Freelance Pentest : Les meilleurs freelances enregistrés

Résumé des missions de Youssef,
freelance PENTEST résidant dans la Seine-et-Marne (77)

Cybersecurity Researcher and Founder &ndash Owner of Cybersecurity tool patents (crypto)

1/2014 -
&#10146 Research and Development in Cybersecurity: Crypto, Patch Management, Mobile App, Advanced Intrusion Detection - Holder of 3 innovative patents (1 deposed and 2 ongoing).
&#10146 Development of an application for Pentesters and Management that give a real-time insight of what the pentesters are doing during their mission: Taipan Framework (ondemand demo available).
&#10146 ESGI professor (Cybersecurity High School in Paris)
&#10146 Development of an Ethical Hacking training program in collaboration with Russian researchers.
&#10146 Ethical Hacking Trainer
&#10146 Cybersecurity Tools Development: LISP, Python, C, OpenSource
&#10146 Solution Development: ELK, AlienVault OSSIM, pfSense, Suricata, CloudStack, OpenStack,

Senior Cybersecurity Analyst
La Banque Postale Asset Management (France &ndash Paris)
9/2017 - 1/2022
&#10146 System hardening project management
&#10146 CIS based System Hardening for servers and workstations (Linux/MS Windows)
&#10146 Cybersecurity advisor
&#10146 Office 365 / Azure Hardening and security designing
&#10146 Pentest against bank/financial applications
&#10146 Vulnerability assessment
&#10146 Risk analysis
&#10146 Reporting with Remediation
&#10146 Log management definition and architecture for an external SOC (SIEM Elastic)

Senior Cybersecurity Analyst
UAB (United Arab Bank &ndash Dubai)
2/2021 - 1/2022
&#10146 AppSec consultancy: methodologies and implementation
&#10146 Pentest against applications that communicates with the Central Bank
&#10146 Pentest: Bank Web Applications
&#10146 Pentest in regards of PCI-DSS certification
&#10146 Vulnerability assessment
&#10146 Reporting with Remediation
&#10146 Deployment of the TAIPAN PENTEST PLATFORM
&#10146 Cybersecurity Design

Pentester
LEASEUP (France)
10/2021 -
&#10146 Pentest against a webapp applications thanks to the TAIPAN PENTEST PLATFORM: Leasup is a European dematerialized property management solution for retailers such as GUCCI, LOUIS VUITTON, STARBUCKS, ...
&#10146 Pentest in regards of the OWASP requirements
&#10146 APIs exploitation
&#10146 Joomla and Fabrik exploitation
&#10146 Static code analysis (PHP/JS/SQL)
&#10146 Cybersecurity Design

Pentester
KAPALYA (USA)
9/2021 -
&#10146 Pentest against Kapalya application: Encryption Management Platform. The server-side application is composed of a Key Management server (Gemalto), an Active Directory server and a front-end.
The client-side application is composed of a binary and mobile applications (Android/IOS).
&#10146 Reverse engineering of the applications

Senior Cybersecurity Analyst
BNP PARIBAS: CIB
6/2020 - 12/2020
&#10146 CIS based System Hardening
&#10146 Study and implementation of CIS compliancy for more than 400 000 assets
&#10146 Vulnerability assessment (Nexpose, InsighVM / Rapid7)
&#10146 Vulnerability management (for the SOC operations &ndash integration with SIEM and Cyber Threat Intelligence)
&#10146 Reporting
&#10146 Design of defensive rules
&#10146 Coding of a temporary policy editor (API, Python, Shell) while Rapid7 corrects its own after bugs I have reported.

Conception, Design and Development of a new framework for CISOs, IT Cybersecurity managers, IT managers and pentesters
TAIPAN
3/2020 - 6/2020
TAIPAN is a SOC-ready solution.
Project Management
AppSec implementation
For IT managers and IT Cybersecurity managers:
&#10146 Understand the principles and issues of pentest
&#10146 Get live access to your pentesters' mission information through sophisticated dashboards
&#10146 Keep an eye on the operations and actions carried out by your pentesters
&#10146 Keep control of the tools used by your pentest service providers
&#10146 Be alerted live when critical Cybersecurity breaches occur
&#10146 Access your reports and perform the research you need
&#10146 Get deep insight into remediation and mitigation plans
&#10146 Be compliant with the Cybersecurity norms and standards that your business imposes on you
&#10146 Train your teams
&#10146 Embed pentest operations into SIEM (Elastic SIEM), Data visualization with Kibana and Grafana
For pentesters:
&#10146 Build and organize attacks
&#10146 Control the workflow of attack scenarios
&#10146 A unique and modern interface for: recognition, fingerprinting, vulnerability analysis, attack tools, loots, reports
&#10146 All hacking tools at your fingertips: keep the customer's confidence
&#10146 Communicate with your teams or those of your Customer
Technologies: Python, SQLAlechemy, JS, RabbitMQ, Mitre, Docker, GDPR, &hellip

DEVSECOPS: Management of the Cybersecurity and development teams
AUDIOVISUAL GROUP
11/2019 - 3/2020
Architect/Cybersecurity Specialist and Researcher
&#10146 Analysis of the current hack impacting entertainment channels
&#10146 Proposal of a solution that avoid the HDMI and particularly the HDCP hack
&#10146 Design of the global architecture (system and network devices)
&#10146 POC of the solution (hardware and software based including my Crypto patent)

Architect/Cybersecurity Specialist and Researcher
HAYDAR TECHNOLOGIES:
11/2019 - 3/2020
BIG-DATA and Machine Learning project: Architecture and Development of a data analysis tool. The goal was to meet the following needs:
&#10146 Collection and analysis of all public data
&#10146 Reputation calculation and analysis
&#10146 Decision support
&#10146 Calculation and trend analysis
&#10146 Improvement of surveys
The development was based on a field of the artificial intelligence: NLP (Natural Language Processing) including NLU (Natural Language Understanding).
The solution is cloud based: Harbor, Kubernetes, Rancher, Kong/Kuma, Keycloak (IAM). DEVOPS: Management of the development team

Architect and Cybersecurity Specialist
VOLKSWAGEN GROUP
9/2017 - 12/2019
&#10146 Pentests and SOC-stress
&#10146 Successfully exploit vulnerabilities that gave me access to the entire dealers database: a breach that could cost thousands millions of dollars to VW AG.
&#10146 Design of the SIEM architecture/rules (ELK-SPLUNK) for the French VW division SOC
&#10146 Collaborating with the VW-Cert (incident response)
&#10146 Helping in forensics events
&#10146 Proposal of a new method to run pentests
&#10146 Design of a new data distribution model: cloud based / Edge and Fog computing
&#10146 Development of a new data collect/distribution method faster than what exist today (Cloud, ZMQ and Artificial intelligence based): Python, Golang (concurrency and parallel development)
&#10146 Cloud architecture: Rancher, Harbor, Kubernetes, Terraform, AWS
&#10146 Cloud Cybersecurity architecture and implementation: Kong and Kuma, IDPS
&#10146 Kubernetes architecture and application development
&#10146 Crypto system development
&#10146 GDPR
&#10146 Management of a team (15 people) composed of: Phd in mathematics, Phd in Artificial Intelligence, Phd in Mechatronic, Phd in Cloud computing, Kubernetes Specialists,