Freelancer profile translated to English.
Back to original languageAbout Gregoire
With a cumulative experience of about ten years in "cloud native" companies, I am a cloud security expert, whether at AWS or GCP. My experience in massive environments (150M+ users, 2000+ developers) allows me to be very familiar with the most common problems encountered by technical teams, as well as knowing how to best resolve them.
I analyze your cloud environments to detect, classify, resolve, and eliminate vulnerabilities present and limit your attack surface as well as the blast radius in case of an attack. My goal is not only to reduce the number of vulnerabilities (which will undoubtedly eventually reappear) but to eliminate them entirely so that the error that led to the vulnerability is no longer possible.
Contact me if:
- You want to start your Cloud security journey;
- You feel overwhelmed by alerts from your tools;
- You have had a recent incident and want to verify the security of your data;
- For any other reason, you want to sustainably improve your security;
I can also assist you with cross-cutting topics such as:
- Application security with penetration testing / security audits;
- Implementation of tools like SAST, DAST, etc.;
- Implementation of Bug Bounty programs;
Finally, I have strong development skills which allow me to have a fine understanding of developers' issues and challenges.
---
At 14, I discovered scripting by trying to develop add-ons for my first video games. I also discovered Cheat Engine, which introduced me to IT security. Even before I turned 18, I had already spent several hundred hours on root-me and similar sites to train myself in cybersecurity. Since then, I have been fascinated by the possibilities of computing and have never stopped wanting to learn more.
English
Native or bilingual
French
Native or bilingual
Swedish
Conversational
Remote only
Primarily works remotely
Experience
- EinrideSenior Security EngineerLOGISTICS AND SUPPLY CHAINFebruary 2025 - Today (1 year and 6 months)Stockholm, Sweden
- Security audits and internal penetration tests to ensure the security of the developed product
- Analysis and resolution of cloud vulnerabilities (GCP)
- Collaboration with developers to fix found vulnerabilities
- Implementation of new tools to analyze product security
- Klarna BankSenior Security EngineerBANKING AND INSURANCENovember 2020 - January 2025 (4 years and 2 months)Stockholm, Sweden
- Performed internal penetration tests and end-to-end security assessments (product security, cloud security, deployment security, etc.). Reported and helped developers fix over 300 vulnerabilities across Klarna's infrastructure and services.
- Implemented and promoted secure engineering practices to prevent recurring vulnerabilities and reduce the time to deploy a fix in production.
- Managed the Bug Bounty program and submissions, responsible for program growth and stakeholder relations (program manager, security researchers). Prepared and matured the program for public launch.
- Automated tasks in a large-scale AWS environment using languages and frameworks suited to the needs. Collaborated with stakeholders to automate as much as possible.
- Regularly planned the roadmap (and revised based on new priorities), defined KPIs, communicated with internal stakeholders.
- Prepared and conducted interviews for candidates (20+), defined technical questions and expectations.
- Delivered presentations on discovered vulnerabilities and ways to prevent them.
- LyynkPentesterSOFTWARE PUBLISHINGSeptember 2024 - September 2024Stockholm, SwedenPerformed a manual security audit (penetration test / pentest) (not just a Nessus-type scan) before the public release of the application. Delivered a detailed report and collaborated with developers to implement fixes.
Reviews
Recommendations
+1
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- MSc in Cyber SecurityUniversity of KentGCHQ certified programme
- Master EPITECH - Expert in Information Technologies - Grande Ecole ProgramEPITECH
Certifications
- MongoDB Certification for Node.JS DevelopersMongoDB University2016
- Data Science for Businessemlyon2019