Yonel TOUSSAY

- Report Writing for Penetration Testers - Information Gathering / Vulnerability Scanning - Web Application Attacks - SQL Injection Attacks - Phishing Basics - Client-side Attacks - Locating Public Exploits - Fixing Exploits - Antivirus Evasion - Password Attacks - Linux/Windows Privilege Escalation - Port Redirection and SSH Tunneling - Tunneling Through Deep Packet Inspection - The Metasploit Framework - Active Directory - Enumeration, Attacking Authentication and Lateral Movement - Enumerating and Attacking AWS Cloud Infrastructure

o Ensure Security Maintenance for development, testing, and production environments, with a techno-functional role - Implement SSO for web applications via Azure AD, overseeing the process through to production deployment - Deploy and maintain business web applications in secure conditions, including updating frameworks, libraries, Java components, web archives (WAR), and application servers (Tomcat, Payara) - Oversee the migration of Oracle APEX and ORDS (Oracle REST Data Services) - Manage server OS updates and support the migration of web applications - Integrate and monitor Desktop applications in SCCM

o Space project: Securing the Satellite Visualization System (Technical- Functional Role) : - Assess the current state of the system and provide recommendations to secure it in compliance with ANSSI guidelines o Propose solutions to prevent and mitigate risks : - Oversee the progress of cybersecurity initiatives - Perform network analysis - Create the network diagram and flow matrix - Monitor the closure of unused ports - Secure persistent network flows - Generate secure certificates using cryptographic elements recommended by ANSSI - Configure account import in the web application (SSO with Keycloak) - Develop Bash scripts - Definition of the list of sensitive files and monitoring their integrity (OSSEC) - Management of Docker/Docker Compose images - Management of virtual machines (VMs) - Delivery of the cybersecurity matrix and reporting on security progress - Implementation of Fortinet ZTNA (Zero Trust Network Access)

o Cyberboost Project: Accelerating the Identification and Remediation of IT System Vulnerabilities - Management of Security Tickets and Alerts with ServiceNow - Investigation of incidents related to CyberArk and AD password rotation - Assistance with EDR replacement/deployment - Weekly delivery of KPIs on security status - Identification and reduction of overly permissive network flows - SSH hardening: identification and closure of unauthorized open SSH ports - Adding/modifying GPOs using GPOAdmin - Active Directory management - Incident resolution: ► VPN with Citrix Netscaler ► CAIM (AD account provisioning tool), directly on SQL tables or via the GUI - Conducting extracts on existing flows with the goal of decommissioning servers: ► Decommissioning NAS X7 file transfer server ► Decommissioning ACE & web servers: migration of Squid & Apache flows ► Decommissioning NIS: migration of NIS accounts to LDAP - Monitoring the redirection of flows to the new architecture

- Hardening Linux and Windows servers - Securing the network and mobile systems - Configuring the Stormshield perimeter security tool - Realization of Pentests - Monitoring IAM/PAM with Wallix Bastion - Analyze of logs and forensic with Splunk

- Setting up OpenVPN - Administration and maintenance of Linux and Windows servers - Shell scripting to manage traffic (routing, iptables) - Active Directory migration from Windows server 2008 R2 to Windows server 2019 - Implementation of an RDS infrastructure - Supervision and monitoring (Nagios, Centreon) - Infrastructure virtualization (VMWare ESXi) - Realization of complex network diagrams

I had to do the website and the management software for the bakery Mimina Cakes

Projects (see "Achievements" section): - Java web application for managing alerts occurring in public transport - Java web application to manage company vehicles. Context: As part of an internship in a team of 4 people. Environment : Tomcat, Maven, Git, Java EE, Spring MVC, Eclipse, Spring tools, MySql Achievements : - Team coordination using the Scrum methodology - Determination of technical, communication and marketing concepts - Creation of the project structure via UML - Implementation of a database - Development of the site in Front and Back - Addition of functionalities Techno: - UML - Agile Scrum - Java SE - GIT - Java EE - Maven - Eclipse - JPA Hibernate - Javascript / Ecmascript - Spring - Angular

- Realization of scripts, - Good knowledge of Linux and Windows command lines - Management of a team of 3 people, - Responsible for the IT equipment for France, - Ensure the smooth running of the service and achieve the objectives set, - Monitoring IT projects and be a force of proposal, - Coordinate the various IT service providers, - Maintain the infrastructure: Wifi Controller (WLC) / Access Points Cisco 1141) - Ensure the creation / deletion of profiles in the AD and activation / deactivation of services (eg: Mailbox, Proxy, VPN etc), - Juniper account configuration Junos Pulse Secure/RSA SecurID - IT Assets Management, - Advanced management of the AD and all French objects, - Assigning NTFS rights/Sharing and connection of network drives - Setting up a CEGID server for tax purposes and management of its SQL Express databases, - Management of mobile and office telephony (activation of SFR lines/chips and deskphones), - Operational Maintenance of applications, devices, etc., - French and English support Resolutions of incidents and requests - Autonomy Environment (Windows 10 , SCCM, DFS, Windows 2008/2012 R2, Cisco IP phone 7945 / Windows phone / Samsung ACE 4, Samsung A3/A7 / Iphone)

- Management of incidents occurring on the network, servers and IT services, - Centrally monitors and controls network infrastructure, available bandwidth, hardware, servers and devices, - Trigger et coordinate the alerts between the different services as soon as practicable, - Analyze the logs from many solutions, - Write the reports and fill in the internal tools, - Helpdesk.

- Service requests and Incidents Resolution by 2nd Level Support on site or remotely (1000 users), - Manage local and centralized profiles in Active directory, - Maintenance of products, applications and systems under operational conditions, - IT Asset Management, - Create the TOIP profiles on the IP PBX Alcatel 4760 and manage the IP phones, - Manage the sensitive data (backup, outsourcing, restoration, destruction), - Manage the 802.1x project, participate for the others (deployment, migration from Windows XP to Seven, turn-over, TOIP) and communicate progress with the client, - Put up and maintain the best WIFI security existing nowadays (802.1x).