Freelancer profile translated to English.
Back to original languageAbout Johan
đ Is your SaaS truly ready to withstand an attack?
I help you identify and fix your vulnerabilities before an attacker does.
đšâđ» Web & security developer for 10 years (20+ SaaS), I specialized in offensive web application security.
Today, I assist startups and SMEs with:
- Performing applicationpentests(web app, API, auth, business logicâŠ)
- Helping you integrate security into development cycles (best practices, tools, processes)
-Training your developerson web attacks and self-defense (practical labs, final wargame)
đŻ My offers:
- Web application pentest
- Product security support: tooling, coaching, security "by design"
- 100% practical training: web & offensive security, Security Champion role
đ France â remote or occasional on-site
Certifications: CBBH (HackTheBox), ACP (APISec)
With all this, we surely have many topics to discuss ;)
Feel free to contact me, we will have at least gained an interesting conversationđĄ
French
Native or bilingual
English
Conversational
Remote only
Primarily works remotely
Experience
- ASYMISApplication Security Consultant | Pentest · AppSecJanuary 2025 - Today (1 year and 5 months)Nantes, France
Web Penetration Testing
- Impact analysis / compromise scenarios
- Black box / white box, detailed report, remediation support
- Code and configuration review (Keycloak, BaaS...)
SaaS Security Support
- Threat modeling
- Implementation of development best practices
- Tool installation (SCA, SAST, DAST)
Secure Development Training (schools / companies)
- Integrating security into projects
- Secure development / DevSecOps
- LonestoneWeb Security AuditorOctober 2022 - December 2024 (2 years and 3 months)Nantes, France- Scoping security needs for web products (sites / APIs)- White box / black box penetration testing- Code auditing- Developer training (awareness / secure development / "hacking" techniques / mini-CTFs) The methodology used is largely inspired by OWASP and PTES recommendations. It also combines DevSecOps approaches to help our clients raise their security maturity level.
- LonestoneWeb Security ReferentFebruary 2022 - December 2024 (2 years and 11 months)Nantes, France- Intervention on agency projects for security audits- Internal training on secure development & "hacking" techniques- Consulting and recommendations to our clients on security issues
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineer's Degree, Computer Software EngineeringISTIA - Engineering School of the University of Angers2015Engineer's Degree, Computer Software Engineering
- University Diploma in Technology (DUT) in Computer Science, Software DevelopmentIUT of Laval2012DUT Informatique, DĂ©veloppement logiciel
Certifications
- Certified Bug Bounty HunterHack The Box2023