Nathan Pembe Email & Phone Number

Région De Bruxelles-Capitale, Belgique

My responsibilities: - Integrate threat modeling methodologies and Shift Left security strategies to address risks early in the Secure SDLC.- Build tailored threat scenarios and actionable remediation plans to prioritize and mitigate risks effectively.- Conduct security assessments throughout the development lifecycle, including secure code reviews, SAST (Static Application Security Testing), and DAST (Dynamic Application Security Testing).- Automate security checks in CI/CD pipelines, leveraging tools for container scanning and infrastructure-as-code validation.- Perform and validate application security controls in alignment with European security frameworks such as NIS2, NIST CSF, ISO 27001, OWASP ASVS, and OWASP SAMM, promoting compliance and best practices.- Promote a culture of security through secure development practices, and talks at schools and conferences.

Ville De Paris, Île-De-France, France

My responsibilities:- Weekly technical review activities around cloud security invariants CSPM/CWPP with DevOps teams (GCP/AWS).- Conducting security assessments and providing preliminary recommendations for integrating security by design into new products or functionalities (DevSecOps).- Performing application pentesting, reviewing bug bounties, and conducting automated security testing using SAST and DAST within the SDLC.Managing security throughout the Software Development Life Cycle (SDLC) by incorporating Shift-Left Security strategies, enhancing threat modeling and early risk identification.- Developing new automated processes to streamline deliverables and improve efficiency for the DevOps team, with change management support for the teams.- Analyzing audit reports to establish and implement actionable security recommendations.- Establishing a PSSI (Information Systems Security Policy), including pentesting, managing calls for tender, and selecting models in collaboration with the committee.

Bruxelles, Région De Bruxelles-Capitale, Belgique

My responsibilities: Developing IDPS strategies and conducting technical research, and building skills in vulnerability assessment and management, applied to an IPS/IDS solution for the rail IoT.

Master In Cybersecurity & Cloud Computing

Master's Thesis: 'Strategies and Best Practices for Integrating IT Security into the Software Development Life Cycle and Embedding it.

Bachelor'S Degree In Computer Systems Security

Activities and Societies: Co-founder of the student IT committee "COM-IT", which helps, accompanies and supports IT students.

High School Diploma With Computer Technician Qualification

Final Year Project: "Implementation of a Captive Portal for a Restaurant Chain." awarded with distinction.