Franciny S.

Advanced Cybersecurity and Cryptography Specialist Profile With over 15 years of experience at the forefront of offensive security, my expertise transcends traditional cybersecurity boundaries, delving deeply into applied cryptography, cybersecurity engineering, and advanced data science. I am a Cybersecurity Specialist, Ethical Hacker, and Data Scientist, with a proven track record in delivering high-impact security solutions for critical sectors such as banking, blockchain, mobile, and military-grade environments. Applied Cryptography: Quantum Defense and Zero-Knowledge Proofs My specialization in cryptography extends beyond classical paradigms, encompassing the emerging frontiers of Quantum Cryptography and Post-Quantum Cryptography (PQC). I possess proficiency in the analysis and implementation of quantum-resistant algorithms, such as Lattice-based Cryptography (e.g., CRYSTALS-Kyber, CRYSTALS-Dilithium), Hash-based Signatures (e.g., SPHINCS+), and Code-based Cryptography (e.g., McEliece), ensuring data and communication security in a post-quantum future. My experience includes evaluating cryptographic primitives for compliance with emerging NIST PQC standards. Furthermore, I am a specialist in Zero-Knowledge Proofs (ZKP), focusing on protocols like zk-SNARKs and zk-STARKs. I develop and audit ZKP implementations to ensure privacy and scalability in decentralized applications and authentication systems, enabling information verification without revealing underlying data. My work spans from underlying theory to optimizing arithmetic circuits and mitigating vulnerabilities in ZKP implementations. My previous experience at Kryptus, where I worked on the development of Hardware Security Modules (HSMs) and conducted advanced Side-Channel Attacks (SCA) analyses, such as Differential Power Analysis (DPA) and Electromagnetic Fault Injection (EMFI), and Fault Injection on military-grade systems, solidifies my ability to protect critical assets against the most sophisticated threats. I ensure compliance with rigorous standards such as FIPS 140-2, Common Criteria, and NIST. Cybersecurity: Code Review, Pentesting, and Vulnerability Analysis I have led Red Team operations, Secure Code Reviews, and in-depth technical pentests across a wide range of attack surfaces, including web applications, RESTful APIs, mobile apps (Android/iOS), smart contracts, and cloud infrastructures. My approach integrates white-box and hybrid testing methodologies, combining SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and IAST (Interactive Application Security Testing) with exploit chaining, cryptographic audits, and real-time adversarial modeling. I have a proven track record in securing platforms for financial institutions like Banco Bradesco, Alelo, and major online gaming companies like Blaze. My work in smart contract auditing and blockchain security includes vulnerability analysis in Solidity-based protocols, CI/CD pipelines for dApps, and node-level attack simulations (Sybil, Eclipse, Reentrancy, Front-running). I utilize tools such as MythX, Slither, Oyente, and custom fuzzers for EVM and non-EVM environments. Digital Forensics and Incident Response In the field of Digital Forensics, I possess extensive experience in post-incident forensic analysis and malware analysis using static and dynamic tools. My ability to reconstruct events, identify the root cause of breaches, and extract Indicators of Compromise (IoCs) is fundamental for effective incident response. I am proficient in investigating system compromises, data recovery, and presenting detailed forensic reports to support litigation or regulatory compliance. Data Science and Threat Intelligence As a mathematician and data scientist, I apply Monte Carlo simulations, probabilistic modeling, and AI ecosystems to detect and classify fraudulent behaviors at scale. I have developed Machine Learning pipelines to predict attack patterns, model digital threats, and map OSINT-derived fraud campaigns in real-time. Other Key Competencies: • Mobile SDK Hardening: anti-Frida, anti-hooking, secure enclave usage. • Token Abuse Detection: JWT and OAuth2. • Browser and API Fuzzing: Burp Suite, Postman, nuclei, ffuf. • OSINT, Threat Hunting, and Social Media Abuse Investigations. • Implementation of Zero Trust Architectures, WAFs, SIEM, IAM, DLP. With a relentless focus on excellence, I deliver detailed vulnerability reports, Proofs of Concept (PoCs), and actionable remediation plans, aligned with the most rigorous industry standards, including OWASP, MITRE ATT&CK, ISO 27001, and PCI-DSS.