of new features to improve user experience and conversion rates- Optimization of front-end and back-end performance to handle large and growing traffic- Collaboration with product and design teams to deliver scalable and maintainable solutions- Participation in the ÂŁ100M Series B funding round by enhancing the platform's efficiency and qualityThrough these actions, I contributed to improving customer satisfaction and commercial performance while consolidating the technical architecture of the site and API.
Recommendations
Be the first to recommend Florian
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master 2 of Information TechnologyEpitech, Paris2017
- Master 1 of Information TechnologyThe College at Brockport State University (NY)2016
Certifications
- OSEP (Offensive Security Experienced Penetration Tester)Offsec2023
- OSCP (OffSec Certified Professional)Offsec2023