Freelancer profile translated to English.
Back to original languageAbout Mehdi
Passionate about IT since my early age, I quickly developed a taste for the security field. I started my professional experience in cybersecurity within large groups before moving towards consulting firms.
Initially focused on implementing security solutions, I later developed my skills in penetration testing to assess the security levels of IT resources. With seven years of experience, I want to bring my expertise to my clients to audit their cyber defense capabilities and help them protect themselves against threats.
More information at:
Skills:
🔷 Web Applications
🔷 API & Webservices
🔷 Thick Client
🔷 Mobile Applications IOS & Android
🔷 Internal Network Active Directory & Infrastructures
🔷 Wi-Fi Network
🔷 Configuration Audit (OS, database, firewall, software packages...)
🔷 Password Audit
🔷 Phishing Campaign
🔷 External Exposure Study & Redteam
📞 Do not hesitate to contact me regarding your needs and I will respond as soon as possible 📞
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- MBO SecurityPenetration TesterCONSULTING AND AUDITSMay 2021 - Today (5 years and 1 month)I support my clients in their journey towards greater security, particularly through conducting penetration tests. These tests provide an attacker's view of the targeted information system. Based on the identified vulnerabilities, I formulate recommendations and estimate the criticality level.
- AkervaPenetration testerCONSULTING AND AUDITSMarch 2019 - April 2021 (2 years and 1 month)Paris, FranceTechnical skills:- Conducting security audits and penetration tests in the banking and financial, industrial sectors, etc.- Penetration testing of web applications and web services (company website, front-office and back-office, etc.)- Penetration testing of mobile applications (Android and iOS)- Internal penetration testing (simulating an attacker's actions on the network and/or impersonating an employee with malicious intent)- Wi-Fi penetration testing- Security and configuration assessments (according to CIS benchmarks and Best Practices) on a wide variety of environments: Windows, Linux, etc.- Remediation planProject and mission management:- Kick-off meetings- Deliverables (reports, emails, PowerPoints, etc.) written in French and English- Quality Assurance (QA)- Technical and executive (VIP) presentations
- Orange CyberdefensePenetration testerCONSULTING AND AUDITSMarch 2017 - February 2019 (1 year and 11 months)Paris, France- Conducting security audits and penetration tests on-site and externally for various business sectors including banks and financial companies, industrial companies, healthcare organizations, etc.- Producing technical and executive reports, in French and English, on vulnerability findings as well as proposing remedies to the client.- Penetration tests and technical skills include:• Web application and web service penetration tests• Mobile application penetration tests (Android and iOS)• WiFi penetration tests• Thick client penetration tests• Infrastructure penetration tests• Social engineering• Security and configuration assessments on a wide variety of environments (Linux, Windows; Workstation and server, firewalls)
Recommendations
Be the first to recommend Mehdi
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master of Information SecurityPierre and Marie Curie University2015Le master est concentré sur la sécurité informatique couvrant de multiples domaines techniques, notamment les tests de pénétration, le reverse engineering, l'analyse de logs, les évaluations des risques, le forensique, le droit et l'éthique de l'Internet, la certification ISO, etc. Ayant prouvé mes capacités dans le domaine des tests d'intrusion, j'ai pu obtenir le titre de Certified Ethical Hacker (CEH) en 2015. Deux ans d'apprentissage en tant qu'ingénieur en sécurité informatique chez Orange S.A., une entreprise de télécommunications de premier plan en France, m'ont donné l'opportunité pour commencer ma carrière de pentester par la suite.
Certifications
- Hack the box: Pro LABS - APT LABSHack the box2023
- Hack the box: PRO LABS - OFFSHOREHack the box2021