Hello Friend
Camil Arslan Bouteba
- Contact@Camil-Bouteba.com
- +33 6 13 94 01 82
- 17 Rue Béssiere, 75017 Paris, France
whoami
From my fascination with video games to mastering lines of code, my passion for technology has led me to a career where I now protect digital secrets. I am also proficient in :
Dev Apps & Web security
Gourvernance & Risk Management
Compliance and regulations
Vulnerability audit & Pentest
M3s_S3rv1c3s.BAT
Experience, Expertise, Excellence: Your Cybersecurity Partner
Penetration test
• Penetration testing on external, internal and wireless networks.
• Security testing of web and mobile applications.
• Network security architecture reviews.
• Code review.
• Vulnerability remediation.
• Writing documentation (POC, presentations, etc.) for different contacts: technical or professional.
• Training in Pentest and Phishing Campaign.
Governance, Risk and Compliance
• Implementation of an information security management system (iso-27001).
• Development and implementation of cybersecurity policies.
• Identification of potential threats and assessment of cybersecurity risks (Ebios RM).
• Implementation of monitoring mechanisms and management of security incidents (iso-27005).
• Compliance assessments to ensure security policies are followed.
Cybersecurity Consultation
• MOA assistance in the selection/choice of project solutions
• Assurance that the company is in compliance with cybersecurity and data protection regulations (GDPR, ISO-27001).
• Definition of security requirements, such as access management, backups and log monitoring.
• Management of business continuity within an organization. (PCA and PRA)
• Training in GRC and Information Security Awareness.
Cy83r_T001s.sh
Used tools
Non-exhaustive list of a variety of tools to assess the security of IT systems and to help organizations manage their governance processes, assess risks and ensure compliance with regulations.
My_Proj3ct.exe
Technical Skills
ORGANIZATIONAL CYBERSECURITY
CYBERSECURITY STANDARD
PENETRATION TESTING
CYBER LAW
DEV & WEB SECURITY
CRYPTANALYSIS
Academic background
Certification & Training GDPR (Data Protection Officer)
PECB
Aout 2024Skills Acquired:
- Thorough knowledge of GDPR, including its principles, obligations, and impact on organizations ;
- Mastery of the roles and responsibilities of a Data Protection Officer (DPO) ;
- Identification and management of risks related to data protection impact assessments (DPIA) ;
- Awareness and training of teams on GDPR and best practices for managing personal data ;
- Drafting compliance reports and providing recommendations to improve personal data management practices.
Certification & Training ISO-27005 & EBIOS Risk Manager
PECB
Avril 2024Skills Acquired:
- Mastery of the requirements, principles, and processes of the ISO 27005 standard for information security risk management ;
- Identification, evaluation, and management of information security risks using the EBIOS RM methodology ;
- Risk mapping, criticality assessment, and continuous monitoring of risk evolution ;
- Development of risk treatment plans and definition of corrective measures to improve information security ;
- Development of risk management policies and procedures aligned with ISO standards.
Certification & Training in Cloud Associate & Junior Penetration Tester
INE
April 2023Skills Acquired:
- Understanding of cloud services & cloud providers such as AWS, Microsoft Azure, Google Cloud Platform (GCP);
- Cloud security, including IAM, monitoring, PKI management, regulatory compliance;
- Capable of searching for vulnerabilities in systems, networks, and applications to identify security weaknesses;
- Exploiting discovered vulnerabilities to enable unauthorized access to a system or application;
- Capable of documenting discoveries and audit activities clearly and precisely in audit reports;
- Understanding of laws and regulations regarding ethical intrusion testing and compliance with required perimeters;
Certification & Training ISO-27001 Foundation, Lead Implementer & Auditor
PECB
April 2023Skills Acquired:
- Thorough knowledge of he ISO 27001 standard, including its requirements, principles, and processes ;
- Identification, evaluation, and management of information security risks within an organization ;
- Design and implementation of security policies and procedures in compliance with ISO 27001 standards ;
- Development of risk treatment plans and definition of corrective measures to improve information security systems ;
- Drafting compliance reports, including presenting solutions to address identified gaps.
Master's in Reliability and Computer Security
Aix-Marseille University
2021-2023Acquired Skills:
- Cryptography (Symmetric & asymmetric encryption, Hybrid, AES, RSA, DSA, Java Cryptography Extension);
- Internet & network security;
- Access control policies and models;
- Enterprise information systems;
- Functional security and quality;
- Software security for embedded systems.
Bachelor's Degree in Computer Science
Aix-Marseille University
2018-2021Acquired Skills:
- Algorithms (Complexity, Sorting, Graphs, Networks)
- Programming (C, Java, Shell, MERN STACK, Web)
- Formal languages ● Computer architectures (Mips, X86)
- Computer architectures (Mips, X86, Circuits)
- Operating systems (Linux, Windows, Memory and File Management)
- Network administration (OSI Model, Cisco, Socket Programming)
- Graph theory.
Professional experience
Cybersecurity Engineer and Consultant
Global Partner
January 2024 - September 2024Missions:
- Assessment of the current state of information security through an initial audit to identify gaps in relation to ISO 27001 requirements.
- Development of business and support processes in line with ISO-9001 to define the scope of the ISMS.
- Implementation of the Information Security Management System (ISMS) framework within Global Partner.
- Risk assessment and treatment following the ISO-27005 standard.
- Technical audit to identify vulnerabilities in the company's information systems.
- Training and awareness programs for staff on information security policies and procedures.
Governance, Risk Management & Compliance Consultant & Intrusion Tester
Freelance
2021 - PresentMissions:
- Evaluation of specific needs in governance, risk management, and compliance.
- Regulatory compliance for clients, such as GDPR, PCI-DSS-ISO-27001.
- Compliance evaluation with compliance audits to verify that policies and procedures are followed.
- Intrusion testing to identify vulnerabilities and security weaknesses in the company's information systems.
- Providing advice on strengthening system and application security.
- Training employees and stakeholders on information security policies, procedures, and compliance.
Expert Member in Ebios Risk Manager
Ebios Risk Manager Club
April 2023 - PresentMissions:
- Collaboration on projects and initiatives related to risk management based on the ISO-27005 framework.
- Contributing to ANSSI initiatives by participating in working groups for continuous improvement of the method.
- Risk and security incident scenario modeling.
- Risk management consulting to clients for effective information security risk management.
- Training security teams and stakeholders on using the Ebios Risk Manager method.
Support for Chief Information Security Officer (CISO)
Webhelp Group & Concentrix
April 2023 - September 2023Missions:
- Collaboration in the development of security policies, standards, and procedures to ensure security compliance.
- Assisting in the implementation and management of internal or external security vulnerability audits.
- Implementation of the EBIOS RM method.
- Coordination with security teams to implement security controls and respond to incidents.
- Contributing to regular evaluation of the organization's security posture and continuous improvement of security practices.
Cybersecurity Consultant
Internship - Aix-Marseille University
April 2022 - June 2022Missions:
- Designing and developing a tool for assessing the security maturity of an information system.
- Application of the tool to security standards and frameworks (ISO 27001, NIST, CIS).
Full Stack Web Development (Laravel & Symphony)
Internship - Bureau de Certification Internationale France (BCIFrance)
April 2021 - June 2021Missions:
- Design, creation, and deployment of a responsive showcase website (Front End, Back End). 'www.bcifrance.fr '
- Development of a tool for managing and generating certification contracts in PDF from client data.
- Natural referencing • SEO Social networks
C3rt1f1cat10ns_&_D1p10ma$.exe
Online appointment
Take an appointment with me for free in just 1 click!
Do you have a project, a specific need, or a question? Don't hesitate to contact me by selecting a time slot to discuss it over the phone or via video.
- We will talk for 30 minutes about your project.
- Personalized interview