Omschrijving

Experienced security professional with a strong background in cloud security, penetration testing, identity and access management, and cryptography. Skilled in PKI integration, HSM administration, and secure API development, with a focus on ensuring data integrity and compliance. Proven expertise in conducting security audits, performing code reviews, and implementing system hardening measures to secure large-scale IT systems.

Branche-expertise

Talen

Frans
Tweetalig / moedertaal
Engels
Tweetalig / moedertaal
Spaans
Basiskennis

Voorkeuren voor werkplek

Kan op locatie werken

Belgique (tot 50km)

BNP Paribas Fortis BE
Security Operations Engineer
BANKEN & VERZEKERINGEN
augustus 2023 - Vandaag (2 jaren en 10 maanden)
Bruxelles, België
Contributed to the Key Certificate and Secret Management squad,
focusing on securing critical assets including certificates,
cryptographic keys, internal PKI, and credentials.
Secret Management: Implemented and managed secure storage and access control for certificates, keys, and credentials, ensuring data integrity
Security Audits: Conducted thorough cybersecurity audits of secret management platforms to ensure compliance with security standards.
Identity and Access Management: Configured and managed access control for users and applications, adhering to least privilege principles.
HSM Administration: Administered nCipher Hardware Security Modules (HSMs) for cryptographic key management.
Process Automation: Streamlined security operations like IAM configuration by automating various IT processes.
Developed and maintained comprehensive technical documentation to
support security processes.
Cryptography Public Key Infrastructure Hardware Security Modules Identity and Access Management Linux RedHat Cloud Engineer
Capco
Security Engineer Consultant
CONSULTANCY & AUDITING
februari 2023 - Vandaag (3 jaren en 3 maanden)
Diegem, België
Sopra Steria
Security Engineer Consultant
CONSULTANCY & AUDITING
september 2021 - februari 2023 (1 jaar en 6 maanden)
Bruxelles, België
Worked in an offensive security role, delivering comprehensive security solutions with a strong emphasis on cloud security.* Cloud Security: Designed, deployed, and hardened cloud infrastructure within Microsoft Azure, ensuring adherence to security best practices.
Penetration Testing: Conducted penetration testing of web applications, Active Directory, networks, and APIs to identify and mitigate vulnerabilities.
Vulnerability Assessments: Performed detailed vulnerability assessments using industry-standard tools, providing gap analysis and remediation recommendations.
Risk Management: Applied the ITSRM framework for risk management within EU institutions, ensuring compliance and mitigating potential threats.
Performed social engineering exercises, including phishing campaigns, to raise security awareness.
Conducted code reviews to identify and address security vulnerabilities.
Analyzed system logs to detect and respond to security incidents.
Implemented system hardening measures to secure large-scale IT systems.
PenTest Risk Management Microsoft Azure Vulnerability Assessments Code Review Phishing Cloud Engineer API Security