You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Zakaria AddiZA

Zakaria Addi

AppSec Consultant/Trainer

€600/day
Paris, FR
8-15 years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Zakaria

Hello! With 10 years of experience in cybersecurity (Offensive and Defensive), I help companies secure their applications and infrastructures with a pragmatic approach: security should protect your business without slowing down your developers.

I mainly focus on 3 areas:
  • DevSecOps & Automation: Seamless integration of security tools (SAST, SCA, secrets management) directly into your software factories (Gitlab CI, Jenkins). Creation of custom rules (Semgrep, Python scripts) to reduce false positives.
  • Security Audit & Pentest: Multi-language source code audits (C/C++, Java, Python, PHP, JS) and penetration testing of your Web applications to detect and fix vulnerabilities before they go into production.
  • Training & Awareness: A natural educator, I train your development teams on best practices (OWASP, Secure by Design) and lead technical workshops.

Autonomous, transparent, and solution-oriented, I quickly adapt to your technical stack to provide you with concrete and actionable recommendations.
  • English

    Native or bilingual

Can work on-site
Paris (up to 50km)

Experience

  • Squad
    Application Security Consultant (AppSec)
    ENERGY AND UTILITIES
    September 2024 - May 2025 (8 months)
    Courbevoie, France
    ○ CI/CD Security: Deployment of Shift-Left strategy and technical administration of the Checkmarx solution.
    ○ Code Review: Vulnerability reviews and direct support to development teams in resolution.
  • Freelance (LDAPI)
    Cybersecurity Expert & Independent Trainer
    January 2021 - April 2024 (3 years and 3 months)
    ○ Audit Missions: Code Audits.
    ○ Training Design: Complete pedagogical engineering and delivery of Offensive Security (Web Hacking) courses.
  • Neverhack
    DevSecOps Consultant
    March 2023 - December 2023 (9 months)
    ○ Technological Migration: Technical structuring and migration of client software factories to GitLab.
    ○ Policy-as-Code: Review of standard semgrep rules provided by the GitLab solution.

Recommendations

Be the first to recommend Zakaria

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • System Architecture (C/Linux Advanced Training)
    Ecole 42
    2025
    Architecture Systéme (Perfectionnement C/Linux)
  • Master 2, Information Systems Security
    University of Rouen
    2013
    Master 2, Sécurité des Systémes d'Information

Skill set

Categories