Herve Lenfant

• • Management and processing of security alerts

• • Creation and tracking of incident tickets, associated reporting

• • Contribution to the continuous improvement of SOC procedures

• • Writing technical and operational documentation

• • The project involves taking charge of the expertise of the liaison chains, DevOps tools, and Splunk SIEM

• • Monitoring on Splunk, DevOps CI/CD

• • Maintenance of supervision tools: IPLabel/Ekara, Zabbix, Splunk in production and non-production environments

• • Maintenance of tools for monitoring availability, technical performance, and security: Splunk

• • Maintenance of tools for monitoring business activity and fraud: Splunk

• • Improve response solutions - orchestration of security events - reduce reaction/blocking times: reference guides, weak signal analysis, search for indicators of compromise

• • Responsible for security supervision on several projects (INFRA and SSI) for the Information Systems Transformation Directorate (DTSI)

• • Risk and Compliance Management in IT projects: Classified scientific computing platform, networks, print servers, Golden Image Windows...