Freelancer profile translated to English.

Description

Need to know what an attacker can actually do on your IS? I perform web, internal, and Active Directory penetration tests to challenge your defenses under realistic conditions, and I deliver an actionable report: vulnerabilities ranked by criticality, reproducible PoCs, concrete recommendations to give directly to your technical teams.

My areas of intervention:

Web Pentest — OWASP Top 10 methodology and beyond: injections (SQLi, NoSQL, command), XSS, CSRF, IDOR, SSRF, deserializations, authentication bypass, business logic flaws.

Internal & Active Directory Pentest — Reconnaissance, Kerberos exploitation, ADCS abuse, NTLM relay, lateral movement, persistence, and escalation to Domain Admin.

Wi-Fi & Network Pentest — WPA2/WPA3-Enterprise audit, Evil Twin attacks, VLAN segmentation, pivoting.

What sets me apart:

Real field experience: actual pentest conducted on a hospital IS (web + infra audit, remediation report delivered to the client), full AD labs (GOAD) set up and exploited end-to-end.

Regular offensive practice: top 3% Root-Me, top 10% TryHackMe, honorable mentions on 404CTF, MetaCTF, HackDay, BITSCTF. I break boxes every week, my techniques are up-to-date.

Readable reports: executive summary for management, technical details for ops, prioritized remediation plan. No tool copy-pasting.

Deliverables:

Web / Internal / AD pentest report with PoC and CVSS

Technical and executive oral presentations

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

CAPLASER
Apprentice Network and Security Administrator Technician
January 2025 - Today (1 year and 7 months)
Securing and administering IT infrastructures for a portfolio of +200 SME/ETI clients. Centralization of Sophos Central endpoint security across the multi-client park. Automation of processes via the Sophos API (Python/OAuth2), reducing processing time for recurring tasks. Implementation of Fortinet logs + MDR correlation for incident detection. Administration of Stormshield firewalls (CSNA certified), VPN configuration, and filtering rules. Writing of 3+ incident response playbooks. Configuration and MCO of Veeam backup solutions. Technical support N1/N2/N3 for professional clients.
Cybersecurity Incident Management Sophos Phishing Infrastructure Security Cybersecurity
ORDI'PROX 81
Internship in Systems and Network Administration
March 2025 - April 2025 (1 month)
Windows Server (AD, GPO) Client Networks Secure remote access Technical support IT asset management