Paolo Grilly

Linux Systems & Cybersecurity Engineer specializing in securing, operating, and modernizing critical infrastructures. I assist companies with hardening Linux systems, vulnerability management, implementing patch management strategies, and automating deployments and operations via Ansible and internal tools.

I am involved in deploying and operating security solutions, notably EDR (CrowdStrike), firewalling, and security policies, with a production-oriented approach and for high-constraint environments. I also participate in designing secure architectures, including network segmentation (VLAN, micro-segmentation) and overall infrastructure security enhancement.

I am involved in infrastructure modernization projects, including cloud migrations (Azure / AWS), implementing cloud security policies, and industrializing environments. These projects include a strong focus on observability, with the implementation of monitoring and supervision solutions such as Grafana, Nagios, Zabbix, and Centreon, providing real-time visibility into performance, availability, and incidents.

I also have hands-on experience in setting up and evolving SIEM platforms, notably through migrating Elastic Stack (ELK) architectures to Wazuh, covering the entire chain: log collection, centralization, correlation, and exploitation for security incident detection.

Accustomed to critical environments and multi-team contexts (infra, network, security, DevOps), I work in both build and run phases, with a strong ability to structure, document, and stabilize systems. I combine technical expertise, security vision, and a pragmatic approach to improve the resilience, supervision, and overall security of IT platforms.