Description

Experienced security professional with a strong background in cloud security, penetration testing, identity and access management, and cryptography. Skilled in PKI integration, HSM administration, and secure API development, with a focus on ensuring data integrity and compliance. Proven expertise in conducting security audits, performing code reviews, and implementing system hardening measures to secure large-scale IT systems.

Industry field of expertise

Languages

French
Native or bilingual
English
Native or bilingual
Spanish
Basic

Workplace preferences

Can work on-site

Belgique (up to 50km)

BNP Paribas Fortis BE
Security Operations Engineer
BANKING AND INSURANCE
August 2023 - Today (2 years and 10 months)
Bruxelles, Belgium
Contributed to the Key Certificate and Secret Management squad,
focusing on securing critical assets including certificates,
cryptographic keys, internal PKI, and credentials.
Secret Management: Implemented and managed secure storage and access control for certificates, keys, and credentials, ensuring data integrity
Security Audits: Conducted thorough cybersecurity audits of secret management platforms to ensure compliance with security standards.
Identity and Access Management: Configured and managed access control for users and applications, adhering to least privilege principles.
HSM Administration: Administered nCipher Hardware Security Modules (HSMs) for cryptographic key management.
Process Automation: Streamlined security operations like IAM configuration by automating various IT processes.
Developed and maintained comprehensive technical documentation to
support security processes.
Cryptography Public Key Infrastructure Hardware Security Modules Identity and Access Management Linux RedHat Cloud Engineer
Capco
Security Engineer Consultant
CONSULTING AND AUDITS
February 2023 - Today (3 years and 3 months)
Diegem, Belgium
Sopra Steria
Security Engineer Consultant
CONSULTING AND AUDITS
September 2021 - February 2023 (1 year and 6 months)
Bruxelles, Belgium
Worked in an offensive security role, delivering comprehensive security solutions with a strong emphasis on cloud security.* Cloud Security: Designed, deployed, and hardened cloud infrastructure within Microsoft Azure, ensuring adherence to security best practices.
Penetration Testing: Conducted penetration testing of web applications, Active Directory, networks, and APIs to identify and mitigate vulnerabilities.
Vulnerability Assessments: Performed detailed vulnerability assessments using industry-standard tools, providing gap analysis and remediation recommendations.
Risk Management: Applied the ITSRM framework for risk management within EU institutions, ensuring compliance and mitigating potential threats.
Performed social engineering exercises, including phishing campaigns, to raise security awareness.
Conducted code reviews to identify and address security vulnerabilities.
Analyzed system logs to detect and respond to security incidents.
Implemented system hardening measures to secure large-scale IT systems.
PenTest Risk Management Microsoft Azure Vulnerability Assessments Code Review Phishing Cloud Engineer API Security