Julien Martin

• Conducting in-depth penetration tests on web applications, network infrastructures, and internal systems to identify exploitable vulnerabilities.

• Designing, executing, and managing targeted phishing campaigns to assess and improve employee security awareness.

• Leading technical audit debriefing sessions, providing detailed analysis and strategic recommendations to technical and non-technical teams.

• Providing technical support during commercial qualifications, including penetration testing demonstrations and risk assessments for clients.

• Actively contributing to the evolution of internal tools.

- Conducting penetration testing (pentest) campaigns using blackbox, greybox, and whitebox approaches to identify vulnerabilities.

- Developing detailed reports and in-depth assessments of detected vulnerabilities, providing clear recommendations for risk mitigation.

- Exhaustively documenting all stages of testing campaigns, including methodology, tools used, and results obtained.

- In-depth analysis of test results, including vulnerability exploitation to assess their potential impact on overall system security.

- Managing the follow-up and implementation of corrective actions to address discovered vulnerabilities, ensuring they are resolved effectively and securely.

- Close collaboration with development and operations teams to ensure a clear understanding of risks and security requirements.

- In-depth source code analysis to identify potential vulnerabilities in applications.

- Leading the deployment of infrastructure and technical integration architectures, as well as interfaces with other SI components.

- Monitoring and coordinating qualification campaigns: installation, performance, monitoring, and backup/restore tests.

- Installation and deployment of applications, and technical tests: functionality tests, production plan, exploitability.

- Detection, reporting, support, and follow-up of anomalies during integration platform deployments.

- Analysis and diagnosis of results: Incident tracking and workaround proposals. Production support (support during production deployments and within the incident management process). and skills transfer to ESI qualification center teams.

- Qualification of documentation intended for production centers (installation guides, operating procedures, intervention sheets).