Freelancer profile translated to English.

Description

Offensive security expert with 8 years of total experience. OSCP certified (CISSP in progress). I was a member of the Red Team for Ernst & Young for 2 years, where I carried out multiple assignments for governments, banks and financial institutions, as well as for clients in the oil sector.

I currently lead a team of cybersecurity analysts who carry out external and internal pentest missions on web, API, mobile, and network targets (servers, Active Directory, ...).

Industry field of expertise

Languages

French
Fluent
Arabic
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Lyon (up to 50km), Marseille (up to 30km), Toulouse (up to 30km), Lille (up to 30km)

Cobalt.io
Cyber Security Researcher
CONSULTING AND AUDITS
October 2024 - Today (1 year and 10 months)
As aSecurity Researcheron the Cobalt.io platform, I conducted numerous penetration tests (pentests) on various environments (web applications, APIs, cloud environments, mobile and internal networks) for international clients in critical sectors (finance, health, industry, tech).

My main responsibilities:
Conducted comprehensive penetration tests as part of the Cobalt Core program (OWASP Top 10, configuration, business logic, privilege escalation, etc.).
Wrote detailed and actionable audit reports, including risk assessment, proof of exploitation, and prioritized remediation plan.
Collaborated closely with client technical teams for vulnerability reproduction and correction.
API Pentest Source Code Review Security Audit risk-and-vulnerability-assessment Internal Pentest
Yogosha
Cyber Security Researcher
TECH
September 2019 - Today (6 years and 11 months)
Paris, France
Helped clients increase their security level by managing their technical security programs (Bug Bounty, Crowdsourced Pentests, and Coordinated Vulnerability Disclosure).
Participated in pre-sales activities, conducted technical presentations to potential clients.
Managed technical teams to ensure the deployment of the Yogosha security solution on-premise or on a private cloud.
Red Team Web Pentest Vulnerability Management IT Security Security Audit
EY
Cybersecurity Consultant / Red Team
CONSULTING AND AUDITS
February 2018 - August 2019 (1 year and 7 months)
- Red Teaming
- Internal and external penetration testing
- Review and define security procedures
- Review network, database, and source code security
Red Teaming Social Engineering Web Pentest Internal Pentest IT Security