In 2018 I started my own consulting business. My mission is to help companies prepare for cyber risks or if possible prevent them, and to allow them to react appropriately should incidents occur.My main activities include:- Incident Response- Threat & Vulnerability management- Penetration testing/Ethical hacking- Information Security governance- Security audit

My mission at Agfa mainly consists of the following activities:- Project Manager for the NAC (Network Access Control) implementation project- Creating and implementing the Vulnerability Management Improvement Programme- SIEM (Security Information & Event Management) implementation and finetuning- Incident Response, creating and implementing playbooks for the most important threats- Cloud security (AWS) and risk management

At NN Insurance I worked in the Risk Security & IAM team, focusing on Infrastructure Security and Security Incident Management.My most important tasks were:- Setting up Vulnerability Management procedures and scanning infrastructure for vulnerabilities- Improving infrastructure security and transitioning from legacy infrastructure- Onboarding applications into SIEM tool to ensure adequate Security Monitoring- Onboarding applications into Content Delivery Networks for DDOS protection and setting up Web Application Firewalls (WAFs) to protect web applications- Overseeing migration to the Cloud from a security perspective

During my time at EY I worked in the Cyber Security department for Financial Services in EMEIA (Europe, Middle East, India, Africa).Main activities:- Writing policies and procedures based on ISO27001 in the context of ISMS implementation- Creating and implementing procedures for a CSIRT (Computer Security Incident Response Team)- Organising and coordinating penetration testing and red teaming activities- Creating trainings and simulations for management on how to handle security incidents- Coordination of the Incident Response hotline

At CTG I mainly performed penetration tests and web application vulnerability assessments at several clients, as well as some BCM projects and Risk Assessments.Main activities:- Penetration testing on web applications and infrastructure at clients from different sectors- Business Continuity Management (BCM) and Disaster Recovery Planning (DRP)- Security Masterclass: 3 weeks of training in risk management, information security governance, ISO27001, BCM, IAM, forensics, ethical hacking, security audits

Sogeti is a wholly owned subsidiary of Capgemini Group. It is an information technology consulting company specializing in local professional services.Technical activities:- Penetration and web application security testing- Manually testing for OWASP top 10 vulnerabilities after automated scans- Reporting identified vulnerabilities to developers along with remediation adviceProject Management activities:- Coordinating day to day testing activities for small teams (5 - 8 testers)- Managing the test planning throughout several release cycles- Reporting progress to management on a weekly basis