Elias M.

Application SI Domain Referent

• Responsible for improving collection and detection on an application scope: Auditd, Apache, Tomcat, WAF
• Writing quick reference guides
• Direct collaboration and support with business units to meet security monitoring needs
• Conducting a PoC for SAP security monitoring
• Supervising an intern engineer
• Recognized as a member of EDF's expertise network

SOC Analyst

• Incident handling: phishing, EDR, SIEM alerts
• Improving quick reference guides
• Using SOAR tools and CTI platform

Security Champions Program Referent

• Responsible for implementing a Security Champions program in an Agile context
• Supervising a team of two people
• Participating in SAFe events within the project
• Facilitating practical application security awareness sessions
• Technical monitoring and support of project teams in evolving their security maturity
• Writing and sharing security documentation, communications, and methodologies on collaborative tools (Confluence, Teams)
• Establishing a Security Champions community

DevSecOps Security Referent

• Responsible for securing the IT Services Directorate's DevSecOps platform
• Integrating Jenkins interconnections with application security tools (Checkmarx, InsightAppSec, Pradéo)
• Contributing to continuous improvement security studies for the platform

Manager for the "Open Source Dependency Security Analysis" work package of the security tools renewal project

• Requirements gathering and market research
• Contribution to budget estimation
• Writing the specifications
• Writing the prototyping specifications
• Member of the award jury for the technical part (oral and prototyping)

Operational and contractual manager for the SAST tool – Checkmarx

• Participation in operational and contractual committees with the integrator
• L3 support for the solution (User assistance, handling complex requests)
• Monitoring subscription requests, needs, licenses, and budget

Manager for an application security documentation repository based on OWASP TOP 10

• Implementing a "Developer Security Backpack" based on OWASP TOP 10, including code examples (Java, Python, Js, Swift, PHP)
• Managing document writing
• Integrating documents into a Confluence space and communicating to the CISOs of the various EDF business units

Refactoring of the internal maintenance and monitoring infrastructure - Paris/Lyon Location

• Evolving the existing repository to make it generic and abstract.
• Objective of simplified integration and support for all deployed sites
• Analysis of the existing system, needs assessment, architecture design, programming, deployment, and acceptance testing.
• Development of a REST API with the Golang "Revel" framework.

Client projects - Renewable energy production monitoring at industrial sites

• Design, development, and on-site integration of monitoring (frontend and backend).
• Programming in Perl and Golang. Development of a GUI (thick client) and two REST APIs.

Linux System and Network Administrator. Responsible for user/rights management, backup management, certificate management, system security, routing, firewalls, VPNs.

Responsible for monitoring and operational maintenance of the SI infrastructure (developments, evolutions, frontend/backend)

Development and deployment of an internal maintenance and monitoring platform (native development)

Support and guidance for users during tool evolutions. Writing technical documentation and tutorials on the internal Wiki

Study and technological watch to ensure the proper development and sustainability of the company's IT tools