Cybersecurity (GRC · SOC) · Cloud. Learning by building, securing and testing real applications.
🇫🇷 En reconversion vers la cybersécurité (gouvernance, risques et conformité, supervision de la sécurité) et le cloud. Fleet Front Office chez un grand industriel, je contrôle au quotidien des données sensibles et la conformité de contrats. Je transforme mon apprentissage en projets concrets et vérifiables : applications web, chiffrement, CI/CD, tests navigateurs, confidentialité et résilience.
🇬🇧 Career changer moving into cybersecurity (GRC and SOC) and cloud, with a background in data control and compliance. I learn through hands-on, evidence-driven projects: secure engineering, test automation, reproducible delivery and clear documentation.
LinkedIn · Case studies / Études de cas · Race Control — technical documentation
A mobile-first PWA for real-world driving decisions. Combines weather, estimated road conditions, route context and vehicle/tyre data. Designed to work across desktop and mobile, including offline behavior.
- Engineering: JavaScript, Web APIs, GPS, Progressive Web App, Web Crypto, Cloudflare, GitHub Actions and Playwright (Chromium / WebKit).
- Reliability: guarded data changes, regression tests, privacy checks and version-verified releases.
- Current work: encrypted backup/sync integration. Code and simulated tests exist; real Google Drive activation and physical iPhone validation must not be assumed.
Application · Source / this repository · Technical architecture · CI runs
A security-oriented PWA exploring reliable data backup and restoration. Models encrypted packages, immutable revisions, interrupted uploads and conflict-safe recovery.
- Engineering: TypeScript, Web Crypto (AES-GCM), IndexedDB, Google Drive integration code, automated unit and browser tests.
- Security focus: no plaintext secrets in Git, encryption before transport, explicit errors and recoverable revisions.
- Current status: demonstration / staged integration. Real Google synchronization and end-to-end recovery on a physical iPhone are not yet proven.
Demo interface · Source · Security documentation · CI runs
An independent learning PWA for Cloud, Cybersecurity and DevSecOps. Connects guided lessons, practical labs, review sessions and progress tracking.
- Engineering: JavaScript, structured content, PWA/offline behavior, accessible UI and automated checks.
- Learning design: separated practice, self-assessment and recorded evidence; progress is not a professional certification.
- Current status: an evolving learning tool with documented curriculum and test coverage.
Application · Source · Project documentation
| Principle | How I put it into practice |
|---|---|
| Test before release | Automated checks, Chromium/WebKit test scenarios, reproducible builds and release verification |
| Privacy by design | Synthetic fixtures, encrypted local data, scoped permissions and no credentials in public repositories |
| Preserve user data | Offline-first behavior, immutable backup revisions, explicit conflicts and restoration planning |
| Document what is proven | Distinguish code written, tests passing, PR merged, production published and real-device validation |
| Learn transparently | AI-assisted development with human requirements, review, testing and documented limits |
Hands-on: JavaScript · TypeScript · Git & GitHub · GitHub Actions · Playwright · PWA / Service Workers · Web Crypto · browser storage · Cloudflare.
Currently learning: networking · Linux · Python for security automation · ISO 27001 and risk analysis · SIEM, SQL and KQL · AWS & IAM · ISC2 Certified in Cybersecurity (exam targeted early 2027).
AI-assisted engineering is part of my workflow. The repositories document how features are specified, tested and reviewed; they are not presented as proof that every line was written unaided.
- Three project case studies: problem → engineering decisions → tests → limitations.
- Race Control integration work: encrypted synchronization design, interruptions and no-loss verification.
- Control Vault integration work: opaque transfer, immutability and explicit activation requirements.
- Race Control architecture and safety model: implementation notes and privacy safeguards.
🇫🇷 Objectif : un premier poste de consultant GRC junior ou d'analyste SOC dans la région lilloise, après un parcours Jedha en cybersécurité et cloud prévu en 2027. Mon atout : une double compétence entre le terrain métier (contrôle, conformité, données) et la technique.
🇬🇧 Target: a first role as a junior GRC consultant or SOC analyst in the Lille area (France), after a cybersecurity and cloud program planned for 2027. My edge: business-side experience in controls, compliance and data quality, combined with hands-on technical work.
Contact / Échanger : LinkedIn
These are independent learning projects. Demo screens, simulated tests and production integrations are deliberately distinguished; no private customer, vehicle or location data is published in this profile.