Freelancer profile translated to English.
Back to original languageAbout Régis
Cybersecurity Engineer (SecOps) with 5 years of experience in vulnerability management, system hardening, and infrastructure security. Specialized in detection, prioritization based on real risk, and large-scale remediation through patch management, virtual patching, and automation (Bash, PowerShell, Ansible, Terraform).
Comfortable working independently or in a team, in international English-speaking environments.
I mainly work with companies that:
- have too many security alerts
- have critical unpatched vulnerabilities
- want to improve their incident detection and response
- need to improve their security
->Tools
English: C1
Nessus (Tenable)
Microsoft Defender (EDR)
Microsoft Sentinel (SIEM) & Syslog
Microsoft Azure (IAM, VM)
Trend Micro Deep Security (Vision One)
Windows Server 2003-2022
Linux RedHat 5-9
Bash
Terraform - IaC
Amazon Web Services (AWS, VPC, IAM, VM)
Cyberark (Zero Touch PKI & certificate manager)
CVSS Score, CVE Watch, NVD, MITRE ATT&CK, OWASP, NIST, ISO 27001, GDPR
French
Native or bilingual
English
Fluent
Polish
Basic
Can work on-site
Paris (up to 50km)
Experience
- LEGRANDOperational Security Engineer (SecOps) & Vulnerability ManagementTECHJuly 2023 - Today (3 years and 1 month)->Objective
- Reduction of a backlog of 4,000 critical vulnerabilities on a hybrid park of 3,000 servers (Windows/Linux)
->Achievements & Deliverables- Lead and remediate vulnerabilities (Tenable Nessus scans, CVE/NVD/MITRE ATT&CK correlation) in coordination with business teams on a scope of 3,000 servers: 70% reduction in critical exposure in 18 months, deploy Trend Micro Deep Security on over 250 obsolete servers via Bash script automation
- Lead remediation committees with internal teams and partners, ensuring monitoring of vulnerability indicators and implementation of alerts and escalations in case of non-compliance with deadlines
- Deploy a centralized management solution for over 1,400 TLS/SSL certificates (CyberArk Certificate Manager), with Zero Touch PKI integration, API synchronization, and access management via Azure IAM
- Deploy Admin By Request on over 2,000 Windows servers, with implementation of RBAC (Role-Based Access Control) policies and automation of access drift audits via PowerShell
- Automate the deployment and configuration of cloud infrastructure via Terraform (IaC)
- Ensure knowledge transfer to internal Ops teams and the managed service provider (India) on all deployed SecOps tools: operational procedures, best practices, and troubleshooting
->Tools- Nessus (Tenable)
- Microsoft Defender (EDR)
- Microsoft Sentinel (SIEM) & Syslog
- Microsoft Azure (IAM, VM)
- Trend Micro Deep Security (Vision One)
- Windows Server 2003-2022
- Linux RedHat 5-9
- Bash
- Amazon Web Services (AWS, VPC, IAM, VM)
- Cyberark (Zero Touch PKI & certificate manager)
- CVSS Score, CVE Watch, NVD, MITRE ATT&CK, OWASP, NIST, ISO 27001, GDPR
- CANONSystems & Network EngineerMEDICALJanuary 2023 - June 2023 (6 months)->Objective
- Production deployment and delivery of IT services adapted to business needs
->Achievements & Deliverables- Complete deployment of VMware infrastructures (vCenter / ESXi): design and implementation from scratch of virtualized environments, installation and configuration of vCenter and ESXi hosts, provisioning of about twenty VMs, management of templates/clones, snapshots, monitoring, and operational maintenance
- Production deployment of HP physical servers (Windows 10) for key accounts: iLO configuration, system security and setup, activation of remote access (RDP), deployment of Canon business applications, writing technical and operational documentation
- Configuration and administration of a Synology NAS: RAID 1 implementation, user and group management, ACL configuration, SMB shares, securing the administration interface with MFA
- Implementation of backup and Disaster Recovery solutions with Acronis True Image: creation of system and application images on about twenty physical servers, management of restorations in case of incidents, provision of usable backups for client business continuity
->Tools- VMware vCenter
- Windows Server 2019
- Acronis
- Synology NAS
- MICROPORT CRMSystems and Network EngineerMEDICALMay 2022 - December 2022 (8 months)->Objective
- Modernization and migration project of a VMware virtualized infrastructure to Nutanix, including network redesign, Active Directory, and monitoring
->Achievements & Deliverables- Migration of VMware infrastructure to Nutanix AHV: secure migration of approximately 100 Linux/Windows virtual machines (~40 TB) onto a 4-node cluster, with strong availability and service continuity constraints
- Design of network architecture and migration plan: definition of IP addressing plan, VLAN segmentation, and batch migration breakdown, coordination with the service provider (Nutanix Move / Infidis)
- Orchestration of virtual machine migrations: planning and execution of migrations according to criticality (production, pre-production, development, test), with risk management and impact minimization
- Implementation and administration of a new Active Directory domain controller: installation, promotion, DNS configuration, and replication in the existing environment
- Active Directory Administration: management of user accounts, organizational units (OUs), and group policies (GPOs)
- Cisco Meraki network infrastructure administration: VLAN configuration, firewall rule management (inbound/outbound)
->Tools- Nutanix AHV
- VMware ESXI
- Microsoft Windows Server 2003-2019
- Linux RedHat v5-v8
- Centreon
- Cisco Meraki
- Wallix Bastion
- Microsoft Azure
Recommendations
Be the first to recommend Régis
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master Networks and TelecommunicationsUniversité Paris Saclay2018Master Réseaux et Télécommunications
- Professional Bachelor's Degree in Microwave MeasurementsIUT de Ville d'Avray2014Licence Professionnelle Mesures Hyperfréquences