About me

Cybersecurity Leader/Engineer/Expert, working for PwC Luxembourg.
Specialized in Offensive Security (Ethical Hacking) and Incident Response/Digital Forensics.
Sworn Judicial Expert in the field of Cybersecurity, Cybercrime and Digital investigations. Appointed by the Minister of Justice (Luxembourg)
Cybersecurity Trainer/Instructor (in Luxembourg and EMEA).

Certifications

• GIAC Penetration Tester (GPEN) - #9559
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) - #880
• GIAC Mobile Device Security Analyst (GMOB) - #982
• GIAC Certified Forensic Analyst (GCFA) - #17999
• GIAC Advisory Board Member
• SECO-Institute: SOC Analyst (S-SA)
• SECO-Institute: Dark Web Foundation (S-DWF)
• Hurricane Electric IPv6 Certified Sage
• MISP Certified Professional
• AWS Certified Cloud Practitioner
• Microsoft Certified: Azure Fundamentals (AZ-900)
• Microsoft Certified: Security, Compliance and Identity Fundamentals (SC-900)
• Cybersecurity and Infrastructure Security Agency - Cryptocurrency for Law Enforcement
• SkillFront ISO/IEC 27001 Information Security Associate™
• SkillFront ISO 9001 Quality Management Systems Associate™
• SkillFront ISO/IEC 20000 IT Service Management Associate™
• EBSSA Counter-Surveillance & Anti-Surveillance Operator
• Udemy ChatGPT Prompt Engineering Mastery
• ITIL® Foundation Certificate in IT Service Management (ITILF)
• PRINCE2® Foundation Certificate in Project Management

(some) Trainings

• SANS FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
• SANS SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking
• SANS SEC575: Mobile Device Security and Ethical Hacking
• SANS SEC560: Network Penetration Testing and Ethical Hacking
• SpecterOps AT:RTO - Adversary Tactics: Red Team Operations

Capture The Flag

• #1 Solo Player - PwC EMEA / SANS Institute CTF: Capture The Flag Victor (ex æquo), January 2021
• #1 Team - SpecterOps: Adversary Tactics: Red Team Operations Capture the Flag Victor, August 2019
• #3 Solo Player - SANS: NetWars Capture The Flag Victor, November 2017
• #1 Team - SEC575: Capture The Flag Victor, November 2017
• #1 Team - SEC560: Capture The Flag Victor, February 2015

Research & Development

• MISC Magazine n°140 - Threat-Led Penetration Testing : retour d’expérience sur les simulations d’attaques avancées et exigées par la réglementation DORA
• BSides Luxembourg 2025 (Talk) - Hacking EV Chargers: Fast Track to Market, Fast Track to Vulnerabilities
• Hack.lu 2024 (Talk) - Hacking EV Charging Points, for fun… and fixing the firmware
• CVE-2024-8070 - Cleartext Storage of Sensitive Information
• CVE-2024-5313 - Exposure of a non-disabled SSH interface to the wrong sphere
• Hack.lu 2015 (Talk) - Security of Virtual Desktop Infrastructures: from great concepts to bad surprises
• Hack.lu 2013 (Talk) - Exploiting a vulnerability to quicken SAP discovery phase

Education

• TÉLÉCOM Nancy (School of Engineering in Information Technology)
  French Diplôme d’Ingénieur
• Polytech Nancy (French generalist École d’Ingénieurs)
  Initial engineer education

Misc.

• UAS Registered Operator
• Tractors & agricultural machinery
• Music player/enthusiast (Guitar/Bass)
• Certified Electrician (B1V and BR clearances)
• Sport Shooter
• Member of The Voices of Nuclear ☢