Jonathan Benayoun

• Recruitment and management of a team of 4 pentesters

• Identification and upstream categorization of critical and important IS applications

• Implementation of an annual penetration testing schedule

• Management of security audits using the OWASP methodology

• Implementation of prerequisites and application deployments

• Development of attack scenarios

• Identification of vulnerabilities, assessment of the degree of risk based on the IS context

• Follow-up of counter-audits

• Vulnerability tracking via JIRA

• Budget management

Assignment within the Operational Security team September 2018 to August 2021 Cybersecurity Consultant: Assignment on the organization of penetration tests on CAPS applications

• Definition and implementation of security policies (PSSI) within the framework of the LPM

• Management of audits on CAPS applications (black box and white box)

• Support for the action plan for remediations related to penetration tests and vulnerability scans

• Handling of phishing alerts within the Group

• Organization of audits in PASSI mode

• Monitoring of alerts reported by the SOC

• Review and update of the company's security policies

• Participation in GDPR compliance, implementation of a data classification policy, support for the deployment of protection tools, etc.)

• Risk analysis based on the ISO 27005 method.

• Implementation of several security-related solutions: LAPS – MDM

• Vulnerability scans of the company's various sites, workstations, and applications

• Creation and implementation of several security procedures

• Performance of several tool comparisons

• Implementation of monitoring for critical systems

• Response to security audits

• Management of Phishing cases

• Management of security incidents