Laying the foundations
BTS SIO SISR · work-study at a small businessWorkstations, directory, backups and the firewall in production. Networking and high availability in the lab.
Engineering degree in cybersecurity · work-study at Recygo (a La Poste and Suez company)
Build an infrastructure, then defend it.
For three years of work-study, I ran IT for a small business of about twenty people, with my hands on almost the entire infrastructure. Network, Active Directory, backups, then detection and security audits. This is a short English version: three flagship projects in full, and the complete portfolio in French.
- Today
- Cybersecurity and administration engineer (work-study) at Recygo, engineering degree at École 2600
- Path
- BTS SIO (2-year IT diploma) → professional bachelor's in network and systems security (UPEC) → engineering degree
- Field work
- 3 years on the same small-business infrastructure, in production
- Projects
- 17 documented, 10 of them in production
808
Active Directory objects audited, critical weaknesses fixed without downtime
AD audit →
8.25 Gb/s
measured between servers after migrating the core network, compared with 1 Gb/s before
10G network (French) →
< 30 s
for a connection to the decoy to show up as a critical alert in the SIEM
Wazuh SOC →
A
SSL Labs grade of the B2B portal I put into production in a DMZ
DMZ (French) →
Progression
Three stages, the same logic
First keep the infrastructure running. Then audit it, measure it and attack it to defend it better. Now, running a company's cybersecurity, from roadmap to governance.
Securing and measuring
Professional bachelor's ASS&R · same companyAudit before acting, measure before and after, attack in the lab what I defend in production.
- Active Directory audit2026
- Wazuh SOC2026
- Attacking Active Directoryhomelab
Down to the kernel
Engineering degree · École 2600 · RecygoAt school, programming the Linux kernel, from attack to detection. At Recygo, work-study cybersecurity and administration engineer: security roadmap, governance, identities and automation.
Selection
Flagship projects
Three projects translated into English. All 17 projects, from the BTS to the engineering degree, are documented in French.
Active Directory audit and hardening
First audit of a directory that had never been reviewed: SMBv1 removed from the domain controller, krbtgt rotated after 11 years, 169 stale objects deleted, no unplanned downtime.
100 → 74PingCastle “Anomalies” score
Layered SOC with Wazuh
A Wazuh SIEM server built on Hyper-V, then three detection layers: endpoints, network with Suricata, and a decoy that raises an alert in under 30 seconds.
< 30 sbetween a connection to the decoy and the level-13 alert
Attacking Active Directory (homelab)
A deliberately vulnerable Active Directory in my homelab, compromised from a standard account to a Golden Ticket, each step linked to its detection and its countermeasure.
8steps, from a standard user account to full control of the domain
Skills
What I practise, and at what level
The level shows where I used it: in production, in a lab, or only as a first discovery.
Systems & directory
- Active Directory, GPO, Kerberos
- Windows Server
- Linux Debian, Ubuntu Server
- Hyper-V
- PowerShell
- Proxmox, Docker Compose
Networking & firewalls
- Cisco IOS / IOS-XE, STP, trunks
- pfSense: NAT, rules, DMZ
- UniFi
- WireGuard / Firezone
- OSPF, HSRP, LACP, CARP
- FortiGate
Defence & detection
- Wazuh (SIEM, FIM, SCA)
- Suricata, OpenCanary
- PingCastle, AD hardening
- Certificates, TLS hardening
- ClamAV, Lynis
- MITRE ATT&CK, CIS Benchmarks
Offensive
- Nmap
- BloodHound, Impacket
- Kerberoasting, DCSync, Golden Ticket
- Hashcat, CrackMapExec
- Metasploit
Monitoring & backup
- Zabbix, SNMP
- Grafana
- Netdata
- Veeam Backup & Replication
- Software RAID (mdadm)
Cloud & automation
- Microsoft 365, Exchange Online
- n8n + local AI (Ollama)
- AWS: IAM, S3, EC2
- Prowler
- Ansible, infrastructure as code
used in production
practised in a lab or a project
currently learning
Certifications
Certifications
Certifications held and in preparation. Degrees and courses are on the dedicated page.
ObtainedJuly 2026
CCNA
Cisco
Cisco's reference networking certification (Associate level): it validates building, running and troubleshooting an enterprise network, from cabling to security and automation.
In progressDecember 2026
eJPT v2 (Junior Penetration Tester)
INE Security (eLearnSecurity)
Hands-on entry-level penetration testing certification: a 48-hour exam on a lab network, from reconnaissance to pivoting between subnets.
Exam scheduled for 14 December 2026
In progress
HTB CDSA (Certified Defensive Security Analyst)
Hack The Box
Hands-on blue-team certification: investigating incidents in a simulated SOC with Splunk and Elastic, then delivering a professional-grade incident report.
Contact
A question about a project?
I am happy to hear from recruiters, security teams and anyone interested in these topics.