Xenos
SOC & Incident Response Lead
10y XP — Centralien — CEH, OSCP/OSWE, Stanford ACS
Ethical hacker — CSIRT — Bug bounty hunter — ANSSI reporter
Avail. for: IR/SOC Lead, CISO Jr (big/medium caps)
Career path
Blue, Purple & Yellow teamingSOC & Pentest Lead | Preligens | Paris | ≧ 1 an ½ | |
---|---|---|---|---|
… ↑ 2022 |
|
|||
Cybersecurity Pentester Engineer | Systancia | Mulhouse | ≦1 an | |
2022 ↑ 2021 |
|
|||
Cybersecurity Engineer SOC Lead | General Electric | Belfort | 1 an ½ | |
2021 ↑ 2020 |
|
|||
DevOps Security Champion | General Electric | Belfort | 5 ans ½ | |
2020 ↑ 2014 |
|
|||
Trainees & freelance | Lyon Nantes Liège | 1 an ½ | ||
2014 ↑ 2012 |
|
Trainings and certificates
2021 | Offensive Security | OSCP OSCE OSWE… classes & labs |
---|---|---|
2020 | Certified Ethical Hacker | Certified CEHv10 (ECC4520361897) |
2017 | Stanford Advanced Computer Security | Professional certificate (remote) |
2014+ | CTF, labs & online trainings | OVH Cloud CTF, FCSC (28e/1347), 404CTF (10e/2460), Hacking et sécurité, expertise (HAC2018) Portswigger's Burp Suite labs |
2014 | Computer engineering at École Centrale | Centrale Nantes |
2013 | TOEIC 900+ | |
— | BAC S, Prépa PTSI/PT* |
Skills
SOC Tools | Chronicle, Splunk, Crowdstrike Falcon, Cyberwatch, Cloudflare WAF+WARP, Google Workspace, Intune MDM… |
---|---|
Whitebox SAST | Checkmarx, Coverity, custom IntelliJ (IDE) token analyzer… |
Attack tools | "Kali", Hashcat, Wireshark, Metasploit, BurpSuite, SQLMap, OllyDbg… |
TTPs | SQLi, XSS, XSRF, LFI, RCE, Auth-bypass, Data-leak, LLM injections … |
Standards | OWASP Top 10, NIST800-53, SP800-171 CUI… |
Web game development | 40+ mini-games and 3 web MMOs |
Technical Watch |
Replays from Blackhat, Defcon, HITB, CodeBlue… Whitepapers for Spectre, Meltdown, Foreshadow, Heartbleed |
File Format Specifications | Open-Document, PDF, PNG, Targa, SVG… |
IT Tools | Google Workspace, Intune MDM |
DevOps Tools | Docker, OVH, IDEA, Google Cloud Platform |
Pentest | Web, network, IT systems/OS, (LLM) |
Zero-day report writing | ANSSI, Stanford, OSTicket |
Data Forensics & Recovering | NTFS, FAT32, ext4 |
Cracking & Reverse Engineering | ASMx86, PE/ELF |
(Open source) contributions | Mozilla, XDebug, PHPInspectionEA, IntelliJ, Mantis, MyBB |
BIOS & OS | Windows XP-7-10, Ubuntu/XUbuntu, Kali, UEFI/Secure boot |
Community Management | JeuWeb, Furry Stars |
Physical Pentest | Lock Picking, NFC Access cards |
Languages
French + English | C2, Fluent |
---|---|
Coding Languages | PHP SQL Bash/Powershell HTML/CSS/SVG/XSL JS Python Java C/C++/ASMx86 VBS… |
Network Protocols | HTTP/0.9-2, SMTP, FTP, DNS… |
Japanese, Spanish | ~A1 (like, very basic, because it has been such a while) |
Hobbies
Electronic & domotic | Using Raspberry Pis for home automation including speech recognition |
---|---|
3D Printing | Designing and printing spare parts for reparing stuff, to save planet and costs |
Astronomy | Tracking comets, planets and satellites |
Chess & game boards | Playing real physical games together |
Gardening | Planting trees and vegetables, caring for birds and insects |
Financial analysis | Checking on some company's P/L accounts, investing in stock markets |
Contacts
Looking for
Jobs title | CSIRT CyberSecurity Indicent Response/SOC Lead, Red/Purple team lead, CISO Junior |
---|---|
Locations | France (all), Belgium, Luxembourg, Germany, Switzerland |