CISO

• Jun 2020 - Present

Cybersecurity / cloud architect, ethical hacker

• Mar 2019 - Jul 2020

Within the Personal Finance entity of BNP Paribas, my mission is to contribute to securing the information system and APIs by: • Internal and external penetration tests and audits; • Internal training (best practices, hardening, etc.); • Follow-up and response to incidents; • The integration of security in new and existing projects. Within the Personal Finance entity of BNP Paribas, my mission is to contribute to securing the information system and APIs by: • Internal and external penetration tests and audits; • Internal training (best practices, hardening, etc.); • Follow-up and response to incidents; • The integration of security in new and existing projects.

Chief Technical Officer

• Jan 2018 - Jul 2020

Discodery created the first all-in-one digital solution that helps all kinds of businesses in their digital transformation. We offer to them an automated tool allowing to deploy, without any technical knowledge, a personalised mobile native application (iOS and Android), a custom website and a complete management software (SaaS). Since the beginning of the project, I had many responsibilities: • Supervise the development following Agile methodology of the front, middle and back stacks (PHP - Symfony) and the mobile applications (Android - Kotlin and iOS - Swift). I had a major implication in web development, resulting in more than 1.5 millions lines of code by myself and lead the team project management (4 developers). • Deploy and maintain a fully scalable cloud infrastructure (AWS), to host and run the Discodery project. The infrastructure is composed of several Linux servers (Elastic Beanstalk / EC2), serverless components (Lambda) and MySQL databases (RDS), configured in load-balanced clusters, several real-time databases (Redis) and a file storage repository (S3). • Follow, on a daily basis, of administrative topics, business development, sales, and marketing. Show less

Senior consultant, cybersecurity expert, security audits and penetration testings

• Apr 2012 - Jan 2018

With more than 200 missions, I conducted security audits and penetration tests on many kinds of environments for medium and large companies (industries, energy, bank, government, medias, communication, etc.), in France and abroad: • Penetration tests on local and remote systems and applications; • Physical and organisational security of datacenters, hosting rooms and facilities; • Configuration review and hardening of servers, databases, appliances, workstations and portable devices; • Forensics investigations following attacks or for dispelling any doubt; • Code reviews and integration of security into development projects; • Reverse engineering of softwares and hardwares; • Information security management (ISO 27001 and 27002). I was also able to develop a deep expertise on Microsoft and Microsoft Active Directory environnements security, contributing in several security conferences as a speaker, and developing the internal audit methodology and tools of Wavestone. Finally, I was in charge of the Information security management and was part of the staffing team of the internal security audit entity. Show less

Systems, Networks and ToIP Engineer

• Aug 2011 - Mar 2012

Implementation of network infrastructures, systems, security and IP telephony majority use of open source software Implementation of network infrastructures, systems, security and IP telephony majority use of open source software

Web developer

• Jul 2008 - Oct 2011

Development of dynamic websites and e-commerce in object-oriented PHP, use of a custom created CMS and use of the most common open-source tools (Joomla, Prestashop, ...), project management through the definition of needs customer, the estimation of charges and the drafting of specifications Development of dynamic websites and e-commerce in object-oriented PHP, use of a custom created CMS and use of the most common open-source tools (Joomla, Prestashop, ...), project management through the definition of needs customer, the estimation of charges and the drafting of specifications

System, network and ToIP architect

• Apr 2010 - Sep 2010

Study, architecture and implementation of a new network, server and IP telephony infrastructure using Cisco technologies, Windows Server 2008 R2, Linux Debian & Asterisk ToIP server Study, architecture and implementation of a new network, server and IP telephony infrastructure using Cisco technologies, Windows Server 2008 R2, Linux Debian & Asterisk ToIP server

Systems and Network Technician

• Jul 2009 - Nov 2009

Network Study, Deployment and Administration with Microsoft Server Technologies, Microsoft Exchange and ZyXEL and HP Network Hardware Network Study, Deployment and Administration with Microsoft Server Technologies, Microsoft Exchange and ZyXEL and HP Network Hardware