Freelancer profile translated to English.
Back to original languageAbout Damien
Hello!
My name is Damien, I've been in IT for over 13 years and in cybersecurity for over 10 years. Security is not just a job, it's one of my passions (I work on radio in my spare time and I'm interested in topics like LoraWAN).
I have a 24U at home. Cybersecurity is not just a fable, I apply it daily with, for example, real backups at home with outsourcing and separation of flows according to the level of criticality. In total, I have several firewalls at home. These are just examples of what I continue to do in my free time.
Security
I support companies ranging from SMEs to large groups. My services can range from simple Splunk log compliance or product testing to conducting crisis exercises (Technical on CyberRange), homologation, or setting up embedded SOCs.
Experiences
Since the creation of my company almost 5 years ago, I have carried out a large number of missions ranging from consulting to setting up SOCs, including NIS homologation and network review, in several countries (France, Germany, and with international clients, our employees are from all countries....).
My clients' satisfaction has always been and will always be a priority for me.
I speak frankly because I am not here to sell snake oil but to help my clients increase their security posture to secure the company's business.
For more details, do not hesitate to contact me.
See you soon,
French
Native or bilingual
English
Fluent
Japanese
Basic
Can work on-site
Élancourt (up to 50km), Paris (up to 50km)
Experience
- AtamasecSecurity Consultant (Owner of EURL, freelance)DIGITAL AND ITJune 2020 - Today (6 years and 1 month)SOC: Security Operations Center -> From architecture to execution.Cyber Defense.Architecture: All around cybersecurity.Consulting.POC: Testing solutions in various scenarios.Crisis Management: Realistic exercises.My missions:- Team Lead MCO/MCS - CAC40Management of the MCO/MCS SplunkCloud team,Preparation of the migration to SplunkCloud,Creation of a compliance base for the SOC,Technical environment: Splunk Cloud, Azure, CrowdStrike.- System Compliance Mission - ConfidentialDefine security measures to comply with French border requirements,Technical environment: Azure, Intune.- SOC Creation and General Security Mission - +€1 BillionSOC Architecture,Deployment of the security system,Definition of rules and security for a hybrid structure on-premise and in the cloud,Hardening,Technical environment: Splunk Cloud, SentinelOne, ATP, InTune, Azure, Redhat, Windows, Cortex, PaloAlto, Fortigate.- Mission for an insurance broker - +€250 MillionSecurity project review,Network and NAC redesign,Writing technical documentation,Technical environment: Azure, Microsoft Cloud/On-Premise, EDR Harfang, Elastic SIEM, Fortigate, Rapid7.- Mission for international logistics and transport - +€2 BillionReview of the network in physical locations worldwide,Definition of a NAC system - ZeroTrust,Strengthening of security equipment, SDWAN, Centralized firewall management,Technical environment: Elastic SIEM, Fortigate, Azure, Sophos EDR, CrowdStrike.- Mission for an insurance broker in France - +€1 BillionReview of the network of physical locations worldwide,Firewall audit,Technical environment: Azure, Fortigate, Checkpoint.- Crisis Exercise Mission for 2 years (1 exercise per year) for a telephone operator.Creation and implementation of the attack on Cyberrange
- AIRBUS Defence & SpaceIntegration Engineer in cybersecurityAVIATION AND AEROSPACEMarch 2017 - March 2022 (5 years)Élancourt, FranceDefinition of a complex SOC architecture,Definition of features and costs,Creation of a tactical SOC,Design and production of content for Airbus Cybersecurity's CyberRange,Design and production of complex scenarios,National crisis design,Design and production of content for customer support,Creation of an online cloud sandbox,Definition of IT and OT attack scenarios,Creation of a live and realistic environment for RedTeam/BlueTeam crisis exercises,Design of Honeypots,Security testing for supervision tests
- intrinsecSecurity Analyst / SOCDIGITAL AND ITJanuary 2016 - January 2017 (1 year)Nanterre, FranceIn the INTRINSEC SOC and CERT-INTRINSEC:Participation in:Monitoring of client perimeters through SOC security solutions,Maintenance of operational tools,Vulnerability analysis,Analysis and processing of security events,Incident response (intrusions, etc.),Forensic investigations,Security intelligence (threats, vulnerabilities, IOCs),Training of security operators,Communication and support.Participation in offer development (R&D, improvement) and communication actions (articles, conferences).
Recommendations
Be the first to recommend Damien
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master 1 (M1), Systems and Network Administrator (ERE)CFA afti2015Centre de formation appartenant à Thales - Formation ERE sur une durée de 15 mois. Partie théorique - Divisée en 5 modules : • Microsoft : Fondamentaux Microsoft - Virtualisation - Stockages des données - Cloud. • Linux : Fondamentaux Linux - Techniques avancées - Services Web sécurisés. • Réseaux : IPv4/IPv6 - Infrastructure de câblage - Architecture protocolaire - Interconnexion des réseaux - Administration SNMP - TCP/IP - Routage - Réseaux locaux/distants. • Sécurité : Sécurité des réseaux - Translations NAT/PAT & ACL). • Gestion : Economie - Méthodologie ITIL - Communication - Prise de décision et délégation en entreprise - Analyse des risques - Droit de l'informatique - Gestion financière. Partie projet - Réalisation de 7 projets en groupe de 5 : Réalisation de projets simulant des situations réelles : - Rédaction de réponse à appels d'offres ; - Mise en place de "POC" : Maquette prouvant la faisabilité du projet ; - Soutenance devant des jurys de professionnels.
- FORCYS - CQPM Cat.D Certification, eligible for CPF (No. 140464), CybersecurityCFA afti2016La formation s’articule autour de l'environnement informatique et de communication de l'entreprise. Elle est mise en pratique au travers de projets d’envergure industrielle, pour mieux appréhender des situations et des enjeux réels tel que : •La réponse sur incident •SMSI (Système de management de la sécurité de l'information •FORENSIC (Investigation numérique) •EBIOS (L’analyse de risque, la gestion des menaces) •La définition de politique de sécurité •L’expertise technique et l'architecture Cyber •La rédaction de rapports d'Audit En partenariat avec l'ANSSI.