Ilan Abitbol-Taieb

As a Lead Security Engineer at Resonance Security, my primary responsibilities include: - Performing penetration testing to identify and mitigate security vulnerabilities in clients' systems, networks, and applications. - Conducting comprehensive cloud security audits to ensure the protection of clients' data and applications hosted in the cloud. - Smart contract audits to enhance the security and reliability of blockchain-based applications and transactions. - Developing and deploying in-house infrastructure and building security tools to improve our services and overall security posture. - Resonance platform Owner and Developer.

I carried out an assignment that aimed to build a Cloud audit offer for the company. - Performed cybersecurity audits on AWS environments. - Building a complete Azure audit offer with the following batches: - Architecture review - Configuration review of IaaS/PaaS resources - Azure Active Directory configuration review - Microsoft & third party SaaS services configuration review - Attack methodology - Smart Contract auditing for EVM protocols.

I have been conducting penetration tests for three years for the largest French companies (CAC40) but also for startups and governmental agencies. - Carrying out a variety of basic penetration testing assessments including web application, API, wireless, and thick client. - Utilize platforms and tools such as Kali Linux, Metasploit Framework, Burp Suite Pro, Bloodhound, PingCastle and Cobalt Strike. - Increasing skills on more complex penetration tests such as Active Directory, Red Team, physical, social engineering, and more. - Performed many audits on the Azure stack where I realized architecture reviews, configuration reviews and pentest. - Development of a good understanding of common security standards and regulatory compliance requirements (ISO27001, NIST, etc.). - Involved in internal team tool and script development, using Bash and Python, and recently developed a tool to deploy a phishing platform on the fly in AWS. - Project manager on several missions where my role is to manage the client relationship, the steering and the work of the consultants. - Supervising an internship on the subject of attack paths in Azure. - Forensics and incident response for several customers who have suffered hacking of their corporate network.

I was an architect and software engineer for the "Source Solde" project aimed to create the new payroll system for the French army. https://fr.wikipedia.org/wiki/Source_Solde - Realization of operating Bash scripts and an automation tool for non-regression tests on Red Hat environment. - Batch processing with the framework Java Spring Batch between the external IS of the Armed Forces and Source Sold. - Improvement of the CI/CD deployment pipeline with Jenkins, Rundeck, Terraform, SVN and Groovy scripts. - Organization of internship/Apprenticeship support within the project.

As part of my summer school, I carried out a technical security audit of the Information System for Outdare. - Conducted penetration tests against the internal network to determine the current system/network vulnerabilities and apply appropriate patching. - Realization of awareness workshops for the company's employees on good security practices.

Technical Manager of the Junior Isep, junior company of the Institut supérieur d’électronique de Paris. - Specification and development of the new CRM of the structure with the Spring API-REST/React.js stack. - Technical validation of documents related to missions carried out by the JE (ISO9001). - Jury for the recruitment of technical managers. - Drafting of a white paper on the best practices to implement in terms of cybersecurity for our customers. - Deployment of the SonarQube/Jenkins couple for automatic analysis of the code quality of a project.