Freelancer profile translated to English.

Description

Security architect, I have been working in the field of information systems security for over 8 years. I like to understand new IT trends to provide the best security expertise on these topics.

I hold several certifications, CISSP and ISO 27001 and 27005

I can assist you with the writing of several security governance documents (e.g., policies) as well as technical documents (e.g., hardening guide, container security strategy, ...)

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Rueil-Malmaison (up to 30km)

SODEXO
Security Architect
RESTAURANTS AND FOOD SERVICE
September 2021 - Today (4 years and 9 months)
Guyancourt, France
• Assisting project teams in securing applications deployed on Azure cloud
• Auditing technical architectures to assess security compliance
• Handling business security incidents
• Managing bug bounty programs
• Participating in the evolution of various architecture and security documents (architecture document, operating document, security maturity assessment)
• Improving activity tracking dashboards
Microsoft Azure Azure DevOps edr Awareness mfa Project Management Bug Bounty
Société Générale
Security Consultant - SecDevOps
BANKING AND INSURANCE
November 2019 - September 2021 (1 year and 10 months)
Fontenay-sous-Bois, France
• Supporting software factories (Service load balancing, DNS/IPAM, Kubernetes, Openshift) for the certification of their functionality for the company's private cloud
• Auditing that a product meets the criteria of the security framework defined to assess the maturity level of the functionality
• Participating in the evolution of the security framework
• Benchmarking security tools on containerization platforms
• Writing risk analyses for each functionality
• Writing certification reports
• Validating certification reports from other team members for functionalities within their scope
• Improving dashboards for existing security tools for containerization platforms
• Tracking vulnerability remediation following risk analysis and penetration tests of various functionalities
private cloud devops Agile Method
Enedis
Security Consultant
ENERGY AND UTILITIES
July 2019 - October 2019 (4 months)
Nanterre, France
• Writing hardening guides for Openstack (Keystone, Nova, Horizon, Swift, Glance, Neutron, Cinder, Heat), RabbitMQ, WSO2 API manager
• Risk analysis of infrastructure as code
• Implementing Chef Inspec profiles
• Organizational audit review
application hardening Risk Analysis