Mohamed Ghanay - Cyber Security Expert

Votre navigateur est obsolète !

Pour une expériencenet et une sécurité optimale, mettez à jour votre navigateur. Mettre à jour maintenant

CV réalisé sur DoYouBuzz

Expériences

Sogeti ESEC (European Security Expertise Center) offers cutting-edge expertise in Cybersecurity, brings together more than 2500 professionals in worldwide, including 350 in France.

Practice Manager for the west of France, I’m in charge of the 3 different aspects of this role:
- People management: managing a team of Cybersecurity professionals (consultants, experts, researchers, architects…), career management, recruitment and training plan;
- Customers relationship: improvement and progress plans follow-up, escalation, business development and technical sales support;
- Cybersecurity practice improvements: innovation and relationship with the others managers.

AMOSSYS is a company specialist in expertise in security and technology of information with forty expert within five branches : audit, advising, assessment, R&D and investigation.

I operate mainly in the branch of assessment and I m in charge of:
- Management of projects (within team of 2 or 3 experts);
- Assessment of cash register: cryptographic safety;
- Assessment (source code, configuration and architecture), intern and extern penetration tests.

Teacher in MASTER 2 at ESAIP (Ecole Supérieure Angevine in Informatics and Productic) in three branches which are: reverse engineering, system administration (linux) and cryptography.

NIRLYS is a company specialised in cyber security and risk management that I founded with two partners. During the three years experience in that start-up, I was in charge of:
- Projects management;
- Partner in pre-sales and definition of strategic plans;
- Assessment of action plans and technical assistance
- Conference related to organisational scheme (crisis management) and technical (from intrusion side and demonstration in actual);
- Audits (source code, configuration and architecture), internal and external penetration tests.

Root-me allows everyone to test and improve their computer security skills. Our community helps us maintaining a platform focused on learning hacking, publishing articles, news, tools, organizing challenges and threads about the recent events on the web.

Big-Daddy is a community space with a diverse membership, including artists, computer programmers, web designers and hardware hackers. It is inspired by the philosophies of the global hackerspaces movement which encourages people to socialize, share knowledge, and work together on their projects.
During those years, I had to manage a team of thirty people, particularly during contests (CTF). My daily work was to assess the human and technical performance of everybody in order to reach our scope that all of us dreamed: win an international computer security competition that we win in 2012.

Re-xe is a blog with friends in which I write different articles about reverse engineering and applicative security on windows and linux.

Compétences

Winner of the world class computer security contest AtastCTF in 2012
Administration and security of private and public networks
Implementation of secured virtual private networks
Internal and external penetration tests (research and exploitation of vulnerabilities on applications, websites, systems and networks)
Methodologies: OWASP and EBIOS
Tools: IDA, OllyDBG, WinDBG, cuckoo sandbox, malwasm, metasm, ltrace, strace, gdb, valgrind, volatility, volatilitux, sleuthkit, burp, Metasploit, OpenVAS, Nessus, Nexpose, Nmap, w3af...
Code review (C, C++, C#, JAVA, PHP, RUBY, ASP.NET, JAVASCRIPT...)
Reverse engineering on ELF and PE applications
Computer forensics
Lecturer - Instructor

C/C++
PYTHON
ASM x86/x64
JAVA
SHELL (BASH, TCSH, KSH, ZSH)
PHP / SQL / HTML / JAVASCRIPT / CSS

GNU/Linux/Unix (Debian/Ubuntu/Fedora/Arch)
BSD (OpenBSD, FreeBSD)
Windows (NT to 10, Server)

MySQL
SQL Server
SQLite
PostgreSQL

FTP (ProFTPd, vsFTPd)
DHCP
DNS (BIND)
OpenVPN
Web (Apache, Nginx, Lighttpd)
Sobby - Etherpad
GIT / SVN / MERCURIAL
Cacti / Munin / Collectd
Postfix / Sendmail
Virtualisation: Xen, VirtualBox, VMware, Qemu