Robin C.

I help SMEs, scale-ups, and large enterprises reduce their attack surface and make security a lever for reliability. My approach: map your assets, measure risk, prioritize what matters, execute quickly, document clearly. Result: informed decisions, targeted projects, measurable impact.

Skills & scope:

• Vulnerability and exposure audit (CVE/EOL, scanners, config review), threat modeling, mapping & scoring (CVSS).

• Application Security / DevSecOps: code & dependency reviews, SAST/DAST, secrets management, secure CI/CD, SDLC.

• Cloud & Infra Security: Linux/Windows hardening, network & segmentation, AWS/Azure/GCP, containers & Kubernetes.

• IAM & Zero-Trust: identity/access management, MFA, RBAC/ABAC, bastions, keys & secrets, logs and traceability.

• Detection & Response: logs, light SIEM/SOAR, playbooks, DR/PCI plans, "table-top" exercises.

• Compliance & Governance: ISO 27001, NIS2, GDPR, policies & procedures, awareness training (short formats).

Engagement Method:

1. Flash Diagnosis (1 to 2 weeks): assessment, major risks, quick wins.

2. Prioritized Roadmap (90 days): projects, costs, KPIs, RACI.

3. Guided Execution: implementation, skills transfer, compliance checks.

Deliverables: concise reports, evidence (screenshots/exports), ready-to-execute JIRA/Linear backlog, risk matrix, dashboards, and operational checklists.

Tools & Stack (context-dependent): OWASP, Burp Suite/ZAP, Trivy/Snyk, GitLab/GitHub CI, Terraform/Ansible, Docker/K8s, Wazuh/ELK, Grafana, Keycloak, Vault.

Sectors: SaaS, e-commerce, telecom, industry/energy, healthcare. Formats: fixed price or time & materials, remote/hybrid.

My commitment: speak clearly, deliver quickly, document, aim for the best security/effort ratio. Contact me if you want concrete results in a few weeks, not more slides.