VALBON Loïc

Audit complet d'architecture et tests d'intrusion sur application mobile (Périmètre critique de 3 jours).

• Chef d’équipe, Analyste et Administrateur Symantec SEP ✓ Analyse d'incidents • Accompagnement sécurité lors des phases de conception et développement de l'infrastructures du SI ✓ BU-INFRA(Windows-Azure) • Réalisation d’études sécurisées (analyses de risques techniques) durant les phases projets ✓ BU-METIER,BU-DEV(Applicatif,Web),BU-INFRA(Windows-Azure),BU- Exploitation,BU-Réseaux,etc. • Chef d’équipe, Analyste et Administrateur Cortex XDR ✓ Analyse d'incidents,Création des règles antivirales et firewall,Administation à base d’API Python • Support sécurité technique ✓ BU-DEV,BU-INFRA,BU-Exploitation,BU-Réseaux,BU-BDD,BU- DATA,etc. • Usage des outils techniques mis à disposition dont ✓ R7 AppSec,Nessus,R7 InsightVM,Cortex XDR,Prisma,Zscaler,Infoblox,etc. • Chef de projet technique sécurité concernant la mise en conformité des sites publics de la Division France ✓ Centralisation en portefeuille,Application des durcissements (DNS,SPF,etc..),Suivi Cyrating,... • Support Diagnostique technique ✓ BU-INFRA,BU-Exploitation,BU-Réseaux,BU-DEV,etc.

Security audit and penetration testing

Security audit and penetration testing.

Web applications penetration testing Security audit Hardening Linux Production Systems

-TippingPoint is a company, which develops security solutions as Intrusion prevention systems (IPS) and Network Access control (NAC) to prevent cyber attacks. TippingPoint has created in 2005 the Zero Day Initiative program to supplement the researches of its premier team of expert internal researchers (DVLabs) by the work of over 1,000 external researchers including myself. Main Tasks: - Finding vulnerabilities in applications or network protocols using « fuzzing » - Studying the exploitability of a vulnerabilty using « reverse engineering » - Writing of detailed security reports in order to explain the vulnerabilities and their impacts Vulnerabilities found ; Published : http://zerodayinitiative.com/advisories/ZDI-09-031/

I created in November 2008, a consulting security business, in order to deliver different security services to local companies. Services Delivered : - Established Secured Network Infrastructure, Pen-testing - Security Audits (System, Network, Technology watch) - Training (Linux, Windows, TCP/IP)

Studies of vulnerabilities by fuzzing Reverse Engineering

Achievements: - Conceived and animated the Linux and Solaris 9 systems courses - Animated the C and C++ courses

CGSSM is a public health insurance agency. I realized during my internship an intranet application using the JAVA EJB Technologies. Achievements: - EJB Study - SICAP application achievement - Installation and application deployment

EUROPCAR is a global leader of car rental services. I realized during my internship in a subsidiary company of EUROPCAR, a migration of views from Microsoft Office Access to views and stored Procedures in SQL Server. Achievements: - Stored Procedures in Transact-SQL and views development on SQL SERVER 2000