
Edem A.
Senior Vulnerability Management Analyst
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
Cybersecurity specialist with 8+ years in vulnerability management and threat operations. Expert in cloud security posture management, SSDLC, and multi-platform vulnerability scanning (Qualys, Tenable, Rapid7). CEH and CISSP certified professional delivering comprehensive security assessments and compliance solutions.
Expérience de travail
VOC Manager
Prolival
sept. 2025 - Présent
1 an 2 mois
92250 La Garenne-Colombes, France
• Performed in-depth analysis, qualification, and prioritization of vulnerabilities across multiple client environments within an MSSP context. • Coordinated remediation and monthly patch management activities with client and internal technical teams (system, network, and application specialists) to ensure timely mitigation. • Enhanced the vulnerability management lifecycle by improving exception handling, prioritization models, and client communication processes. • Lead OS hardening and Compliance operations on HDS related environments for customers • Technical Stack: Cyberwatch, Uyuni, Ivanti, RedHat Entreprise Linux
Vulnerability and Compliance Analyst
Air Liquide
oct. 2023 - sept. 2025
2 ans
Île-de-France, France · Hybrid
• Led implementation of a Cloud Compliance & Security Posture Management (CSPM) service across AWS, Azure & GCP. • Created dynamic dashboards and compliance KPIs using Power BI, driving visibility for stakeholders. • Conducted regular vulnerability scanning and coordinated remediation with global teams. • Automated data extraction and reporting workflows to reduce manual effort and increase accuracy. • Technical Stack: Qualys, Prisma Cloud, Python, GitLab CI/CD, Power BI, Azure, GCP, AWS
IT Security Analyst
Enablon
juin 2022 - déc. 2023
1 an 7 mois
Paris, France
• Managed application security aligned with OWASP Top 10 and Secure SDLC standards. • Led vulnerability scanning, code reviews, and Software Composition Analysis (SCA) using Black Duck • Pentest results triage and validation via controlled vulnerability replay/PoC to eliminate false positives • Built automated reporting pipelines using Python APIs and Power BI, reducing reporting cycle by 70%. • Collaborated with Software development teams to prioritize and track remediation progress via ticketing tools. • Technical Stack: Rapid7, SonarQube, BlackDuck, Bitsight, Python, Power BI, Azure DevOps, Pentest
Vulnerability Analyst, VOC
Orange Cyberdefense (Groupe Orange)
mars 2019 - juil. 2022
3 ans 5 mois
Région de Paris, France
• Delivered tailored vulnerability assessments and reporting for enterprise clients across sectors. • Integrated APIs (Qualys, Tenable, Rapid7) to build custom dashboards and automated alerting. • Security scanners/tools benchmarking and PoC • Reduced reporting turnaround time by 80% by building tools in Python, PHP, and JavaScript. • Drove full lifecycle management of cybersecurity remediation projects. • Technical Stack: Qualys, Rapid7, Patrowl, Tenable, Splunk, Python, PHP, JavaScript
Cyber Security Consultant
MGT Conseils
nov. 2016 - août 2018
1 an 10 mois
Région de Paris, France
• Conducted IT risk assessments using EBIOS and designed risk mitigation strategies. • Led GDPR compliance initiatives including data mapping and lifecycle analysis • Proposed business continuity and data protection plans tailored to SME environments. • Technical Stack: EBIOS, GDPR, Odoo ERP, Python
Software Engineer
Happy Dev
mars 2016 - août 2016
6 mois
Mutinerie, Paris
• Developed and maintained web applications using Django, PHP, Ruby on Rails • Optimised the code to increase the efficiency of the webapps. • Introduced Git-based version control workflows across all projects.
Software Engineer - PHP/JS
Devidia
mars 2015 - août 2015
6 mois
Lomé, Togo
• Built and maintained web apps in PHP/JS • Improved scalability and maintainability
Formation
ASTON - École Informatique
Master of Cybersecurity (Digital Security Expert)
2016 - 2018
2 ans 1 mois
Wild Code School
Bachelor - Software engineer
2015 - 2016
1 an 1 mois
Licences et certifications
Certified Information Systems Security Professional - CISSP
Délivré le : juil. 2024
AWS Certified Cloud Practitioner
Délivré le : août 2023
InsightVM Certified Administrator
Délivré le : mai 2020
InsightAppSec Certified Specialist
Délivré le : mars 2020
Qualys VMDR, WAS, PCI Compliance certifications
Délivré le : févr. 2020
Certified Ethical Hacker - CEH
Délivré le : sept. 2018