Thomas Borot

Thomas Borot

Full-stack Developer

Followers of Thomas Borot584 followers
location of Thomas BorotGreater Paris Metropolitan Region

Connect with Thomas Borot to Send Message

Connect

Connect with Thomas Borot to Send Message

Connect
  • Timeline

  • About me

    Security expert @Synacktiv

  • Education

    • CentraleSupélec

      2020 - 2024
      Master of Engineering - MEng Cybersecurity

      CentraleSupélec is one of the most prestigious french engineering school which a highly selective admission process. The school is part of Université Paris-Saclay, which ranks among the top 15 in the Shangai Academic Ranking of World Universities.Various courses among which :• Convergence, Integration and Probability & Partial Differential Equations - High level mathematical course with an in depth part on meshing and numerical solving of complex problems.• High… Show more CentraleSupélec is one of the most prestigious french engineering school which a highly selective admission process. The school is part of Université Paris-Saclay, which ranks among the top 15 in the Shangai Academic Ranking of World Universities.Various courses among which :• Convergence, Integration and Probability & Partial Differential Equations - High level mathematical course with an in depth part on meshing and numerical solving of complex problems.• High Performance Computing & Big Data - In-depth courses on distributed computing and scalable applications.• Object Oriented Software Engineering - A 3 month course focused on objets oriented programmation, software quality and AGILE project management.• Network and Security - Basics of computer network and web security, with a virtual private network deployment.• Critical Systems with preponderant Software - Model checking for software design.• Viral Propagation - Modeling of virus propagation and incident response. Show less

    • Lycée du Parc

      2018 - 2020
      Mathematics and Computer Science

      Mathematics, Physics and Computer Science courses: intensive preparation for the highly selective entrance exam to the top French Engeneering schools.

  • Experience

    • CentraleSupélec

      Sept 2020 - Jan 2022
      Full-stack Developer

      • Creation of a website to search and recommend movies.• Development of scripts for filtering and analysis of partially unstructured data.• Design of an aircraft collision avoidance system and formal model verification.• Development of a numberlink java application.⚙️ Vuejs, Express, Python, UPPAAL, Java

    • ViaRézo

      Sept 2020 - Jun 2022

      • Organization of 4 / year meetings with alumni who are top executives of leader companies.• Coordination of the meetings, definition of the agenda, debate conduction.• Guarantee of the proper conduct of the sessions. • Management of 4 projects of 3 to 4 students each.• Training of the new promotion of ViaRézo.💡 Project management, Team management, Leadership, Communication • Maintenance of a 80+ Juniper switches network and 300+ physical and virtual servers to provide internet to 2,000+ subscribers of the CentraleSupélec Paris Saclay campus.• Coordination, diagnosis and intervention on any outage problem.• Deployment of IPv6 on part of the infrastructure.• Update of network routing and filtering rules.⚙️ Sysadmin, Ansible, Terraform, Git, JunOS, BGP, Unifi, iptables, IPv6 • Configuration and monitoring of brute force protection for an infrastructure of 300+ physical and virtual servers.⚙️ Sysadmin, Ansible, Datadog

      • Chairman of the Board

        Sept 2021 - Jun 2022
      • IT Project Manager

        Sept 2021 - Jan 2022
      • Lead Network Administrator

        Jan 2021 - Jan 2022
      • DevOps Architect & System Administrator

        Sept 2020 - Jan 2021
    • Paris Digital Lab

      Feb 2022 - Jul 2022

      Fullstack development on IoT devices.• Communication between IoT devices• Management of processes and threads with a react/fastapi website⚙️ React, FastAPI, docker, IoT Cyber risk assessment of the IT infrastructure of CentraleSupélec.• Evaluation of the attack surface from the Internet and from several internal entry points.• Conduction of penetration tests on several CentraleSupélec's websites.• Conduction of penetration tests on an android application.⚙️ OSINT, Application security, Mobile app security, Kali linux tools Development of the https://meeting.education jitsi platform to reach 1.4M users for France Université Numérique.• Autoscaling of the JVB and jitsi-meet components.• Creation of cloud based load tests.• Documentation of each test to optimise Jitsi settings and Kubernetes architecture.⚙️ Kubernetes, Kustomize, Terraform, Packer, Jitsi, WebRTC

      • Full-stack Developer

        May 2022 - Jul 2022
      • Penetration Tester

        Apr 2022 - May 2022
      • DevOps Architect & Agile Prototyper

        Feb 2022 - Mar 2022
    • Upflowy

      Aug 2022 - Jan 2023
      Fullstack and DevOps intern

      Upflowy is a drag and drop tool designed to improve web experience, ease A/B test signup processes, sales lead funnels, customer on-boarding and much more.• Stabilization and optimization of the applications• Automation of delivery and quality assessment pipeline• Identification, troubleshooting and resolution of issues and errors• Development of new features and software engineering⚙️ React, Typescript, Firebase, Agile methodologies, Gitlab CI, GCP, Cypress, Jest

    • SecuLabs SA

      Feb 2023 - Jul 2023
      Cyber Security Consultant

      SecuLabs is a Swiss IT security company that supports its customers by guaranteeing a high level of expertise. It offers a proximity and personalized service for its customers in the fields of technical security, governance and compliance.

    • ORNISEC

      Sept 2023 - Sept 2024
      Cyber Security Consultant

      Cybersecurity consulting and auditing, incident response.• Internal pentest in black and grey box• Web applications pentest in black and grey box• Development of pentest and red-team tools• Design and build of homemade labs• Active Directory hardening• Architecture and configuration auditing• Research of IoC, identification of patient 0, reconstruction of the compromise chain⚙️ ANSSI guides and technical notes, OWASP, offensive tools, Active Directory

    • Synacktiv

      Oct 2024 - now
      Security Expert
  • Licenses & Certifications