Freelancer profile translated to English.
Back to original languageAbout Nilson
🛡️ I help VSEs and SMEs already on Microsoft 365 protect themselves from cyberattacks without turning their business into an overly complicated system.
📊 Before creating Vectisec, I secured a park of 400+ employees in an ISO 27001 certified environment: handling 300+ incidents per month, reducing privileged accounts by ~40%, and achieving a resolution rate of over 90% in less than 48 hours.
💻 Specifically, I intervene on three axes:
Microsoft 365 Operational Security: Intune, Defender, Entra ID, hardening of access and workstations
Outsourced CISO on a part-time basis: security roadmap management, risk management, NIS2 and ISO 27001 alignment
Response to client and partner requirements: security questionnaires, GDPR, client compliance
My approach is pragmatic: simple actions, explained in clear language, prioritized according to business impact, and integrated into your on-the-ground reality, with or without an existing IT provider.
Today, I put this experience at the service of organizations that do not have a dedicated cyber manager but must be prepared for current threats.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- VectisecOutsourced CISO Consultant - Microsoft 365 CybersecurityCONSULTING AND AUDITSNovember 2025 - Today (9 months)Vernon, FranceCybersecurity and Modern Workplace consulting for Parisian VSEs and SMEs without an internal IT department.Missions carried out:
- Digital tools coaching and cybersecurity awareness for an executive: personalized support on Microsoft 365 (Outlook, Teams, OneDrive), adoption of good security practices (passwords, phishing, daily reflexes)
- Support for victims of cybercrime via the Cybermalveillance.gouv.fr platform: diagnosis, remediation advice, referral to the right contacts
- Audit and security of a WordPress site: hardening, GDPR compliance, SSL certificate, plugin review, application firewall
Cross-functional activities:- Development of automated OSINT audit tools for prospect qualification (Python, APIs)
- Development of audit methodologies adapted to SMEs (M365 Security, Active Directory, GDPR)
- Prospecting and qualification of client needs for VSEs/SMEs in the Île-de-France region
→ I put my field experience at the service of companies that want to secure their Microsoft environment without unnecessary complexity. - LNECybersecurity EngineerRESEARCHSeptember 2023 - August 2025 (1 year and 11 months)Trappes, FranceStrengthening the cybersecurity posture of the National Metrology and Testing Laboratory (600 employees, nearly 1500 workstations, ISO certified environment).
- Incident and alert management: handling 300+ incidents/month, resolution rate over 90% in less than 48 hours
Park supervision via EDR/SIEM stack: Microsoft Defender for Endpoint, Varonis, Board of CyberActive Directory hardening: reduction of ~40% of privileged accounts, audit of GPOs and sensitive accessMobile device management: 26% improvement in compliance via Intune, deployment of security policiesGLPI administration: access rights management, park inventory, L1/L2 supportAwareness: design and delivery of simulated phishing campaigns, cybersecurity escape game, internal communication materialsContribution to the CISO Assistant project for ISO 27001 security roadmap tracking→ This field experience in M365 Security allows me to support VSEs and SMEs with proven tools and concrete methodologies. - ENSITECHNetwork and Systems AdministratorEDUCATION AND E-LEARNINGOctober 2022 - February 2023 (4 months)Montigny-le-Bretonneux, FranceIT administration for an engineering school (approximately 200 users).
- User lifecycle management: AD account creation, phone line assignment, access configuration, offboarding of departures
- Active Directory administration: GPOs, security groups, rights management
- Deployment and administration of VPN access for remote work
- SharePoint implementation: creation of team sites, structuring of collaborative spaces
- Printer park management: installation, configuration, and troubleshooting of network printers
- Writing technical security procedures and user guides
- L1/L2 technical support for workstations, servers, and network equipment
→ This knowledge of daily IT operations allows me to propose realistic security measures without hindering production.
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master 3C, Cybersecurity and Cloud ComputingENSITECH2025Master 3C, Cyber sécurité et cloud computing
- Bachelor SSR, Cybersecurity and Cloud ComputingENSITECH2023Bachelor SSR, Cyber sécurité et cloud computing
Certifications
- CSNAStormshield2025
- SecNuméacadémieANSSI2026