Anthony Essama

Information Systems Security support role

– Maintained and updated security procedures, operating instructions, and configuration controls, directly supporting ISO 27001-aligned practices.

– Managed the full incident lifecycle: initial analysis, qualification, escalation, corrective actions, and post-incident documentation.

– Identified critical assets and mapped data flows (DFD) to improve risk prioritisation and treatment coverage.

– Drafted incident response playbooks and reflex sheets to improve team reactivity and standardise handling procedures.

Vulnerability management, security testing & GRC support

– Conducted IS exposure analyses (network/API): criticality assessment, prioritisation, remediation recommendations and follow-up.

– Performed DAST testing with OWASP ZAP: alert analysis, false-positive triage, finding consolidation and documentation.

– Produced security reports (risks, impacts, remediation plans) and coordinated action plans with technical teams.

– Handled a client-facing evidence collection mission (GUCE): consolidation, structured reporting, and actionable recommendations.