Freelancer profile translated to English.

Description

Cybersecurity Consultant with over 10 years of experience, specializing in AWS Cloud Security, Incident Detection and Response.

Certified AWS Security Specialty (SCS-C01) and OSCP, I act as a trusted advisor to technical and business teams to secure, monitor, and defend complex AWS environments.

AWS Cloud Security

Architecture and hardening of multi-account AWS environments (IAM, WAF, Network Firewall, KMS, SCPs). Continuous posture assessment via CSPM, GuardDuty, Security Hub, and CloudTrail. Support for Cloud and DevOps teams on security best practices.

Detection & Threat Hunting

AWS log centralization on Splunk (CloudTrail, GuardDuty, VPC Flow Logs). Definition of detection rules based on the MITRE ATT&CK framework. Tuning of correlation rules on Splunk and QRadar to reduce false positives and improve analyst efficiency.

Incident Response

Deployment and operationalization of EDR solutions (CrowdStrike) on cloud environments. Incident investigation, forensic analysis, and implementation of remediation plans.

Are you working on Cloud security, SOC monitoring, or incident response projects? Let's discuss your needs.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

Axway
Cloud Security Consultant
SOFTWARE PUBLISHING
January 2022 - Today (4 years and 5 months)
Architecture and security of multi-account AWS environments (IAM, SCPs, WAF, Network Firewall, KMS) for Cloud and DevOps teams.

Deployment and operationalization of AWS detection services (GuardDuty, Security Hub, CloudTrail) with real-time SOC monitoring log centralization on Splunk.

Definition and tuning of detection rules based on the MITRE ATT&CK framework. Reduction of false positives and improvement of SOC analyst efficiency.

Deployment of an EDR solution (CrowdStrike) on cloud and on-premise environments. Incident investigation, forensic analysis, and implementation of remediation plans.

Continuous security posture assessment via CSPM. Support for technical and DevOps teams on AWS security best practices.
ESGI Reims
Cybersecurity teacher
EDUCATION AND E-LEARNING
September 2021 - July 2022 (11 months)
Reims, France
Docaposte
SOC Analyst N3 Consultant
TECH
November 2020 - December 2021 (1 year and 1 month)
Extension of security monitoring to public and private cloud environments, definition of log collection strategies.

Definition of detection coverage based on the MITRE ATT&CK model, including cloud environments.

Tuning of correlation rules on QRadar to reduce false positives and improve analyst efficiency.

Implementation of a structured process for integrating new environments into the monitoring scope.

Risk analysis with stakeholders to transform business risks into detection rules.