Killian Casarotto

I perform Web, Active Directory, network, and general system penetration tests. I also develop offensive tools.

Helptoria operates web hosting, online casinos, and trading CRMs. I industrialized the infrastructure, automated deployments, and designed robust and scalable network, system, and virtualized architectures, with a focus on security R&D and automation.

My scope covered three main areas:

• Automation and industrialization

• Security and Zero Trust

• Observability and operations

For clients, I had to ensure the reliability of heterogeneous platforms, reduce time-to-market, standardize environments, and guarantee business continuity. Internally, I replaced non-compliant practices with tool-based and traceable processes, centralized secrets, implemented strong identity management, and set up encrypted backups with off-site replication.

I deployed a GitOps model from end to end. Infrastructure code, images, and charts are versioned. Promotion between environments is done via merge requests. Kubernetes deployments are orchestrated by ArgoCD and Helm with minimal access policies and encrypted secret management. The CI/CD chain is built on GitHub Actions with build, test, security control, artifact publication, and progressive rollback deployments pipelines. Platforms run on vSphere on-premise and on Azure and OVHcloud clouds as needed, with reproducible models and scalability. Remote access follows a Zero Trust logic with PKI, MFA, segmentation, and application brokering. Outbound traffic is controlled via proxy. Hosts are hardened and continuously monitored.

Technologies used:

- Ansible Tower, Terraform

- Docker, Kubernetes, GitOps, ArgoCD, Helm

- GitHub Actions

- VMware vSphere

- Azure, OVHcloud

- OpenZiti, PKI, MFA, Squid Proxy

- WireGuard, OpenVPN, Pritunl

- Windows Server, VDI, Ubuntu Server

- Python, Golang, Powershell, Bash, API

- MAAS, Dell PowerEdge

- Semaphore UI

NEO Cyber Camp is a French EdTech company specializing in cybersecurity (founded in 2024, <10 employees), offering online courses and an asynchronous training platform. I joined the team to design and produce technical/pedagogical content while industrializing the lab infrastructure and the delivery pipeline.

My scope covered two main areas:

- Content & Pedagogy (learning outcomes, module scripting, offensive/defensive labs, video shooting/editing, assessments)

- Platform & Industrialization (virtualized/containerized environments, IaC automation, format standardization, publication pipeline)

The constraints of a certifying program focused on employability led me to a modular, measurable, and outcomes-based approach: fine granularity of skills, assessment rubrics, mapping to reference frameworks (OWASP, MITRE ATT&CK, NIST/NICE), rapid iterations based on learner feedback.

Technologies used:

- Scaleway

- Openstack

- Microsoft Hyper-V, VMware vSphere, VMware Workstation, VirtualBox, Proxmox

- Linux (CentOS, Debian, Red Hat Enterprise, openSUSE) & Windows 10/11 / Windows Server 2022

- Ansible, Terraform, PowerShell, Bash, Python

- Docker, Kubernetes

- Apache, Nginx

- Centreon

- Microsoft Office 365 (Teams/Sharepoint/etc)

- Git / GitHub

- Firewalling Stormshield Network Security (SNS), PfSense

- OBS Studio, Elgato Camera Hub

- Studio lights, Sony camera EV