Quentin alamelou

As a pre-sales engineer in the Cloud Protection and Licensing (CPL) department, I am mostly involved on solutions around payment HSMs, Data Protection, with a focus on Key Management, Secrets Management and DevSecOps.
• Continuous training on listed topics on our wide range of solutions
• Proof of Concepts (scoping, setup, support)
• Tailored and end-to-end demoes
• Customers calls \[high level/scoping, design and technical calls, post-sales\] Security Good Practises DevSecOps and Secrets Cryptography and Payment Orchestrators & containers Legacy and Cloud Env. (AWS, GCP, Azure) Bash, some Python and Go Terraform, Kubernetes.

Part of the mobile security team for the mobile applications of Lloyds, Halifax, Bank of Scotland, MBNA. Involved in key decisions that have direct impact on the daily usage of our mobile apps and customers
• Code and SDK reviews (Test, Pentest, assessments, and evaluations)
• Roadmap definition, Security Designs and Protocols
• Security Testing automation
• Implementation and/or assessments of security controls such as key protection, obfuscation, runtime protection, …

• Provide in-depth security analysis to project teams Crypto SME, DevSecOps,
• Identify security issues, address and/or mitigate them according to business/technical constraints
• Lead to secure design and implementation
• Optionally Implement local PoCs to prove feasibility to teams 1 Threat Modelling, AuthN/Z Protocols.
Common Secure Protocols: data and secrets protection, authentication, authorization, … AWS, Openshift KafKa, GitHub

• Pentest on latest mobile devices Privileges escalation Bufer Overflows
• Security Automation
• Focus on Android kernel layer and framework
• with a dedication to Samsung pieces
• Reporting security issues (exploits), proposing solutions and assessing Reverse Eng. Android Security Bash, Python patches from development teams.

Lead Security Engineer - In charge of 2PAC (Protection, Pentest, Audit & Consulting) April 2017 - Nov. 2018
• Management of 5 persons
• External Audit follow-ups of our solutions
• Internal Penetrations Tests and Reporting
• Security Consulting and Pre-sales activities

• Security Consulting across BU and towards external customers
• Security Evangelist
• Mobile Security
• Research around cryptography, privacy, and security (see publications)

• Cryptography R&D
• Strong and Continuous Authentications,
• Mobile Authentication
• Industrial and Academic conferences