Freelancer profile translated to English.

Description

Cybersecurity expert and independent auditor, I assist companies in securing their digital assets, with a strong specialization in the Android mobile ecosystem and complex Cloud infrastructures.

Where automated scan tools stop, my manual analysis begins. My approach relies on deep technical immersion to identify critical vulnerabilities that standard compliance tools cannot detect.

My areas of expertise:

Android Reverse Engineering: Comprehensive static analysis (SAST) of obfuscated applications, Java/Kotlin code decompilation, secret extraction (API keys, tokens), and native library (.so) auditing.

Cloud Infrastructure & DNS Auditing: Identification of critical configurations (Subdomain Takeover), securing Azure architectures, and data segmentation analysis.

API Pentesting: Communication protocol auditing, traffic interception (Burp Suite), and detection of logical flaws in server exchanges.

Why entrust your project to me?

I don't just list vulnerabilities. I deliver structured audit reports, including clear Proofs of Concept (PoC) and prioritized remediation recommendations for your development teams.

Work method:

I favor 100% written communication (Malt, Slack, E-mail) to ensure perfect technical traceability and rigorous documentation. I work exclusively remotely.

Let's secure your infrastructure before it's exploited. Let's discuss your needs via message now.

Languages

French
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

Indépendant
Mobile Pentesting & Reverse Engineering
January 2026 - Today (7 months)
In-depth static analysis of complex Android applications (APK). Use of reverse engineering tools (JADX, Ghidra) for extracting buried secrets, analyzing native libraries (.so), and auditing API communication protocols. Implementation of proofs of concept to demonstrate risks of sensitive data exfiltration.
API Security Infrastructure Auditing Security Auditing
Freelance / Indépendant
Cybersecurity Researcher & Infrastructure Auditor
January 2026 - Today (7 months)
Vichy, France
Identification of 173 domains vulnerable to Subdomain Takeover attacks (Azure/DNS).

In-depth reverse engineering of Android applications (APK) to detect data leaks and hardcoded API keys.

Analysis of critical API Gateway configurations and identification of infrastructure segmentation risks (Cross-tenant data leakage).

Writing detailed vulnerability reports with proof of concept (PoC) and technical remediation recommendations.
Recherche en Sécurité Cloud & DNS
Cloud Infrastructure Security Auditor
January 2026 - Today (7 months)
Vichy, France
Large-scale audit of an automotive ecosystem (173 domains). Identification of critical Subdomain Takeover vulnerabilities on Azure and DNS infrastructures. Analysis of cross-tenant data leakage risks and writing detailed vulnerability reports to secure internet-facing assets.