Freelancer profile translated to English.

Description

With over 5 years of experience in cybersecurity, primarily in SOC/CERT, I have acquired solid skills in forensic analysis and mastery of Splunk, QRadar, and Microsoft Sentinel technologies. Accustomed to working in complex environments, I am always motivated by new challenges in incident response, SOC, and cyber defense.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent
Arabic
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

RATP (via DAVIDSON)
Cybersecurity Consultant
June 2024 - Today (2 years)
Paris, France
• Handling Level 3 security alerts from SOC/EDR
• Incident response and crisis management during the Olympic Games reinforcement
• Defining Use Cases on the client's SIEM
• Log management and IOC hunting
• Administration of Splunk SIEM and SentinelOne EDR
• Knowledge capitalization and continuous improvement (detection rules, automation, processes, documentation…)
ALMOND
SOC / CERT Consultant
October 2022 - June 2024 (1 year and 8 months)
Métropole du Grand Paris, France
• Security incident response and forensic analysis (Ransomware, AD compromise...)
• Handling alerts from technical stacks in SOAR platforms and qualifying incidents via various client SIEMs (Splunk, Microsoft Sentinel)
• Participation in the continuous improvement of detection capabilities through the SOC's Use Case Factory
• Performing threat hunting activities
• Participation in the identification, evaluation, and management of vulnerabilities
• Participation in the execution of Chronicle SOAR automation projects
• Development of incident response reports and decontamination procedures.
EDF (via CAPGEMINI)
SOC Analyst Level 2
February 2022 - September 2022 (7 months)
Paris, France
• Processing and qualifying security alerts via QRadar SIEM
• Responding to client investigation requests
• Analysis of potentially malicious domains/URLs/attachments and hunting for indicators of compromise
• Creation and improvement of detection rules in QRadar SIEM
• Writing quick reference guides
• Producing monitoring reports for EDF and its subsidiaries on security incidents.