Renaud DURAND

I teach Secure Development principals. Checkout out the syllabus and our next schedules : https://www.securesphere.fr/formation/formation-securite-developpeurs-programmation-web/

Delivering cybersecurity solutions for businesses of all sizes, safeguarding their digital assets. Provided a full spectrum of services, including security audits, control implementation, indicators and ongoing security guidance. Ensured strong security posture, mitigating risks and protecting sensitive data.

• Helped cross-functional teams to design and build secure, vulnerability-free products, prioritizing user health data privacy. • Built a secure development lifecycle (S-SDLC) for Doctolib products, integrated security features, and conducted threat modeling for new features and projects. • Identified, mitigated, and fixed vulnerabilities, promoting a security-by-design culture across new initiatives. • Trained developers in secure coding practices and collaborated on sensitive features through pair programming. • Fostered strong relationships with Legal, Risk & Compliance, Engineering, and Product teams. Key Achievements: • Security Team Growth: Helped in the expansion of the security team from 2 to nearly 20 members. • Bootstrapped ISO 27001 Certification: establishing a risk-based culture, selecting qualified partners, and recruiting talent. • Established Efficient Vulnerability Management: Developed and implemented a smooth and efficient vulnerability management process.

One year backpacking South America

Involved in the PCI-DSS compliancy process of the payment card system of one of the major french and european bank. I worked mostly on : - Log collecting using syslog-ng - Alert Management using OSSEC (Open Source HIDS) - Developped an automatic compliancy testsuite written in Perl - "Evaluation of alternatives" for antiviruses and integrity check solutions.

I worked at Inseal Contactless (OTI group) in Paris (France). I worked on smartcard related software : -> nightly builds -> Unit testing -> ITSO (Oyster) spec Implementation -> ISO-7816 smartcards. Acquired skills: -> Python/IronPython programming. I also studied the possible interactions between C# and IronPython. -> Authentication mechanisms -> Smart card protocols ISO-7816, ISO-14443