Developer & IT Security Engineer
I've just finished my computer science master's degree, specializing in IT Security, and I am looking for job opportunities in London. I have solid knowledge and experience in both IT security and software development with an additional know-how in DevOps methods: automating quality testing, security checks and deployment.
I'm looking for a first job that would allow me to make the best of my skills as both a developer and an IT security engineer. I want to work with motivated and inspiring people on interesting projects. I am passionate about IT and enjoy being challenged on a day to day basis. I also believe it's essential in this field to continually seek progress, learn new things and keep an eye out for new technologies and vulnerabilities.
I'm a dual national French-English engineer, graduating from a joint master's degree at Télécom SudParis, Paris and Eurecom, Sophia-Antipolis. I'm currently undergoing my last semester at Amadeus in London as an Information Systems Security Intern.
I'm currently doing a joint master's degree at Eurecom.
International curriculum in English with students and professors from all
around the world.
One of the nation’s top computer engineering schools. It's link to Télécom Ecole de Management business school enables students to be familiar with management and financial issues.
Physics and Industrial Sciences section (PSI).
Classes to prepare students for the entrance exam to the top-ranking higher
education establishments.
Science stream: engineering sciences, computing specialisation, international section.
I'm currently working at Amadeus as an intern in the AIR-SAT team (Airline Security Architecture and Technology). The internship includes several projects that combine software development and security engineering. I'm working as a DevSecOps, comparing existing solutions for static and dynamic security scans and implementing them within a Jenkins CI/CD pipeline. I've also created a self-service reverse proxy where tool owners are able to create their own DNS subroute and update a HAproxy configuration. This solution will enable authentication and accountability over a secure network zone.
I created a 3D customizer software in Javascript capable of manipulating & transforming 3D files in the web browser. This tool could also export the output files into a 3D printable format for the user. I Learned several skills during this work experience like software project plannification and execution, I worked with new frameworks like React.js and Three.js
The internship was centered around using my skills and talents to help others. The internship after the first year in engineering school was the perfect moment for me to realise this project. I registered to a humanitarian project to help improve the drinking water situation in Sri Lanka through awareness sessions in schools and by distributing water filters in poor villages. I created a website to raise awareness of water pollution and to publish articles on the subject.
A humanitarian project in Tunisia organized from start to finish to help secondary schools find computers for educational purposes. We contacted companies for funding and donations of equipment and were able to collect 2500€ and 65 computers. We also created a website to promote our project.
Probably my favorite programming language at the moment. I'm very familiar with Javascript and Nodejs development both client and server side. I've also worked with several frameworks such as Reactjs and Vuejs.
My default programming language.
Intensive use of bash during my studies. I know both bash and the UNIX toolset (grep, sed, awk...) well.
At ease with HTML/CSS. I have written several websites in the past and followed several webdesign courses.
I've worked with Go for small projects.
I did a semester project on a Java game for Android.
Vscode
I use Vscode as my day to day IDE.
Jenkins
I use Jenkins CI/CD pipelines to automate quality assements and security checks on my projects.
Docker
I use docker to deploy my applications to a cloud environment.
Kubernertes
I enjoy working in a cloud environment and I am familiar with Kubernetes and OpenShift. I also use Helm to create Kubernertes packages.
Git
I use Git for everything I do. I'm familiar with scrum agile framework.
Artifactory
I've been using Jfrog Artifactory for the packaging and publishing steps inside my CI/CD pipeline.
Spark
I have been learning all about cloud computing and I have used Apache Spark with PySpark for small educational projects.
ElasticSearch
I regularly use Elastic Search to analyse and query datasets and system logs using the integrated API or Kibana.
Burp
I use Burp as a proxy to intercept and analyse HTTP packets for web security.
Photoshop
Use Photoshop regularly to modify pictures.
Very familiar with symetric crytography (Feistel cipher, DES, AES) and asymetric crytography (diffie-hellman, RSA, elliptic curves). I've also learnt about encryption mechanisms (CBC, CFB, CTR, XTS...), hash functions(MD-, SHA-, SHA3) and digital signatures.
OS security (UNIX and Windows security)
Common Shell Attacks &
Race Condition exploits
Windows Domains security.
Familiar with, stack based buffer overflows and format string attacks. I also know the basic countermeasures such as ASLR, NX, stack canaries...
HTTP/HTTPS protocols, CORS policy and HTTP headers, client/server side input validation, SQL injections & XSS attacks.
Network security:
DoS & DDoS attacks, DNS security
Wireless security:
Evil twin attacks, WEP & WPA attacks on personal and enterprise networks. Replay/Relay attacks on RF systems. RFID (in)security
Different kinds of malware (virus, trojan, worms...) and how to detect and delete them (static analysis, dynamic analysis).
Fluent.
Mother tongue.
Level B2.