You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Malt Strategy
New report
Malt Tech Trends 2026
Bilel MeddebBM

Bilel Meddeb

SOC & Collection Infrastructure Specialist

€650/day
Paris, FR
3-7 years
Cybersecurity
SIEM
Splunk
ELK
Infrastructure

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Bilel

  • Cybersecurity Engineer specializing in SOC architecture and collection infrastructures, with over 5 years of experience across the entire SIEM (Splunk, ELK) and XDR (Sekoia) chain.
  • Expert in integrating multi-environment sensors and developing parsers, I also design and deploy complete SOC architectures out of passion (Splunk clusters, SOAR, CTI), demonstrating end-to-end technical mastery, from hardening to incident response automation.
Digital and IT Services
IoT (Internet of Things)

  • French

    Native or bilingual

  • English

    Conversational

  • Arabic

    Native or bilingual

Can work on-site
Paris (up to 50km), Tours (up to 50km)

Experience

  • Intrinsec
    SOC & Collection Infrastructure Specialist
    April 2024 - Today (2 years and 3 months)
    Paris, France
    • Collection and integration of logs from multi-environment sensors (SaaS, on-premise, firewalls, AWS, GCP, Zscaler, Apache, HarfangLab, etc.);
    • Installation, configuration, and maintenance of Splunk SIEM infrastructures for clients;
    • Development and deployment of custom Splunk parsers;
    • Mastery of the Sekoia XDR platform;
    • Development of Sekoia playbooks for incident response automation;
    • Development of specific Sekoia intakes (custom parsing, advanced Grok expressions);
    • Design and deployment of syslog collection infrastructures (filters, ports, destinations);
    • Initial deployment of collection infrastructures for clients using Ansible;
    • Handling escalations and investigating collection loss incidents;
    • R&D on integrating new sensor types;
    • Writing technical documentation for integrated sensors;
    • Writing and delivering client architecture documents.
    Syslog Infrastructure Technical Documentation Ansible
  • SOC Security Data Network SDN
    SOC Analyst
    June 2021 - April 2024 (2 years and 10 months)
    Tours, France
    SOC Analyst:
    • Setup and improvement of detection | correlation rules;
    • Analysis of events, investigation, and evaluation of alerts from Kibana;
    • Development of dashboards (for reporting or analysis purposes);
    • Intelligent automation of security operations with SOAR Shuffle.
    SOC Engineer:
    • Design and implementation of SOC architecture;
    • Installation, configuration, and maintenance of SIEM;
    • Providing technical support to SOC clients;
    • Analysis and normalization of logs;
    • Integration of new clients into the SOC;
    • Development of a deployment script in Bash and Python for Winlogbeat and Sysmon;
    • Integration of TheHive with Elasticsearch for optimal incident response;
    • Integration of SOAR Shuffle with TheHive, Cortex, MISP, Teams,...
    System Administration:
    • Installation, configuration, and security of OS. Server management, maintenance, and updates;
    • Automation of administrative tasks to improve operational efficiency;
    • Management of certificates and keys, as well as complete configuration of an OpenVPN;
    • Skills in Zabbix for system monitoring and performance management;
    • Implementation of a Guacamole Bastion for remote server access.
  • Gérance Informatique
    Cybersecurity Consultant
    February 2020 - March 2021 (1 year and 1 month)
    Tunis, Tunisia
    Splunk Integrator | SOC Analyst:
    • Installation, configuration, and maintenance of SPLUNK SIEM;
    • Adding new log sources (syslog, universal forwarder, SNMP, etc.) to the SIEM;
    • Development of SPL queries and specific parsers;
    • Creation of client-oriented dashboards and graphs;
    • Providing technical support to SOC clients;
    • Integration of applications into Splunk based on client needs;
    • Analysis of events, investigation, and qualification of alerts from Splunk.
    Other Responsibilities:
    • Installation, configuration, and security of OS. Server management, maintenance, and updates;
    • Analysis of Web, System (AD, Linux, Windows), and Network vulnerabilities;
    • Audit of WEB applications using Rapid7, AppSpider, and SecPoint;
    • Administration, management, and configuration of firewalls: Fortinet, PaloAlto;
    • Development of Python scripts.
    Clients:
    • Bank: Attijari-Bank, Barka-Bank, Amen-Bank, BMCI;
    • Compagnie tunisienne de navigation (CTN) | TIA SAGEMCOM. | STEG | A2C
Check out Bilel's experience

Recommendations

Be the first to recommend Bilel

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Signup to reveal

Education

  • eJ PTv2 Splunk Enterprise Certified Admin Certification CEHv10 Splunk Fundamentals Splunk Infrastructure NSE 1 & 2 & 3 Palo alto ACE Formation CCNA Security Formation CCNA R&S 1-4
    eJ PTv2 Splunk Enterprise Certified Admin Certification CEHv10 Splunk Fundamentals Splunk Infrastructure NSE 1 & 2 & 3 Palo alto ACE Formation CCNA Security Formation CCNA R&S 1-4
  • REST
Check out Bilel's education

Categories