Freelancer profile translated to English.

Description

Fort de missions dans les plus grands comptes des CAC40 dans différent secteur, certifié architecte AWS et autonome motivé bien organisé ça fait plus de 3 ans que j’exerce dans le domaine IT, dans les domaines Big Data et Securité .

Languages

French
Native or bilingual
Arabic
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

plusieurs
Splunk & Security Architect (with AI)
January 2025 - Today (1 year and 7 months)
Design of HA & scalable Splunk architectures (Indexer Cluster, SHC, Deployer, CM/LM/DS), migrations 8.x→9.x/9.4.x, SmartStore (sizing, cache, costs).
Large-scale ingestion (UF/HF/HEC/OTel), CIM/datamodels normalization, app governance (packaging, GitOps, lifecycle).
End-to-end RBA: risk model, risk rules/modifiers, risk notables, per-entity scoring, KPIs (precision, recall, MTTA/MTTR).
Detection as Code: Git repository for detections (SPL/ESCU), CI/CD (SPL lint tests, DEV→PREPROD→PROD promotion), MITRE ATT&CK traceability.
Dynamic thresholding (quantiles, median/MAD, ESD) by context (entity/hour/location) → significant noise reduction and SOC value increase.
Multi-source correlations (Identity/EDR/Proxy/Cloud) and threat hunting on accelerated datamodels (tstats, summaries).
SOC dashboards and platform piloting (health, EPS/GB-day, storage, costs), ILM & retention, advanced search tuning.
SOAR: automatic enrichment (MISP/OTX/VirusTotal), triage, containment workflows, continuous improvement loops.
Observability & Cloud: OTel/O11y (logs-metrics-traces), APM, AWS/GCP/Azure/M365/Okta collection with CIM normalization and cloud detections.
AI/ML for security: anomaly/baseline detection, LLM-assisted triage (summaries, hypotheses, IOCs), controlled SPL generation, enrichment agents (Assets/Identities/TI), AI governance (explainability, drift).
Zero Trust & Compliance: light UEBA signals with RBA, NIS2/DORA/ISO 27001 steering dashboards, runbooks & training.
Classic architect tasks: HLD/LLD, workshops, source onboarding (EDR/WAF/Proxy/FW/NDR/SaaS), MCO/MCS, hardening (TLS, RBAC), SEC/ARCH/CHANGE committees.
Artificial Intelligence LLM IOC NIS2 DORA
BNP Paribas
SPLUNK ARCHITECT
BANKING AND INSURANCE
April 2021 - January 2022 (9 months)
Paris, France
Within the log management team of 12 people
Working on a project to merge two Splunk infrastructures with several TB of data.
Implementation and support for the design of Splunk architecture and solutions.
Troubleshooting and optimization of the Splunk platform: dozens of indexers and 10TB/day of indexing
Migration and upgrade of Splunk version
Development and implementation of platform health check and monitoring dashboards.
Implementation of several Splunk collection solutions: syslog-ng, UF, HF, kafka connect, fluentd, HEC, DB connect ...
Automation of the platform and deployments.*
Technical reference for the Splunk solution within BNP.
Splunk Ansible Splunk AWS Ansible Terraform Security IT Architecture AI Agent
STET
Splunk Architect
BANKING AND INSURANCE
January 2021 - November 2021 (10 months)
Within the STET SOC team, acting as Splunk Architect.
Administration and implementation of the Enterprise Security solution
Integration of new log sources.
Implementation of Splunk Best Practices
Collaboration with different teams for requirements.
Splunk version upgrade,
Troubleshooting and error correction
User support, Dashboard and SPL query optimization.
Implementation of the architecture and automation of deployment processes (Terraform, Ansible ...)
Working on a project to merge two Splunk infrastructures with several TB of data.
Development and implementation of platform health check and monitoring dashboards.
Splunk AWS Ansible Terraform Security Cybersecurity Artificial Intelligence IT Architecture DevOps