FR — Version française

About

From my first computer at the age of 9, the world of Hacking and cybersecurity has captivated me. Today, I have more than 11 years of experience specifically in cybersecurity. My career falls into 3 blocks: software engineering, traditional cybersecurity (between governance and operations) and, most recently, AI security.

Balancing offensive and defensive security, I have helped strengthen the security of organisations in the finance and tech industries, as well as public institutions.

Countries I’ve worked in

  • Luxembourg (currently)

  • United Kingdom

  • France

Professional experience

  1. Jan 2026 – present10 months

    Cybersecurity expert (contract)

    European Parliament, Kirchberg, Luxembourg

    Security policies and secure development across the European Parliament.

    • Authored and maintained security policies, standards and baselines for key domains, applied across the entire European Parliament and aligned with ISF, NIST, ISO and EU directives.
    • Managed and enhanced the secure coding platform, improving developer awareness and driving adoption of secure development practices.
    • Managed vulnerabilities by prioritising them and proposing mitigation guidance tailored to each project’s source code.
    • Strengthened the CI/CD automation pipeline for DevSecOps across several internal Parliament projects.
    • Secure coding
    • OWASP Top 10
    • DevSecOps
    • Vulnerability management

  2. Apr 2024 – Jun 20251 year 3 months

    Head of Information Security (contract)

    Abylsen, Montpellier, France

    Head of Information Security for a financial services end client with 600+ employees.

    • Led the development and management of the Information Security Management System (ISMS), leading to a ~20% reduction of the attack surface.
    • Spearheaded policies aligned with ISO 27001, NIST, DORA and GDPR, strengthening regulatory compliance and resulting in fewer audit findings.
    • Orchestrated penetration tests, driving the mitigation of critical vulnerabilities and reducing exposure to high-risk threats.
    • Mitigated data leak risks with web filtering and secure file sharing, and strengthened authentication with enhanced password policies and multi-factor authentication (MFA).
    • Implemented a SIEM and initiated or corrected EDR policies, reducing malware-induced risks for 1,500+ assets.
    • Established an Information Security committee with C-level executives, delivered user awareness training and ran phishing campaigns.
    • ISMS
    • ISO 27001
    • DORA
    • SIEM
    • EDR

  3. Aug 2021 – Jun 20231 year 11 months

    Head of Information Security

    TradingHub Group, London, UK

    Led the global ISMS of a financial services company with 140+ employees.

    • Enabled new business opportunities by achieving SOC 2 compliance and ISO 27001 re-certification, while reducing security spending.
    • Strengthened access controls by deploying mobile application management (MAM), enhancing password policies and implementing MFA, reducing the risk of account compromise.
    • Implemented a SIEM and corrected EDR policies to reduce malware-induced risks.
    • Supported projects across all stages of the Software Development Lifecycle (SDLC), lowering future costs and risks early on.
    • SOC 2
    • ISO 27001
    • MFA
    • SIEM
    • SDLC

  4. Oct 2019 – Aug 20211 year 11 months

    Cybersecurity consultant (pentester)

    MDSec, Macclesfield, UK

    Security assessments (web, code review, infrastructure and cloud) for global customers, with high-quality final reports.

    • Discovered numerous vulnerabilities and provided remediation guidance to improve customers’ security posture.
    • Contributed to MDSec’s official training by creating security challenges.
    • Improved the internal vulnerability database, speeding up report writing and reducing delivery delays.
    • Pentest
    • Code review
    • Cloud

  5. Aug 2018 – Aug 20191 year 1 month

    Vulnerability researcher

    French Ministry of the Armed Forces, Rennes, France

    Vulnerability research on the Ministry’s internal projects to strengthen the security of its applications.

    • Researched, analysed and discovered multiple vulnerabilities.
    • Developed internal tools to automate attack scenarios.
    • Worked in a military environment requiring secrecy and under high pressure.
    • Vulnerability research
    • Defence

  6. Jan 2013 – Feb 20185 years 2 months

    Software engineer (various roles)

    Intel, McAfee, Forcepoint, Integritie, UK and France

    Software engineering roles, mainly in the UK, in Agile environments, using nine programming languages professionally.

    • Developed security solutions, researched debuggers and built full-stack web applications.
    • Discovered and reported a bug in the GDB debugger, part of the GNU project.
    • Completed four internships and volunteered on two projects in the same field before 2013.
    • Agile
    • Security solutions
    • GDB

Companies

  • European Parliament

    Public institution

    Luxembourg2026 – present

  • Abylsen

    Engineering consultancy

    France2024 – 2025

  • TradingHub

    Financial technology

    United Kingdom2021 – 2023

  • MDSec

    Offensive security

    United Kingdom2019 – 2021

  • French Ministry of the Armed Forces

    Defence

    France2018 – 2019

  • Forcepoint

    Cybersecurity

    United Kingdom2016 – 2018

  • Intel

    Semiconductors

    FranceUnited Kingdom2015 – 2016

  • Integritie

    Enterprise software publishing

    United Kingdom2013 – 2014

Certifications and training

Solutions used

All these solutions and languages have been actively used in professional environments.

Cybersecurity solutions

  • Burp Suite
  • Trend Micro Cloud One
  • SentinelOne
  • Avant de cliquer
  • Microsoft Defender
  • Nessus Professional
  • Cyberwatch
  • Secure Code Warrior
  • Dashlane
  • Sumo Logic
  • TrustBuilder
  • CybelAngel
  • Gallagher Security
  • Eagle Eye Networks

Compliance

  • ISO 2700*
  • NIST
  • SOC 2 Type 1 and 2
  • ISF
  • OWASP Top 10
  • DORA
  • GDPR

Programming and Scripting

  • C++
  • Python
  • Java
  • Bash
  • PowerShell
  • Visual Basic
  • C# / .NET
  • Perl
  • HTML
  • CSS
  • JavaScript
  • PHP

Education

  • Degree

    Master’s degree in Mathematics and Advanced Computing

    First Class Honours

    Le Havre University (France) and Portsmouth University (UK), 2014

  • Degree

    Bachelor’s degrees

    Le Havre University (France), 2012

  • Degree

    Baccalauréat

    France, 2007

Values

  • Curiosity

    Ever since my first computer, the urge to understand how systems work, and how they break.

  • Pragmatism

    Solutions that work in your real environment, deployed and tested, rather than theoretical recommendations.

  • Versatility

    Both an offensive and a defensive view, grounded in a software engineering background, to tackle a problem from every angle.

  • Discretion

    Strict confidentiality about your systems and data, a standard learned in a military environment.