Sébastien Carré

❖ Internal and partner penetration testing; WAF and EDR bypass

❖ Phishing campaign (awareness); PCI-DSS renewal with GRC

❖ R&D and development of business tools; mentoring junior pentesters

❖ Penetration testing and configuration audits (CIS benchmark and ANSSI guide), infrastructure and code

○ Worked on side-channel attacks (attacks on cache memories exploiting variations in cryptographic computation times) and fault injection attacks (Rowhammer, Piret Attack) to recover sensitive information.

○ Development of analysis tools using machine learning algorithms.

○ Development of a dynamic analysis tool searching for code patterns inducing vulnerabilities.

○ Simulation of fault injection attacks: analyses on assembly.

○ Publications and presentation of scientific papers at various international conferences.