Michaël Russo — Senior Security Engineer, Belgium

Cybersecurity professional with 5+ years in web application security, ethical hacking, and threat hunting. 10+ years of web development background. Specialised in penetration testing, vulnerability assessments, WAF/Akamai engineering, SOC operations, and security automation. Bug bounty contributor across major vendors.

Contact

Email: [email protected]

Phone: +32 494 23 68 63

Location: Belgium

GitHub: https://github.com/nh0s

LinkedIn: https://www.linkedin.com/in/michaelruss0/

Work Experience

Senior Security Engineer — Orange CyberDefense Belgium

May 2019 – Present

Akamai WAF onboarding, certificate management, security configuration, automation and optimisation
Monthly security analysis, reporting, and breach-oriented investigations
Scripting and development: Bash, PowerShell, Python, PHP
Infrastructure: Splunk, syslog-ng, MySQL, MSSQL, cloud security solutions
Forensic analysis including PCAP investigations

SOC Analyst — ESA (RHEA)

April 2023 – September 2023

SIEM monitoring, alert triage, incident detection and prioritisation
Incident handling, evidence collection and post-incident analysis
Threat hunting, IOC extraction and MISP updates
Automation with TheHive, Cortex, Palo Alto XSOAR — malware static/dynamic analysis

Skills

Offensive Security

Burp Suite, SQLmap, Nmap, Nessus, WPScan, Hydra, XSSer

WAF / Network

Akamai, Palo Alto, Fortinet, Juniper, Cisco ASA, Checkpoint, Cloudflare

SIEM / Monitoring / IDS

Splunk, OSSIM, Suricata, Wireshark, Nagios, QRadar

Scripting / Development

Python, Bash, PowerShell, PHP, MySQL, MSSQL, PostgreSQL, JavaScript, SQL

Incident Response & Orchestration

TheHive, Cortex, Palo Alto XSOAR, MISP

Operating Systems

Linux (Kali, Debian, Ubuntu), Windows Server, FreeBSD, OpenBSD

Projects

Akamai Security Automation

Automation workflows for Akamai onboarding, certificate handling, WAF configuration, and platform optimisation. Stack: Akamai, APIs, Python, PowerShell, Bash.

CVE Monitoring Platform

PHP-based monitoring platform for CVE tracking and security overwatch activities. Stack: PHP, MySQL, Monitoring, Security Operations.

Incident Response & SOC Tooling

SIEM alert triage, IOC extraction, malware analysis, and orchestration workflows. Stack: Splunk, OSSIM, TheHive, Cortex, XSOAR, MISP.

WordPress Security Cleanup & Code Review

Removed PHP, SQL, and Linux shell backdoors from compromised WordPress environments and hardened sites with custom remediation. Stack: PHP, WordPress, Apache/.htaccess.

Bug Bounties

JudgeHype (2025) — Cloudflare WAF bypass, SQL injection
Cooler Master (2025) — Cloudflare WAF bypass, SQL injection
GIGABYTE (2015–2023) — LFI/RFI, SQLi, XSS Stored, Directory Traversal, Full Path Disclosure
Corsair (2019) — Admin account bypass, admin token leakage
LDLC (2019–2020) — XSS, ESI injection, brute-force bypass
Blizzard (2015) — Multiple XSS bypasses, Top 10 Bug Bounty Program on HackerOne

Certifications

Akamai Partner Program — Advanced Technical Enablement, WAAP (2024)
Security Consultant — Technobel: CCNA 1-4, Ethical Hacking, Network Security (2017)
Web Developer Bachelor (Short Type) — IEPSCF Namur (2014–2015)

Languages

French — Native
English — B2 Professional
Dutch — Basic

secure terminal node

Michaël Russo

STATUSONLINEROLESenior Security EngineerNODEportfolio-nodeREGIONBE

Senior Security Engineer

Belgium

[email protected]

Focus Areas

Akamai / WAFForensicsAutomationPentesting

Theme Switcher

GitHub LinkedIn

portfolio-node

GNU GRUB 2.06GRUB

Boot options

Quick commands

tree / ls / cat

whois / id / uname -a

labs / data / experience