Freelancer profile translated to English.

Description

Security Consultant. I master the SIEM/SOC domain (Qradar, Splunk, RSA,.....). I perform audits and I am very passionate about pentesting (Red Team would be better).

Cybersecurity is a pleasure for me, I am happy to help you.....

Industry field of expertise

Languages

French
Fluent
English
Fluent
Arabic
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to 100km)

EDF SA
Cybersecurity Expert
ENERGY AND UTILITIES
January 2022 - December 2023 (2 years)
Nanterre, France
Contribution to the improvement of the Qradar architecture (more than 60 servers: Console, EP, EC, AppHost, DN ...)
Study on the migration of the Qradar infrastructure to ipv6 addressing
Review of the collection strategy and the DAT
Audit of the Qradar console and managed hosts (Config, raid, certif ....)
Verification of the configuration of the log sources
Correction of problems identified during the audit
Synchronization of the network hierarchy with EDF's SMDB
Implementation of a project to automate Splunk/ELK reports and dashboards using the Qradar API
Automation of Qradar tasks based on the API and the PostgreSQL database
Qradar Audit Cybersecurity Automation Python Bash Data Infrastructure and Architecture
DOCA POSTE
Qradar Technical Referent
PUBLIC SECTOR
November 2019 - December 2021 (2 years and 2 months)
Ivry-sur-Seine, France
Implementation of the QRadar SIEM architecture
Supervision of all SIEM components using a network supervision tool
Ensuring a log collection policy
Implementation of a procedure for setting up rules
Writing of the DAT and flow matrices
Implementation of Risk Management and Vulnerability Management modules
Monitoring of risk management and vulnerability management
Ensuring the implementation and integration of EDR logs on Qradar.
Planning VULCOs with DOCAPOSTE clients (Ensuring meetings and follow-up on vulnerability treatment)
Qradar Qualys Bastion Host Cyber Security System Administration Information Systems Architecture
Société Générale
SOC MCO (RSA SA SIEM)
BANKING AND INSURANCE
November 2018 - May 2019 (7 months)
Ensuring SOC performance and stability
Responding to all requests from internal or external departments
Integration of new solutions to enrich the client's SIEM
Improvement of the SOC architecture and minimizing request wait times to the SIEM
Guaranteeing SIEM supervision (SIEM of the SIEM)
RSA NetWitness SIEM SOC Cybersecurity