Curriculum vitae
Experience & education
Cybersecurity consultant specialized in IT, OT and IoT security, with experience in risk analysis, security audits, industrial systems and embedded security. I have worked across the energy, financial, public and IT/software sectors, combining technical expertise with cybersecurity governance and risk management.
Professional experience
Auditor & Cybersecurity Consultant - IT/OT/IoT
Cybersecurity consultant working across public/administrative organizations, financial institutions, energy companies and IT/software companies, covering risk management, technical audits, industrial cybersecurity and compliance.
- Lead EBIOS-RM risk analyses and facilitate workshops with business and technical stakeholders.
- Perform PASSI security audits covering architecture, configuration, source code, organizational and physical security.
- Conduct internal ISO/IEC 27001 audits, assessing controls, governance and ISMS effectiveness.
- Support clients on regulatory compliance, running NIS2 gap analyses and remediation roadmaps, and assessing AI Act obligations for AI-enabled systems.
- Define security requirements and conduct qualification and audits of industrial, embedded and connected equipment.
- Act as cybersecurity referent for OT/IoT equipment at Enedis, advising on PKI/HSM, PKCS#11, cryptographic mechanisms and asset mapping.
- Participate in the preparation and facilitation of cybersecurity crisis exercises, testing incident response, coordination and decision-making.
- Design and deliver cybersecurity training to client companies, covering technical, governance and awareness topics for both expert and non-expert audiences.
- Deliver cybersecurity engagements across administrative, financial, energy and IT/software environments.
- Integration of post-quantum cryptography (PQC) algorithms into environments with limited compute and storage resources.
- Led the firm's AI adoption initiative, identifying use cases and supporting secure integration into consulting workflows.
IT/OT Cybersecurity Engineer - Work-study
Worked within a multidisciplinary team of cybersecurity experts on the security of embedded systems, smart metering and critical infrastructure.
- Assessed security risks and threat models related to security modules embedded in industrial systems.
- Analyzed defense-in-depth architectures, hardware security (CPU, memory, buses) and potential vulnerabilities.
- Conducted research on cryptographic mechanisms, SSH protocols (RFC 4250-4254), PLC and ISO/IEC 7816 smart-card standards.
- Performed vulnerability research and penetration-testing activities on embedded environments.
- Modified the OpenSSH client in C for custom security testing and information gathering.
- Developed Python and Bash scripts to automate security testing and analysis.
Non-Technical Losses Project Manager - Work-study
Worked within Enedis' B2B division on initiatives aimed at reducing non-technical losses and electricity fraud, combining data analysis, project management and operational coordination.
- Performed data mining and consumption analysis to identify potential fraud and abnormal electricity usage.
- Automated monthly reporting and KPIs using VBA, improving performance monitoring.
- Managed a national project introducing a new feature within the electricity distribution network.
- Conducted security and compliance assessments of internal business tools.
- Supported the development of Enedis' B2B strategic plan and internal awareness initiatives.
- Completed a field immersion with operational technicians, gaining practical knowledge of electricity distribution, non-technical losses and the French energy market.
Education
Engineering Degree - Computer Science & Cybersecurity
GPA 4.23/5.0. General engineering curriculum spanning computer science, cybersecurity, electronics, data/AI and management.
Advanced Hardware Security - Master 2 coursework
Coursework in embedded-system attacks, including side channels, glitching and JTAG.
Preparatory Classes - PTSI/PT
Mathematics, physics and engineering sciences. Ranked first of the class, highest honors.
Baccalauréat Série C - Mathematics & Physics/Chemistry
Graduated with honors (Mention Bien). Ranked first of the class.
Certifications
- ISO 27001 Lead Auditor · 2026
- eJPT · 2025
Public cryptography contribution
EAP-PSK-256 - Cryptographic protocol contribution
Coauthor of an individual Internet-Draft targeting quantum-resistant authentication for constrained devices, using pre-shared keys, AES-256 and NIST SP 800-108 key derivation. Work in progress; not an RFC or an IETF-endorsed standard.
View the Internet-Draft on IETF Datatracker · Read about the contribution
Soft skills
Throughout my personal, professional and associative experiences, I have developed strong interpersonal and organizational skills, including:
Leadership & motivation
Ability to inspire, engage and motivate people around me.
Proactivity & initiative
Comfortable taking ownership and acting without waiting to be asked.
Solution-oriented mindset
I approach challenges with determination and the belief that obstacles can be overcome.
Problem-solving
Resourceful approach to challenges and ability to find practical solutions.
Adaptability
Quick to adjust to new environments, responsibilities and unexpected situations.
Time management & organization
Able to prioritize effectively and manage multiple responsibilities.
Association work
African Engineers Network - Business Development Lead & IT Consultant
Client needs qualification, technical and commercial proposals, project scoping, client relations and web delivery within the advisory initiative.
Elit Club - Digital Club Member
Webinar preparation and IT/cybersecurity outreach supporting access to digital skills in Africa.
Superprof - Private Tutor
Computer science and mathematics tutoring for high-school and university students.
Rézo Metz-Rennes Fédérés - Treasurer & IT Support
Contributed to campus network maintenance and IT services across Wi-Fi, Ethernet and fiber.