Polle Vanhoof - Cybersecurity Engineer

Siemens: DEVSECOPS

Siemens Mobility is responsible for the security and safety of thousands of servers and workstations used to manage day-to-day operations of the Belgian railroad network.

Part of this work consisted of securing these servers by implementing a vulnerability management and patch automation system for Linux and Windows machines.

Task:

Secure and protect the servers and workstations for the National railway service.

Actions:

1. Migrate systems and applications to a modern operating system
2. Develop automated systems for deploying these applications and managing server configurations
3. Aggregate data from these servers into an inventory management system
4. Create regular patch cycles that match the patch and release cycles of the operating systems
5. Handle newly discovered security vulnerabilities (vulnerability management and incident response)
6. Execute architecture reviews, security code reviews and penetration tests on new and existing software and recommend mitigations or alternatives.

Euroclear: Security and Assurance

Euroclear SA/NV is an established financial service provider specialized in securities trading. They hold over €31 trillion worth of assets and are responsible for settling security transactions at over €837 trillion per annum. It is considered a critical market infrastructure and as such is obligated (by law) to properly secure and protect all of its assets. As a result, this is a high stakes environment with very important real life consequences regarding security incidents.

The majority of the work consisted of providing assurance by managing the execution of penetration tests on various applications and infrastructure components.

Task:

Manage, Execute and Review internal and external penetration tests.

Actions:

1. Organize and document a new approach to managing ongoing penetration tests
2. Unify the way in which Euroclear provides and receives information to/from our external vendors
3. Assist in setting up appropriate environments and accesses for planned penetration tests
4. Execute internal penetration tests
5. Evaluate (and investigate) discovered vulnerabilities
6. Translate vulnerability impact and consequences on software components to impact on business objectives

This page lists some of the recent clients I have worked for. Feel free to contact me for my full portfolio.

Languages

Certificates

OSCP Certified

Obtained the 'Offensive Security - Certified Professional' certificate.

This certificate shows the holder is well versed in penetration testing methodologies.

OSWE Certified

Obtained the 'Offensive Security - Web Exploitation' certificate.

This certificate is the result of an extremely challenging 48-hour exam and is an attestation to my talents in web application testing.

SC-200

Obtained the 'Microsoft Security Operations Analyst Associate' certificate.

Proven skills in investigation, responding, and hunting for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender.

MS-500

Obtained the 'Microsoft Security Administrator Associate' certificate.

Proven skills and experience with identity protection, information protection, threat protection, security management, and data governance.

Skills