Marc Leray

OT and IT Infrastructure Security: aeronautics and defense, agri-food, digital services, health sectors

Design of a cyber operational model based on NIST 800-82 and IEC 62443 for 200 factories: definition and deployment of policies, standards, and procedures. Benchmark of security solutions from four vendors and implementation of PoCs with two: Claroty and Nozomi. Design of a standard architecture and guidelines for Claroty deployment in factories. Deployment on pilot sites in Europe, Asia, and North America.

Starting from scratch, design of a regulated DR information system and integration of various technologies (Dell, VMWare, Palo Alto, Stormshield, Skyhigh, Cisco, Netbackup, ELK, Windows, RHEL, TheGreenBow) according to the defined architecture.

SSI OT and IT Audits: optics, watchmaking, maritime, transport, hospitality, pharma sectors

Organizational and technical audits of factories, ships, and headquarters, conducted through interviews, documentary reviews (policies, standards, procedures), and technical assessments in all cybersecurity domains: network scanning and firewall rule review, equipment configuration review, architecture review. Presentation of findings and recommendations to operational teams and executive committees. Development of an OT cyber audit framework (based on NIST, IEC 62443) and construction of a cyber demonstrator for the railway and maritime sectors.

Management and Sales: OT & IT Infrastructure Security (25 people) Member of the division management team, activity monitoring, coaching and evaluation of junior and senior employees on client assignments. Development of new accounts (~€500k/year) and assistance on priority accounts (>€1M/year). Active participation in cybersecurity-related events (S4, SSTIC, Deloitte and partner events).

Study, architecture, and integration of OT cyber solutions: aeronautics

Design of the architecture (architecture document, flow matrix, hardware and software description) and deployment (infrastructure and application) of Acronis and Octoplant products for backup and restoration of ICS systems (historian, SCADA, HMI, workstations) and OT (Schneider, Siemens, Rockwell controllers). Integration of Greenbone Security Management (vulnerability scanner): automated deployment of a Red Hat Linux infrastructure using Ansible. Benchmark and Proof-of-Concept of anti-malware technologies adapted to industrial systems (TXOne Stellar, CarbonBlack, Tyrex).