Curriculum Vitae

Education

ESGI - Master's Degree in Information Security

Expert in System-Network Architectures and Computer Security - 2024-2026

ESGI - Bachelor in Information Security

Software and Network Project Manager - 2023-2024

INALCO - Dual Degree

Computer Science specializing in NLP and Turkish Language - 2020-2023

Recent highlight - Linux hardening (ANSSI-BP-028), August 2026

Full hardening pass on a production Debian 12 server: SSH key-only auth, LUKS-encrypted partition, self-built OpenSSL PKI with nginx mTLS, systemd sandboxing (cgroups, ProtectSystem, NoNewPrivileges, SystemCallFilter) and a default-drop nftables firewall filtered by UID. Raised the systemd-analyze security score for the exposed web service from 9.6 (UNSAFE) to 2.6 (OK). The methodology was then generalized into a 6-section ANSSI-aligned read-only audit script (accounts/privileges, kernel sysctl, USB/kernel modules, AppArmor, auditd, mount options), deployed the same day on this site's own VPS.

View project details

Professional Experience

SELCEON CYBERDEFENSE

September 2025 - Now

  • SOC Analyst

Still-Link

January 2025 - April 2025

  • Cybersecurity Engineer
  • Rust Developer
  • Python Developer
  • Assembly Developer
  • Network Technician
  • Telecom Technician

System and Network Administrator - Paris

2023 - December 2024

  • User and Network Support Technician
  • Windows System and Network Administrator
  • Linux System and Network Administrator
  • SOC Analyst
  • Incident Analyst
  • Offensive Security Specialist
  • Security Intelligence Monitoring

1DWEB - Cybersecurity and Web Developer Intern

Paris, since 2023

Leisure Center Activity Leader

Paris, since 2020

Phone and Computer Repair, Sales

Since 2019

BELLE CREATION - Team Manager

2017-2018

Certifications & Technical Skills

Certifications

  • CCNA Certificate
  • Network Defense
  • Cisco Endpoint Security

CTF Platforms

  • TryHackMe
  • HackTheBox CTF
  • RootMe
  • Pwn.college
  • Participation in 404CTF 2023/4

Technical Skills

  • System-Network Administration (Linux & Windows)
  • Programming: Python3, C, Rust, x86 Assembly
  • Digital Forensics & Memory Analysis
  • Risk and vulnerability analysis
  • Penetration testing
  • Network routing and switching
  • Active Directory
  • PKI and Certificate Management
  • WiFi security
  • NLP: SpaCy, NLTK, Unitex, Tropes
  • Data analysis: Pandas, scikit-learn
  • Identity & Access Management: LDAP, Kerberos, SAML2, SSO
  • Bare-metal / OS development: Rust no_std, x86-64
  • Software-Defined Radio (SDR)

Technical Toolset by Expertise

Digital Forensics
Volatility Framework, winpmem, dd, TestDisk, PhotoRec, HexEdit, strings, SQLite, md5sum/sha256sum, shred
Binary Exploitation
pwntools, GDB, John the Ripper, Hashcat, Burp Suite, Responder, Metasploit
Active Directory Pentest
impacket (GetUserSPNs, getTGT, secretsdump), bloodyAD, Certipy, BloodHound, evil-winrm, kerbrute, ntlmrelayx, PetitPotam, mitm6
Linux Penetration Testing
nmap, gobuster, ffuf, curl, nc/netcat, SSH, enum4linux
Web Application Security
Nuclei, smbclient, smbmap, showmount, Burp Suite
SIEM & Network Analysis
Suricata, Wazuh, pfSense, Wireshark
System Administration
Docker, NGINX, Apache2, GLPI, AdGuard Home, Passbolt, FireflyIII
Development & Automation
Python3, Bash, PowerShell, Git, Visual Studio Code, OpenSSL
Systems Programming
Rust (no_std, bare-metal kernels), x86-64 Assembly (NASM), memory allocators, QEMU
Identity & Access Management
OpenLDAP, SSSD, Kerberos, LemonLDAP::NG, SAML2, TOTP

Business & Management Skills

  • Microsoft Office Suite (Word, Excel, PowerPoint, Outlook)
  • Advanced Excel: Data analysis, pivot tables, macros
  • PowerPoint: Executive presentations and security reporting
  • Outlook: Professional communication and calendar management
  • Project management and team coordination
  • Risk assessment documentation and reporting
  • Security policy development and communication

Selected Projects

Full write-ups with technical detail live on the Projects page. Highlights:

RustSimpleSandbox

Personal project - Rust toolkit for static analysis of suspicious files (email, PDF, Office), YARA-X scanning, MITRE ATT&CK mapping.

View project >
Linux Hardening (ANSSI-BP-028)

Production server hardening: systemd-analyze security score raised from 9.6 to 2.6, LUKS, self-built PKI, nftables.

View project >
Rust no_std Kernel

Bootable mini-OS in Rust: FAT32 driver, SLAB allocator, paging, multi-core scheduler, built and run under QEMU.

View project >
AES-128-CBC in x86-64 Assembly

Full AES-CBC implementation in pure NASM, no libc, direct Linux syscalls for file I/O.

View project >
SOC Investigations Mapped to MITRE

Five Wazuh/TheHive incident investigations with full kill-chain reconstruction and MITRE ATT&CK mapping.

View project >
IAM Platform (LDAP/Kerberos/SSO)

OpenLDAP, Kerberos and LemonLDAP::NG deployed as an SSO identity provider across multiple web services.

View project >

Languages

  • Turkish: Bilingual
  • English: Professional working proficiency
  • French: Native

Interests

  • Kung-Fu Wing-Chun (4 years, Black belt level)
  • Self-defense (6 years)
  • Sanda (kick-boxing & wrestling, 4-5 years)
  • Kung-Fu Wushu (11 years)