Hugo Tisseau

Cybersecurity technical project manager and operational security consultant, level 3 support, mentoring an intern.

Security by design in all projects.

Implementation of SonarQube and Jenkins tools (code analysis).

Application of external security audit remediations.

Implementation of the Windows Server 2022 template and the RHEL 9.4 template.

Integration of an SOC, configuration of log forwarding to Splunk Cloud (on-prem + AWS Cloud perimeter), management of SOC / VOC / CERT services.

Deployment of SI sanctuary tool (Shadline).

Deployment of RODC (VPN authentication).

Addressing obsolescence across the entire SI.

Migration of obsolete protocols (FTP, SMBv1, NTMLv1...).

Development of a PGP encryption program (GoAnywhere).

Deployment of the Secure ICAP Gateway tool (GoAnywhere).

Active Directory Tiering, securing server access.

Cloud application RBAC (Entra, Defender, Intune).

IAM policy deployment.

BYOD (Bring Your Own Device) policy deployment.

Deployment of Security Bridge (SAP security tool).

Deployment of CNAPP (WIZ).

Implementation of confidentiality labels (Microsoft Purview).

Processing of EDR and SOC/VOC/CTI alerts (primary contact with the MSSP).

Continuous improvement of security across the entire SI.

Internal audits (PingCastle, PurpleKnight, Bloodhound, OpenSCAP).

Management, configuration, and validation of all SI rights (AD, Entra ID, applications, rights templating).

Management and configuration of EDR (Defender).

Management and configuration of WAFs (AWS).

Management and configuration of conditional access (Entra ID).

Management of network access and validation of technical and functional flow matrices.

Management, steering, technological watch, patch management, and vulnerability remediation (VOC).

Presentation and realization of security KPIs (security meeting with the CISO).

Start of assignment at EDITIS as an employee of CONIX.

I transitioned during the assignment to freelance while remaining with the same client.

In parallel, I managed a team of 8 employees.

Support for the acquisition of CONIX by NEOSOFT.

Support and communication with employees (follow-up meetings, presentation meetings).

Support for transversal services (refinement of recruitment processes, website redesign, cybersecurity acculturation).