---

Eliot · Cybersecurity engineer — Red Team → GRC.

I break things to understand them, then rebuild the defense. From offensive security to governance, I turn technical findings into decisions the business can actually act on. I build and open-source small, sharp security tools along the way.

role         : Cybersecurity Engineer · Red Team → GRC
focus        : Risk Management · Pentest · OSINT
frameworks   : EBIOS RM · ISO 27001 · ISO 27005
lang         : Python
region       : Nantes, France (44)
status       : Open to work

// Active Directory & offensive

• Agent-BloodHound: read-only Claude agent to search a BloodHound CE Active Directory extract.
• mremoteng-hunter: discover and decrypt mRemoteNG stored credentials via a NetExec subnet sweep.
• Vulnerability-records: web app to track and manage vulnerability records — live demo.

// OSINT & recon

• Public-Postman-Scanner: passive OSINT detection of exposed public Postman workspaces and collections.

// GRC & automation

• Agent-risk-treatment-sheets: Claude Code agent turning raw security data into signature-ready risk treatment sheets.

// Tooling & automation

• clean-claude-watermark: Claude skill that heavily reformulates text to disrupt its statistical watermark signature while preserving meaning, facts and tone.

// Infrastructure

• Infrarr private: automated deployment of my private infrastructure. Infrastructure-as-Code, reproducible provisioning and configuration.

// Other

• CV: my interactive online resume.

// Certifications

• GWAPT — GIAC Web Application Penetration Tester.
• Zephyr — HTB Pro Lab · Active Directory pentesting.