Securance Cyber4Z

• Leading a team of four pentesters and security consultants; responsible for capacity planning, work allocation and service quality.
• Coaching colleagues in their technical and professional growth, encouraging ownership and independent decision-making.
• Improved the pentest process by analyzing the full workflow end-to-end and aligning sales, planning, pentesters and backoffice.
• Combines management with hands-on technical work so decisions on planning, quality and development stay grounded in daily practice.

Securance Cyber4Z

• Concurrently coordinating multiple pentests, overseeing scope, progress, quality and alignment with clients and team.
• Actively contributing technically to one of the assessments, enabling timely adjustments for risks and dependencies.
• Translating technical findings into business impact, clear priorities and actionable remediation advice.
• Providing technical guidance to pentesters on technical choices, quality questions and their further professional development.

Toyota

• Supported dev teams in applying Toyota's internal security controls, working closely with infrastructure, cloud and SecOps teams.
• Performed architecture reviews and security assessments, and guided threat-modelling sessions.
• Organized penetration tests, including scope and requirements formulation.
• Triaged high and critical vulnerabilities flagged by Checkmarx that blocked CI/CD pipelines, including technical impact analysis, exception review and escalation.
• Tools: Checkmarx, Confluence, Jira

Securance Cyber4Z

• Performed black- and grey-box penetration tests on web applications and Active Directory environments for clients in healthcare, government, transport, education and critical infrastructure.
• Delivered reports with an accessible management summary, in-depth technical findings, reproducible steps and practical advice.

Cuccibu

• Raised security awareness among clients through social-engineering campaigns, including phishing, vishing and mystery-guest visits.
• Performed vulnerability scans, including analysis, prioritization and reporting of findings and remediations.
• Developed new services, including a GoPhish server for phishing simulations.
• Supported penetration tests, wrote reports and presented findings to clients.

Capgemini

• Security Engineer @ Nationale Nederlanden: secured CI/CD pipelines in GitLab and developed Splunk use cases and correlation rules for threat detection.
• Inventoried IT infrastructure and SLAs as the basis for a disaster-recovery plan, including risk acceptance documentation for the financial application landscape.
• Cyber Risk Advisor @ Nationale Nederlanden: analyzed SaaS supplier audit reports (ISO 27001, SOC 2), tracked identified risks, and coordinated the rollout of MFA across all active SaaS platforms.
• Cloud Security Engineer @ Capgemini (intern): contributed to a new cloud security service from product design to market launch, implemented DDoS protection and a WAF on Azure and AWS, and hardened cloud resources with AWS Security Hub based on CIS benchmarks.
• Tools: GitLab, Splunk, Jira, Azure DevOps, Java, Azure, AWS Security Hub

Languages and Databases

Python

HTML5

CSS3

MySQL

PostgreSQL

Shell Scripting

Libraries

NumPy

Pandas

OpenCV

scikit-learn

matplotlib

Frameworks

Django

Flask

Bootstrap

Keras

TensorFlow

PyTorch

Other

Git

AWS

Heroku