Elvis Bélanger

Zendata is a leading Swiss cybersecurity company, recognized for its sharp expertise and innovative solutions in the field of Cybersecurity. Founded in 2012, it quickly rose to become an international benchmark in the fight against cyber threats and now operates in Switzerland, Bahrain, the United Arab Emirates, Singapore, and Qatar.

Assignments and responsibilities:

• Continuous monitoring of networks, servers, and client workstations to detect, analyze, and contain security incidents.

• Development and maintenance of custom SIEM rules, used by the SOC analyst team.

• Steering the integration of new data sources and security tools to enhance the SOC's coverage and effectiveness.

• Development of log ingestion and normalization pipelines according to standards such as ECS, with API configuration and processor setup.

• Implementation of advanced detection strategies (Mandiant, Threat Intelligence, behavioral analysis) to proactively anticipate and block attacks.

Based in Montreal, Quebec, Halifax, and San Diego, GoSecure is the leading provider of Managed Detection and Response (MDR) cybersecurity services for businesses in North America.

My responsibilities:

• Threat Analysis and Security Management: Conducting in-depth threat analyses through the management of network intrusion detection systems (NIDS/LIDS) and detection and response systems (SOAR, SIEM, EDR). Expertise in endpoint incident response, malware analysis, as well as intelligence gathering and correlation.

• Data Analysis: Processing and interpreting raw data and logs to identify potential threats and provide security recommendations.

• Operational Processes: Managing operational processes, including documentation, ticket management, and incident response, to ensure efficient and rapid threat handling.

• Security Expertise: Providing cybersecurity expertise to clients, both in proactive analysis scenarios and incident response, contributing to strengthening their security posture.

• Supervision and Monitoring: Supervising various security environments for dozens of clients in North America, ensuring continuous monitoring and rapid response to threats.

Key role: Active participation within the SOC, with responsibility for continuous monitoring and management of IT security incidents.

Mission: Ensure the integrity and confidentiality of systems and sensitive financial data, while guaranteeing service continuity for over 12,000 employees and millions of Quebec residents.

Skills developed:

• Supervision and monitoring of Revenu Québec systems

• Response to sophisticated threats

• Development of digital investigations

• Strengthening of digital infrastructure, including the redesign of confidential databases