Description

Experienced security professional with a strong background in cloud security, penetration testing, identity and access management, and cryptography. Skilled in PKI integration, HSM administration, and secure API development, with a focus on ensuring data integrity and compliance. Proven expertise in conducting security audits, performing code reviews, and implementing system hardening measures to secure large-scale IT systems.

Domaines d’expertise

Langues

Français
Bilingue ou natif
Anglais
Bilingue ou natif
Espagnol
Notions

Préférences en matière de lieu de travail

Accepte de travailler sur site

Belgique (jusqu’à 50 km)

BNP Paribas Fortis BE
Security Operations Engineer
BANQUE & ASSURANCES
août 2023 - Aujourd'hui (2 ans et 10 mois)
Bruxelles, Belgique
Contributed to the Key Certificate and Secret Management squad,
focusing on securing critical assets including certificates,
cryptographic keys, internal PKI, and credentials.
Secret Management: Implemented and managed secure storage and access control for certificates, keys, and credentials, ensuring data integrity
Security Audits: Conducted thorough cybersecurity audits of secret management platforms to ensure compliance with security standards.
Identity and Access Management: Configured and managed access control for users and applications, adhering to least privilege principles.
HSM Administration: Administered nCipher Hardware Security Modules (HSMs) for cryptographic key management.
Process Automation: Streamlined security operations like IAM configuration by automating various IT processes.
Developed and maintained comprehensive technical documentation to
support security processes.
Cryptography Public Key Infrastructure Hardware Security Modules Identity and Access Management Linux RedHat Cloud Engineer
Capco
Security Engineer Consultant
CONSEIL & AUDIT
février 2023 - Aujourd'hui (3 ans et 3 mois)
Diegem, Belgique
Sopra Steria
Security Engineer Consultant
CONSEIL & AUDIT
septembre 2021 - février 2023 (1 an et 6 mois)
Bruxelles, Belgique
Worked in an offensive security role, delivering comprehensive security solutions with a strong emphasis on cloud security.* Cloud Security: Designed, deployed, and hardened cloud infrastructure within Microsoft Azure, ensuring adherence to security best practices.
Penetration Testing: Conducted penetration testing of web applications, Active Directory, networks, and APIs to identify and mitigate vulnerabilities.
Vulnerability Assessments: Performed detailed vulnerability assessments using industry-standard tools, providing gap analysis and remediation recommendations.
Risk Management: Applied the ITSRM framework for risk management within EU institutions, ensuring compliance and mitigating potential threats.
Performed social engineering exercises, including phishing campaigns, to raise security awareness.
Conducted code reviews to identify and address security vulnerabilities.
Analyzed system logs to detect and respond to security incidents.
Implemented system hardening measures to secure large-scale IT systems.
PenTest Risk Management Microsoft Azure Vulnerability Assessments Code Review Phishing Cloud Engineer API Security