Specialist in progress. Generalist by default.
Yannick
Van Campenhout
Bridging the gap between deep technical execution and strategic security thinking. Based in Belgium, working across Europe.
Bridging the gap between deep technical execution and strategic security thinking. Based in Belgium, working across Europe.
I'm a Cybersecurity Engineer at Cronos Security, Belgium. Before that, Deloitte — where I worked inside some of Belgium's largest organisations, running enterprise-scale vulnerability management programs on Qualys, Tenable and Rapid7. At one client, we took a program sitting at 12 million open vulnerabilities down to 3 within a year.
The goal is to become the Swiss Army knife of cybersecurity. Someone who can hold their own across vulnerability management, risk, cloud security, architecture, governance and technical depth — and actually connect the dots between them.
Outside client work, the homelab is where I test everything before I recommend it. It runs on Proxmox, Docker and Unifi — proper VLAN segmentation, local AI inference, n8n automation pipelines. It also keeps the house running: cameras, motion-triggered automations, climate, lighting — my wife and I built it so the house is clean, secure and ready before we even get home. If I'm going to tell a client how something works, I need to have broken it myself first.
Built and ran VM programs at scale — Qualys, Tenable, Rapid7. Took one client from 12M open vulns to 3 in a year through patching cycles, prioritisation and stakeholder buy-in.
Azure and AWS security assessments: identity, access, misconfigurations, architecture. Hands-on with Terraform and cloud-native security tooling.
Gap analyses against ISO 27001, NIS2 and DORA. Turning audit findings into security programs people actually follow — not just a report that sits in a drawer.
AZ-500 in progress. Homelab running 24/7. Anything worth recommending to a client gets tested at home first.
Trained as a data protection advisor under Belgian GDPR implementation. Covered legal bases, data subject rights, DPIAs and breach notification procedures.
Feb 2018 – Feb 2019Covers attack phases, vectors and countermeasures across 20 domains including network scanning, malware, social engineering, and web application hacking.
Aug 2021 · ActiveFoundational Azure cloud concepts: core services, pricing models, SLAs and cloud governance. Stepping stone to deeper Azure security work.
Apr 2022 – Apr 2024Validates broad AWS cloud knowledge: core services, security, architecture, and billing. Foundation for deeper AWS security and architecture certifications.
Oct 2022 – Oct 2025Designing distributed systems on AWS with a focus on resilience, performance and security. Covers IAM, VPCs, encryption and access control in depth.
Nov 2022 – Nov 2025IT service management framework covering the service value system, guiding principles and four dimensions model. Enables structured, business-aligned security service delivery.
Dec 2022 · Active (no expiry)Microsoft's security baseline: identity, access management, threat protection, compliance management and Zero Trust fundamentals across M365 and Azure.
Sep 2023 – Sep 2025Project management methodology covering the 7 principles, themes and processes. Applied to structured delivery of cybersecurity projects and client engagements.
Jan 2024 – Jan 2027 · ActiveEntry-level ISC2 certification covering security principles, network security, access controls, and incident response. Precursor to the SSCP and CISSP pathways.
Sep 2024 – Sep 2027 · ActivePractitioner-level ISC2 credential across 7 domains: access controls, risk, cryptography, network security, incident response, and more. Stepping stone to CISSP.
Aug 2025 – Aug 2026 · ActivePlatform-specific certification for managing and operating the Holm Security vulnerability management platform — used actively in client VM programs at Cronos Security.
Dec 2025 – Dec 2028 · ActiveValidates skills in securing Azure identities, platforms, data, and applications. Natural next step given extensive Azure security assessment work at Deloitte and Cronos.
🎯 Next Target — In ProgressThe gold standard in cybersecurity leadership. Covers 8 CISSP domains from risk management to software security. Target after accumulating the required ISC2 experience hours.
📅 In Sight — Long-term TargetWhether it's a security challenge, a collaboration opportunity, or you just want to talk homelab setups — always open to a good conversation.