Freelancer profile translated to English.

Description

With many years of experience in development and cybersecurity, I have been able to intervene in all types of situations, whether for small, medium, and large companies, in France and abroad.

I have been involved in various types of projects and technologies, which has allowed me to acquire a wide range of technical skills, both in development and security, thanks to my dual expertise.

I have a versatile, rigorous, and pedagogical profile that combines:

- advanced expertise in offensive and defensive cybersecurity,

- demanding institutional experience (Ministry of the Armed Forces),

- continuous confrontation with reality (bug bounty, field audits),

- a proven ability to transmit and structure knowledge,

- an understanding of development issues,

- a great capacity for learning and adaptation.

My complementary activities (bug bounty, tools, blog, training) reinforce my profile.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

Diverses
Trainer
CONSULTING AND AUDITS
January 2022 - Today (4 years and 7 months)
Creation and delivery of training courses, over 80 sessions to my credit:

- Web application hacking and security
- Cybersecurity awareness
- Introduction to penetration testing
- Presentation of Bug Bounty
- Laravel Security
- PHP for beginners
- SQL basics
- Bash scripting

Companies:Boursorama, Onera, Tenacy, Mazarine, Aix-Marseille University, Jetpulp, CSTB, Eurodecision, Saint-Gobain...
Cybersecurity Bug Bounty Training Web Development Cybersecurity awareness
Ministère des Armées
Cybersecurity Consultant
DEFENSE AND MILITARY
February 2020 - July 2024 (4 years and 5 months)
Paris, France
Performed security audits for numerous highly sensitive projects for the French Ministry of Defense:

- Penetration testing
- Code audits
- Configuration audits
- Architecture audits
Cybersecurity Security audit Penetration tests Code Review Offensive Security
Freelance
Bug bounty
CONSULTING AND AUDITS
February 2016 - Today (10 years and 6 months)
@home
A bug bounty program allows a company to have its website and applications tested within a specific scope by any security researcher who wishes. If they discover a vulnerability, they inform the company, which rewards them, most often financially, and can then fix the vulnerability.

Information gathering, development of custom tools, Burp Suite extensions. Exploitation of all types of vulnerabilities for many reputable companies: subdomain takeover, SQLi, IDOR, XSS, CSRF, SSRF,
RCE, XXE, HTTP smuggling, cache poisoning...

Companies:Yahoo, Swisscom, Blablacar, Decathlon, Payfit, Uber, Deliveroo, MindGeek, Twilio, Monday, EDF, BPCE...
Hacker Tooling Cybersecurity Security audit Code Review