sound familiar?

Where you are now, and where this gets you.

Before

You're good at your job and bored by it. You can already feel the next twenty years from where you're sitting.
Your evenings go into tutorials and courses, and after six months you can't point at anything you've built.
You send applications and hear nothing back, and nobody tells you which part is the problem.
You still can't say which speciality you're aiming at, so you're half-preparing for all of them.
Every decision is taken alone, from advice you found online, written by people you can't check.

After

You have a written plan, and the next step is always obvious. No more evenings spent deciding what to do.
Your CV and your LinkedIn get answered, and you walk into interviews already rehearsed.
You picked one speciality on purpose, and you can say out loud why it fits you.
You have someone to ask when you're stuck, instead of guessing and losing a month.
You're in the industry, in a first role that leads somewhere, not a dead end you took out of impatience.
And you're pointed at the parts of security that genuinely pay well, because you didn't lose three years in the traps that keep people at the bottom of it.

None of that means you're too late.
It means nobody has sat down with you and drawn the map.

how I know

I started as a bored SAP functional analyst on bad pay.

Writing functional specs for an ERP, watching the clock, going home. I had one thing going for me: a very specific picture of where I wanted to end up. Freelance cybersecurity expert and owner of a cybersecurity business with serious clients on the books.

It took three years, and nobody handed me anything. I made most of the mistakes listed further down this page, which is exactly why I can name them.

I got into the industry through consulting: IT financial audit, compliance for internal control, forensic investigation, pentesting, security analysis. Then I moved inside, as a security architect.

Fifteen years of cybersecurity later, seven of them designing security for international retail groups across five continents, I teach the Web Security by Design module at Paris 1 Panthéon-Sorbonne and I build dmarc-expert.com, an email security SaaS used by large companies. That's the picture I had in my head at the start, made real.

And I enjoy it. The subjects never repeat, and the work is a cat and mouse game with the attackers: there is excitement, there is fear, and there are real wins. You talk to everyone, from the CEO to the CFO, from the CTO to the engineers, from the business to the clients and the suppliers. You never feel isolated, and you never feel stuck.

I'm not selling you a dream I read about.
I'm handing you the route I walked, with the dead ends already marked.

how it works

Four phases, in this order. I walk through each one with you.

Where you are, honestly

Your background, your money, your time, the people around you. No plan survives if it ignores the life you actually have.

Where you're going

If you already know, we aim. If you don't, I walk you through the specialities: what the work is really like day to day, what it pays, who gets in, and what it costs you to get there.

A plan built on what you already have

Nobody starts from zero. Your technical background, your industry knowledge, your languages, your patience with people, the way you hold up under pressure. Security needs all of it.

Then the unglamorous part

Technical work, how this industry actually behaves, your CV, your LinkedIn, and interview preparation. So you don't lose a role you deserved over three small avoidable mistakes.

The specialities we go through, so you choose with your eyes open rather than picking the one you've seen most on YouTube:

SOC and detection Incident response Digital forensics Pentest and red team GRC and risk Security architecture Cloud security Application security Identity

let's be clear

What I promise, and what I don't.

What I teach is what the people who actually made it here did to get there. The ones who are good at this and well paid for it. There is a process behind it, and it repeats often enough to be worth following.

No job is promised. Nobody can promise you one, and anyone who does is selling you something. You still have to be good and you still have to want it. This isn't for you if you want a shortcut, or want someone to do the work in your place.

What I do promise is the timeline. Follow the plan and you're working in this industry within three years, and most people get there faster. You won't be lost, and you'll know which path you're walking with the limited time you have. If I read your situation and don't think I can help, I'll say so in the first reply rather than take your money.

what this saves you from

The four ways people quietly lose years.

Learning things nobody asks for. There is an enormous amount of security content that is genuinely interesting and completely useless for getting hired. AI has made that pile much bigger, and it hallucinates badly on security work: confident, well written, wrong, and you need to already know the subject to catch it. I wrote up what I found using it through 2025 and 2026.
Being funnelled into someone else's product. The people selling you a path are often genuinely in the industry. But the path they sell is the one that leads to their product, not the one that fits your situation and what the market is actually buying. Look at pentest: the courses are everywhere, the companies hiring pentesters are far fewer. Nobody inside that funnel has any reason to tell you so.
Hiding inside certifications. They're comfortable: a syllabus, a date, a result. But a recruiter looking at six unrelated certificates can see there's no thread running through them, and reads it as someone who hasn't worked out what they're aiming at. A certification counts when it backs up knowledge you already have. On its own it's a receipt, not a skill.
Losing interviews on small things. You can be the right person and get rejected over how you answered one question, or how your CV was laid out. Most of it is fixable in an afternoon, once someone tells you.

what it costs

Two ways to work with me.

I don't have a fixed price list, because I don't know your situation yet. Write to me, I'll study it, and I'll come back with both numbers for you. Here's the shape of them.

The plan of action · around €200

A written route, yours to follow on your own.

A real conversation about your background, your constraints and what you want out of this.
The map of the specialities, if you don't yet know where you're heading.
A written plan: what to learn, in what order, what to skip, what to build, and roughly how long each step takes you.
What's worth paying for in your case, and what isn't. This alone usually saves more than it costs.

Some people only ever need this. They take the plan, they go, and that's a good outcome.

The full coaching · around one month of your future salary

Everything above, and then I stay with you for 12 months while you do it.

Technical advisory: what to learn, how to practise, and someone to ask when you're stuck on something real.
How this industry actually works: how security people talk, what earns respect, what gets you quietly written off.
Your CV and your LinkedIn, reworked until they survive the first filter instead of dying in it.
Interview preparation, technical and behavioural, with real rehearsal, so nothing in the room is a surprise.
Me and my professional network, reachable for 12 months: more than twenty senior security architects I've worked with and trust. When your question belongs to a speciality I don't live in, I go and ask the person who does.

It isn't cheap and it isn't meant to be: this is a year of real people's time, mine and my network's, not a video course you watch alone, without support or authentic emotional connection.

If you're ready, there's no time to waste.

Tell me where you are →

Or reach me on LinkedIn if that's easier.

what you're probably thinking

Three fair questions

"I'm 45, and I don't have a degree in this."

Neither did I when I started. Career changers do well here, because a lot of security is judgment, and judgment comes from having lived through things. No degree closes a few doors and leaves plenty open. What actually hurts you isn't your age or your diploma, it's aiming at the wrong speciality for your profile.

"I'm not technical enough."

Then we're probably not aiming you at a red team role. Several parts of this industry pay well and need people who can read a contract, talk to a business and stay calm. We pick the door that fits you.

"Can't I get all of this free on YouTube?"

Most of the information, yes, mixed in with a lot that will cost you a year. One hour with me saves you about three months of videos.

And the part that matters isn't really on there. YouTube is mostly selling you the next pentesting course. I gave all of mine away, because the material is good and I can't honestly sell it any more: that knowledge is everywhere now, it isn't what gets you hired, and it isn't what makes a recruiter remember you. You're not paying me for information. You're paying me to tell you which parts apply to you, and in what order.

if you already come from IT

Seven years of IT behind you? There is a shorter road than this coaching.

This coaching is built for getting into the industry. If you already have at least seven years of IT experience, you don't need to get in. You need to move up. The technical background is already there, what is missing is the method.

That is what the security architect program does: four weeks, on your own projects. It is the royal road of this profession, the one that leads to the very top salaries in cybersecurity and to the roles where you can ask for full remote. You can take it on your own.

See the security architect program →

Tell me where you are.

A few lines is enough: what you do now, what you'd like to do, and how much time you honestly have. I'll study it and come back with what I think you should do, and what the two options would cost you. If I don't think I'm the right person, I'll tell you that instead.