Papa S.

+ Manager of the Vulnerability Management System (VMS) within the SOC

+ Responsible for the penetration testing team: As team leader of the internal penetration testing team, I am in charge of internal auditors for the execution of penetration tests, configuration audits, compliance audits, and code audits.

- Implementation of the technical foundation (tools, templates, attack automation scripts).

- Definition and maintenance of the Security Quality Plan (Reference Framework, Dashboard, Reporting, Audit Plan)

- Management of audits (Organization, Planning, Monitoring, Capitalization, Updating, Reporting to IT, CISO, and Business Units)

+ Security Architect:

- In the context of securing development environments, I have implemented tools and specifications for hardening MacOS, Linux systems, and Mobile applications: Writing specifications, Designing a secure architecture, Implementing automated installation scripts.

+ Recommendation and handling of intrusions:

- Management of security audit campaigns: Organization of the audit process for applications within the RBDF scope, Monthly reporting of audit activity.

- Cyber risk management in the context of vulnerability remediation.

- Explain vulnerabilities and associated business risks by adapting your discourse to your audience: CISO, business representatives, development teams, architects, security analysts, ...

- Incident response.

+ Member of the ITIM expert program:

- Information security awareness for new company employees.

- Harmonization of the application security plan for SG.

- Workgroup for defining penetration testing policies and standards for the group's various entities.

- Monitoring technological, legal, and regulatory developments in information security as part of technological watch.

European Project for SCADA and Smart Grids Security:

+ SIEM administration and management.

+ Responsible for testing and validation strategy.

+ Securing SCADA (Supervisory Control and Data Acquisition) and smart grid systems.

- Design of a defense-in-depth architecture for an industrial client.

- R&D of new security technologies for industrial installations:

+ Development of security equipment for industrial architectures.

+ Hardening of industrial systems.

+ Deployment of VPN solutions.