Freelancer profile translated to English.

Description

Having contributed to the complete setup of a SOC (network architecture, firewalls, detection and response chains, SIEM), I am now its administrator and work as a SOC / CSIRT Analyst.

I cover the entire incident management cycle: detection, in-depth analysis, investigation, response, and continuous improvement of security measures.

Industry field of expertise

Languages

French
Native or bilingual
Arabic
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Beauvais (up to 10km)

Ministère
SOC/CSIRT Analyst (Permanent Contract)
PUBLIC SECTOR
January 2022 - Today (4 years and 5 months)
Paris, France
• • SOC setup and administration: Supervision of several ministerial entities, management of N2/N3 incidents and collaboration with CERT-FR ANSSI.
• • SIEM/Security Deployment: POC realization and deployment of SPLUNK, ELK, TheHive, CTI solutions (Sekoia) and Sandboxing (Recorded Future). Security and Monitoring: Creation of detection rules, monitoring and remediation (SOC PDIS), crisis management. Role of Referent: Technical referent and expert support, management of service provider activities. Key Technologies: SPLUNK, SPLUNK ES, Python, Network (stormshield, fotitgiate, pfsense, switch).
Fortinet FortiGate Stormshield Splunk Routing & Switching Incident Response
THALES Communications & Security
Security Business Analyst
January 2021 - December 2022 (1 year and 11 months)
Product Security: Specification of security functions for common criteria certification, vulnerability testing (Kali Linux, OpenVAS).
• • Role: System Engineer (modeling, specifications) and product certification manager.
Common Criteria Modeling GNU/Linux
THALES Communications & Security
Cybersecurity Expert
January 2019 - January 2021 (2 years)
Military SOC: Management of the integration, verification, and validation of security COTS for the supervision of a classified network (SOC for the French Navy). Integration and Automation: Integration of solutions (Ossim, ELK), testing, automation, and hardening of OS.