Freelancer profile translated to English.

Description

IT and cybersecurity professional, I have been working in information systems since 2015, with a background combining operational IT and information system security. I work on governance, risk, and compliance (GRC) topics as well as operational security, with a strong field-oriented approach.

My missions are mainly focused on operational security. I carry out architecture and configuration audits on a wide technological scope: firewalls, WAFs, Linux and Windows servers, databases, PKI, Azure and Microsoft 365 environments, drawing on ANSSI best practices and CIS Benchmarks.

I also assist clients in securing Active Directory infrastructures and have strong expertise in securing workstations, in full cloud, hybrid, or on-premise environments (GPO, BitLocker encryption, antivirus, security policies).

In parallel, I assist clients in selecting and integrating security solutions, from the study and Proof of Concept (PoC) phases through to deployment.

On the GRC side, I support organizations with:

Cybersecurity awareness training.
Preparation and facilitation of crisis management exercises.
Drafting of security documentation (BCP/DRP, PCI/PRI), as well as ad-hoc audits based on the ISO 27002 standard.

Industry field of expertise

Languages

French
Native or bilingual

Workplace preferences

Can work on-site

Bordeaux (up to 50km)

ATOS
Cybersecurity Consultant
CONSULTING AND AUDITS
October 2023 - Today (2 years and 10 months)
Bordeaux, France
Operational Security Mission:
Securing Windows workstations (Antivirus Management/Encryption/Maintenance)
Mobile Device Management (Intune)
AD Security
Hardening Linux/Windows servers
Windows 11 Workstation Security Audit
Architecture Audit (Network Checkup, Logging, SI Administration, Backup, Documentation...)
Configuration Audit (AD, Firewall, WAF, Linux, Windows 11, PKI)
Azure Foundation and Microsoft 365 Configuration Audit
Support for security solution integration (MFA Deployment, Intune, Vault)
PoC on security solutions for clients
Drafting technical documentation (DAT, DEX)

GRC Mission:
Client cybersecurity awareness training
Facilitation of crisis management exercises
Definition of cyber roadmap
Drafting SSI documentation (PCI/PRI)
ISO 27002 maturity audit
Security Audit security-awareness-training AD Infrastructure Security GRC Workstation Security
Vade Secure
Cybersecurity Analyst
February 2023 - September 2023 (7 months)
Hem, France
Open-source intelligence on spambots (OSINT)
Spambot analysis
Scripting (Bash & Python)
Network traffic analysis
Statistics management
Data analysis with Grafana
Drafting analysis reports
Bash Malware Analysis grafana Python OSINT
SUNU Assurance
Deputy CISO
September 2021 - April 2022 (7 months)
IT Governance & Management / CISO
IT Project Management
Vendor and contractor management
Asset lifecycle tracking (workstations, servers, printers…)
Management of SUNUPAC v8 business application
Internal documentation and procedures

Systems and Workstation Security
Securing Windows workstations (PDT) and servers
Firewall management: rule creation, VPN configuration
User cybersecurity awareness training
Active Directory resource management (GPO, permissions, groups)
Server administration: files, antivirus, backup, DC

Support & Operational Maintenance
Level 2 technical support for users (incident management, ticketing)
Network troubleshooting
IT equipment management
Workstation Security Cybersecurity Awareness Project Management IT Support Systems and Network Administration