David Marshall

David Marshall

Work Experience

Cybersecurity Engineer at Cyberlead

(June 2020 - Now) — Paris, France

Client 1 - Mapping the company's attack surface. Management of exposed vulnerabilities. Management of ransomware crises.

Client 2 - Pentest of their employee platform.

Internal - Development of a cybersecurity management tool. It helps us track our client's problems and resolve them quicker by automating repetitive tasks.

Shodan, OSINT, Carbon Black, Qualys, BurpSuite

Threat Intelligence Intern at Fox-IT

6 months (Mar - Sep 2019) — Delft, Netherlands

Developed a distributed internet scanner to improve the threat intelligence gathering capabilities of the department.

python, zmap, zgrab2, nmap, wireshark, cloud providers (AWS, Google, DigitalOcean, Azure, etc)

Software Engineer Intern at S4Financials

4 months (Sep 2017 - Jan 2018) — Laren, Netherlands

Automated the customer setup process to help with the increase in clients.
Developed a generic REST API data query and manipulation tool to simplify the interconnection with existing finance software.
Developed multiple tools to improve the team's workflow.
Reworked a cross-platform mobile app.

PHP, javascript, bash

Software Engineer Intern at Trovolone (3 times)

Click here for more details

2 months (Jul 2016 - Aug 2016) — Le Mans, France

Scale the deployment and management of the appliance I helped develop in the previous years.

Ruby, Javascript, Puppet, E2E Testing, Scrum Methodology, Taiga, FreeBSD


2 months (Jul 2015 - Aug 2015) — Paris, France

Developed the backend of an all-in-one IT appliance for small to medium businesses. MVP for 15 companies.

PHP, Javascript, bash, linux, ipbx, samba, postfix, openvpn, firewall


2 months (Jul 2014 - Aug 2014) — Paris, France

Developed a secured company messaging platform.
Developed an e-learning website about cyber-security.

PHP, bash, linux

Education

Master's degree specialized in Cyber-Security

2013 - 2019 — Paris, France

EPITA : Graduate School of Computer Science.
Computer Science Engineer : Cyber-security specialization.

Click here for more details

School Projects

C: bootloader, shell, kernel development, game AI, raytracer renderer, web server, optical character recognition (neural network), docker (runc) implementation

C++: tiger language compiler, small assembly VM

JavaScript: web application, mobile app

Company Security Exercises: firewall configuration (Checkpoint, Fortinet), two-factor authentication, proxy configuration, data encryption, Windows AD, IDS/IPS configuration, PKI

And more: incident response exercise with the French Army, organization of a forensics CTF for the International Forum on Cyber-Security (FIC) in Lilles, virus development, malware analysis, high availability infrastructure (keepalived, LVS, VRRP)

Semester abroad : South Africa

Jan - Jun 2015 — Stellenbosch University, South Africa

French-German Highschool (LFA)

2005 - 2013 — Buc, France

Skills

Cyber

threat intelligence (misp), forensics, offensive security techniques, malware analysis, threat detection, analytical models (e.g. ATT&CK), risk analysis, security management, PKI, incident response, access control

Tools

windows, linux, git, docker, burp, graylog, ELK, nmap, gdb, IDA, wireshark, volatility, ansible, frida, virtualbox, VMWare

Languages

C, C++, Java, PHP, Go, Python, Javascript, PostgreSQL, Powershell
French (native), English (native), German (proficient)

Hobbies

Making and playing music, video game development, hacking things for fun