Information Security Specialist :- Web Pentest- Corporate network Pentest- Forensic- Training- Crypto- Risk assessment

Red Team Leader:- Pentest team management - RecruitmentSecurity auditor (156 audits)- External penetration testing- Internal network security audit - IT risk analysis (EBIOS, ISO2700X, ...)- Forensic analysis- Awareness/training- Physical intrusion audit- Source code audit- General consulting- Secured architecture design- Phishing campaign design for staff awareness- Random Number Generator fairness and security testing for ARJELEconomic sectors audited: healthcare, banking/investment, hosting, agribusiness, energy supplier, communication, urban community, consulting, electronic, public sector, e-sales, industry, software publisher, lawyer, outsourcer, aeronautics, IoT, airline, insurance, higher education, training organization, automotive, satellite imagery, telecom, freelance, winemaking, recruiting, catering, cybersecurity, SSII, wholesale, aerospaceR&D developer: SVC (Secure Virtual Cloud) for French government:- sensors correlation- system guessing heuristics- architecture guessing heuristics

Testing for Airbus A400M, A380, SA/LR security and robustness for EVYAM (Infrastructure Test): including pen-test, forensic, credentials corruption, integrity checker bypass,...Security trainings provided to other teams: maintenance, infrastructure

R&D development of a forensic tool which can retrieve information in raw memory (dumped from different kind of devices): cryptographic keys, strings, byte code. Split of the raw memory based on file type's fingerprint (combination of entropy, khi 2, ...): using works of Gregory Conti (graphical split), Manson McDaniel and Eric Filiol