David LIONIS

Currently working within the insurance industry (private sector), the role's main responsibilities are the following : - Risk management and analysis - Creation, management and maintenance of Information Security policies - ISO27001:2022 / DORA / GDPR / NIST SP 800-61 - SME for all collaborators about various security topics - Manage security audits (pentests) and handling of discovered vulnerabilities - Establish various security solutions and controls (EDR/XDR, SOC, VOC, IAM, WAF, Vulnerability Scanning, SIEM, Dark Web/OSINT discovery, password manager and more...) - Define processes to work with various providers/vendors (Due dilligence, SLAs...) - Incident Response plans - Reports to C-Levels

Responsible for managing the entire security posture of the company : - Maintenance and reviews of all security policies (ISMS) - Risk management and prioritisation - Vulnerabilities management - Compliance with SOC 2 Type 1 & 2 + ISO27001 + GDPR - Selection and deployment of security solutions (XDR, MFA, WAF, password manager, email security, Cybersecurity training for all collaborators and Engineers, data classification and labelling and more...) - SME for all collaborators about various security topics - Executive reports and KPIs - Management and planning of security audits (pentests) - Hiring for the InfoSec team This opportunity allowed me to build a security posture from scratch, while working with the most demanding Customers from the financial industry.

Performed various security assessments and communications with industry leaders. Assessments included various domains following best practices and techniques outlined in the Web Applications Hackers Handbook. Beside assessments, reports were produced and delivered in a timely manner to customers.

NDA

Design, development and testing of features on various Forcepoint security products. Products involved anti-spam, email security and sandboxing solutions enabling customers to defend themselves against various attacks.

As a Software Engineer, I was one of the main Engineers on the SMC4 platform that merged social medias communications from Facebook, Twitter, LinkedIn, Google+ and more. The goal of this application was to enable customers to follow specific feeds and trends based on keywords matching their preferences. SMC4 recevied an IBM award in 2013.

Design, development and maintenance of a web portal designed to manage IT assets and stocks of SODETEC - a financial company specialised in accounting and actuarial activities.

The internship had for objective to update and maintain the main website's back-end and database (stock management, new arrivals, customers registries...).

As an Intern, I was responsible for the development of an application to manage customers, timetables and courses).

As an Intern, I was responsible for the development of a website presenting and describing all musical activities offered by the CDFA to its customers.