Freelancer profile translated to English.
Back to original languageAbout Mehdi
đCybersecurity Consultant and Fullstack Web Developer React/Node.jsđ
đŒDaily rate starting from âŹ650
đ Available now
đšâđ» Who am I?
R&D Engineer in cybersecurity and fullstack developer, I support my clients in designing robust and secure web solutions.
With experience incritical environments(Defense, Banking, SaaS), I combine technical expertise with a security culture to deliverreliableandhigh-performingprojects.
đMy expertise
I specialize in four key areas:
â
Fullstack Web Development:
- Frontend: React, Next.js, Vue
- Backend: Node.js, NestJS, Express, PHP
- APIs: REST, GraphQL, Swagger, gRPC
- CI/CD Automation (Gitlab, Docker, Kubernetes)
â
Architecture & Infrastructure
- Cloud & on-prem deployment (Docker, K8s, Gitlab CI/CD)
- Performance optimization and scaling
- Monitoring and observability (Grafana, Kibana, Prometheus)
â
Cybersecurity applied to the Web
- Application and system hardening (OWASP Top 10, PKI, TLS, AppArmor)
- API & infrastructure security
- Application pentests (OWASP ZAP, load/security testing)
- Compliance with ANSSI / security best practices
â
Consulting & Support
- Technical and security redesign of websites/applications
- Technical coaching for teams (dev + security best practices)
- Demonstrations & technical presentations
âWhy work with me?
âïž Dual Web + Cyber expertise, rare in the market.
âïž Proven large-scale experience (+300 clients, 20k stations)
âïž Global vision: from design to secure deployment.
âïž Clear communication and results-oriented approach.
đ©Let's discuss your project today.
Whether you need a robust web application, a security audit, or technical support, I can help you take it to the next level.
French
Native or bilingual
English
Fluent
Japanese
Basic
Can work on-site
Paris (up to 50km)
Experience
- Orange CyberdefenseSoftware Development Engineer focused on CybersecuritySOFTWARE PUBLISHINGJanuary 2024 - Today (2 years and 7 months)Paris, FranceâąMalware Sandbox**: Malicious File Detection - **Functional evolutionandoptimizationof a dynamic analysis platform (**C++, QEMU/KVM, Python, 64-bit Assembly, Flask**).â Extended malware coverage with support for Windows 11 via a 64-bit injector.â Gitlab CI/CD integration and automated Docker/Kubernetes deployment.âą **Decontamination Station**: Malware Cleaner - Took over, stabilized, and strengthened a file cleaning solution (Qt/QML, Apache Arrow/Parquet, Samba).âMarket leaderâSecure sequestrationwith crypto-shredding (**ANSSI compliance**, TOCTOU mitigation).â Fixed vulnerabilities from **internal pentests & CVEs**, application and system hardening (**low-level Linux, systemd/journald, AppArmor**).â Demos and technical presentations at specialized trade shows.âą **SaaS & On-Prem Administration Console**: Developed from scratch and co-managed a full-stack console (NodeJS, ReactJS, Swagger, Gitlab CI/CD, Kubernetes).â Automated functional and security tests (Playwright, Japa, Apache JMeter, OWASP ZAP).â Monitoring via Kibana & Grafana, security integration (PKI, TLS, OWASP Top 10).
- OpenClassroomsWeb Development Mentor & Tutor (fr/en)EDUCATION AND E-LEARNINGJanuary 2022 - January 2024 (2 years)
- Individualized support for17 beginner students(3â5 in parallel, weekly 1-hour sessions, 3â6 months duration).
- Progressive project tracking: fromstatic HTML/CSSwebsites tocomplete React/Node.js web appswith MongoDB.
- Code review and coaching on best practices (structuring, quality, maintainability).
- Introduction toapplication securityconcepts: OWASP Top 10, SQLi/XSS, secure authentication, hashing.
- Instruction inFrench and Englishdepending on the students.
- Result:15 students successfully certified(88% success rate).
- Headmind PartnersCybersecurity Consultant â Ransomware Response ProgramCONSULTING AND AUDITSMay 2023 - January 2024 (8 months)Paris, FranceConsultant at anInsurance Multinational, English-speaking environment
- Participation in team orchestration and review of theAnsibleplaybook for deploying "red button" scripts (rapid disconnection of critical datacenters and IT systems).
- Assessment of technical impact (network isolation, unavailable servers/applications) and financial impact (estimated losses related to business interruptions).
- Design of aprioritization methodology for third-party suppliersinterconnected, based on risk level.
- Deliverables produced: prioritization matrix, executive reporting, and **Power BI dashboards**.
- Mission conducted in an English-speaking environment, in compliance with **ISO 27001**, **ISO 27035**, **NIST 800-61**.
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Double Master's Degree, Mathematics, Computer Science, and Applications to Cryptology and SecurityUniversité de ParisDouble master, Mathématiques, Informatique et applications à la cryptologie et sécurité
- Double Bachelor's Degree, Mathematics and Computer ScienceUniversité de La Réunion2019Double licence, Mathématiques et informatique