Freelancer profile translated to English.

Description

Looking for a Pentester / Cybersecurity Expert?

Do you need an intrusion test or a security audit for your applications?

I am a Pentester with 6 years of experience, having worked in various sectors: SaaS, e-commerce, mobile applications, and all types of websites. Over 50 clients supported, individuals and businesses, in France and internationally.

As a Cybersecurity Expert, I can assist you with:

- Intrusion testing (pentest) for web, API, network, and infrastructure

- Security audits and code audits

- Red Team Assessments (phishing, social engineering, compromise)

- OSINT & Dark Web analysis (exposed credentials, data breaches)

- Security by design (shift-left, CI/CD, SAST/DAST)

- Compliance with GDPR, PCI-DSS, ISO 27001

- 24/7 Incident Response and emergency assistance

- Training and awareness for your teams

My working method: transparency above all. Every end of the day, a clear report of what has been done — no black boxes, no jargon. I explain what is vulnerable, why it is dangerous, and how to fix it.

Results: +100 missions, +800 vulnerabilities identified (including ~100 critical), emergency response within 1 hour.

Shall we discuss your project? Contact me, I respond very quickly.

—

Pentester, intrusion testing, web pentest, API pentest, application security, AppSec, security audit, code audit, red team, OSINT, vulnerability analysis, OWASP Top 10, DevSecOps, CI/CD, SAST, DAST, hardening, ISO 27001, GDPR, PCI-DSS, bug bounty, ethical hacking, cybersecurity, e-commerce security, SaaS security, cybersecurity freelance.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent
Spanish
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

WHITE-HAT.FR
Founder
TECH
July 2021 - Today (5 years)
Paris, France
White Hat is an offensive cybersecurity company: penetration tests and real attack simulations to help companies assess and strengthen their security. Over 50 clients supported in France and internationally.
I joined the company to lead offensive missions and develop the platform, within a team of pentesters, a compliance manager, and technical profiles.
My responsibilities:
- Security audits and penetration tests on web applications, APIs, and network infrastructures.
- Real attack simulations (Red Team Assessment): phishing, vishing, social engineering, infrastructure compromise.
- OSINT and Dark Web analysis: searching for exposed credentials and data breaches.
- Writing comprehensive audit reports with video conference restitution.
- 24/7 emergency assistance for individuals and businesses victims of hacking.
- Consulting on GDPR compliance and raising team awareness of cyber threats.
- Development and operation of the White-Hat.fr SaaS (Laravel 12, Docker, Stripe, multilingual FR/EN).
- Production of cybersecurity educational content (blog, technical write-ups).
Results:
- Over 100 penetration testing missions carried out.
- Over 800 vulnerabilities identified and documented, including about a hundred critical ones.
- 24/7 emergency assistance with response within 1 hour.
- Launch and operation of the White-Hat.fr SaaS (multilingual FR/EN).
Bash Shell Script Linux
Deuscom
Cybersecurity Expert
TECH
May 2021 - June 2021 (1 month)
Massy, France
Deuscom is a digital services company that assists businesses in protecting their exposed applications and systems. Based in Massy, it works with clients concerned about strengthening their security posture.
I joined the security team to conduct offensive audits and assess the organization's security maturity, within a team of two developers and one pentester.
My responsibilities:
- Audit of web applications and exposed services.
- Testing authentication and authorization mechanisms.
- Verification of resistance to denial-of-service attacks.
- Simulation of targeted attacks and realistic scenarios.
- Assessment of database security.
- Searching for security flaws in applications and protocols.
- Analysis of security policies and internal procedures.
- Assessment of security awareness and verification of compliance with standards.
Results:
- Over 20 applications and services audited.
- Over 150 vulnerabilities identified and corrected with the teams.
- Reduction of the exposed attack surface by over 40%.
Phishing Reverse Engineering PHP XSS
QUETZALYS SAS
Pen-tester
RETAIL (SMALL BUSINESS)
October 2018 - April 2021 (2 years and 6 months)
Boulogne-Billancourt, France
QUETZALYS SAS is an e-commerce company that sells its products via an internal SaaS and a PrestaShop online store. Based in Boulogne-Billancourt, the company handles online payments.
I joined the technical team for over 2 years to integrate security into the heart of the internal SaaS and the online store, within a team of developers and a technical manager.
My responsibilities:
- Regular security audits on the internal SaaS (native PHP): code review, SQL injections, XSS, CSRF, poor session and access rights management.
- Penetration tests on the PrestaShop store: third-party modules, APIs, exposed attack surface.
- Analysis of vulnerabilities related to online payments and customer data protection (PCI-DSS, GDPR).
- Implementation of the internal security policy: server hardening, access management, secure development.
- Support for developers: training in OWASP best practices, secure code reviews.
- Incident monitoring and response: log monitoring, intrusion detection, alert management.
- Writing vulnerability reports for the technical management and participating in architecture decisions (shift-left).
Results:
- Over 200 vulnerabilities identified and corrected on the SaaS and the store.
- PCI-DSS and GDPR compliance for payments and customer data.
- Reduction of security incidents by over 60%.
- Improvement of the development team's security skills through training and code reviews.
Prestashop PHP