Freelancer profile translated to English.
Back to original languageAbout Waoundé
16 years of experience, including over 7 years in offensive and defensive cybersecurity, in critical sectors (healthcare, finance, telecoms, automotive, utilities).
I support CIOs, CISOs, and SecOps teams in implementing or optimizing their operational cybersecurity strategy: SOC, vulnerabilities, detection, orchestration, KPIs, etc.
Structure a clear and actionable roadmap aligned with the IT strategic plan.
Translate cybersecurity strategy into operational and measurable deliverables.
Develop or enrich your SIEM use cases, challenge them, framed by frameworks (MITRE ATT&CK, NIST, ISO, etc.).
Intensify the use of APIs and automate key routines (XSOAR, Sentinel, etc.).
My added value:
Excellent communicator bilingual (FR/EN), I synthesize technical topics to make them understandable and actionable at the managerial level.
I design precise, usable KPIs, tailored for Executive Committees/Steering Committees as well as SOC Analysts.
I have a strong results-oriented and trust-based culture, because a successful cybersecurity project relies above all on collective buy-in.
French
Native or bilingual
English
Fluent
Can work on-site
Rueil-Malmaison (up to 50km), Orléans (up to 50km), Le Havre (up to 10km), Rouen (up to 10km)
Experience
- RYDGE CONSEILSOC ManagerCONSULTING AND AUDITSNovember 2025 - February 2026 (3 months)Courbevoie, FranceProject management for the redesign of cyber defense activities (SOC, VOC, CTI) and operational implementation, consisting of:Project management and governance
- Strategic scoping with management and stakeholders
- Development of the master plan and critical milestones
- Facilitation of weekly/bi-monthly steering committee meetings (COPIL)
- Risk, budget, and dependency management
- Progress reporting (dashboards and tracking KPIs)
Operational coordination- Organization of the transition between service providers (outgoing/incoming)
- Management of interfaces between client teams, service providers, and integrators
- Maintenance in operational condition (MCO) plan during transition
- Validation of technical and organizational deliverables (with VISA)
Build and implementation of the new SOC- Definition and configuration of detection and response policies
- Deployment of tools (SIEM, EDR, SOAR, CTI platforms)
- Configuration of incident management workflows (Jira, ServiceNow)
- Functional and technical acceptance testing of deployed solutions
Go-live and change management- Development of runbooks and operational procedures
- Training and skill development for SOC teams
- Post-deployment support (stabilization phase)
- Lessons learned and closing documentation
- ServierSOC ManagerPHARMACEUTICALS INDUSTRYJuly 2024 - March 2025 (8 months)Suresnes, FranceTransition between outgoing and incoming provider, 3-month projectManagement of a 24/7 "follow the sun" MSSP (SOC level 2, CERT)🔹 Definition of the strategic and operational roadmap for 2025/2026🔹 Implementation and monitoring of governance bodies: Steering Committee, Working Committee, Project Committee, Strategic Committee🔹 Organization of pentest campaigns to reduce SOC's MTTD/MTTR🔹 Management of daily activities🔹 Team monitoring via PowerBI, ServiceNow, Jira and human resources management (SDM)🔹 Challenge of playbooks (xSOAR), logic of detection rules, incident management🔹 Launch and steering (COPIL) of the following topics:– DMARC (Merox)– Incident Response (cyber crisis management project)– Vulnerability Management (Qualys)– Brand monitoring (RecordedFuture)🔹 Point of contact for SOC escalations via ServiceNow🔹 Project to draft specifications (RFP) for EDR (servers) and NDR solutions🔹 Definition of RACI version 2 for the SOC team🔹 New Azure "landing zone" implemented🔹 Custom detection rules for specific business applications
- AMAYAS ConsultingVulnerability managerENERGY AND UTILITIESAugust 2022 - February 2024 (1 year and 6 months)Joinville-le-Pont, FranceProject for Veolia water technologies, international context (North America, South America, Europe, MEA, APAC):Vulnerability Management - 90% of the timeJob title: Vulnerability managerInternational scope (North America / South America / Europe / APAC / Africa & Middle East)Technical lead of the team (including 1 person dedicated to Acunetix (URL scans) and public IPs).Creation of the target Qualys architecture designCreation of general documentation, proceduresCreation of the RUN framework (based on NIST's)Implementation of the RUNCreation of Qualys, Splunk, ServiceNow dashboardsCreation of managerial and operational KPIsQualys support (MCO)Automation of common tasksCreation of a vulnerability prioritization framework (Excel matrix)Complete integration of an entity (ex-Suez) > Project managementSoC - 10% of the timeCreation of an incident prioritization model (co-author)Vulnerability intelligence and weekly reporting (task performed in pairs)Incident trackingPreparation of the Gsoc GAP analysis (provided by I-tracing) > Project started in December 2023
Recommendations
Be the first to recommend Waoundé
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master of ManagementCESI École Supérieure de l'Alternance2020Master 2, Management SI, option sécurité
- Manager in IT maintenance and support, IT system and information securityCESI École Supérieure de l'Alternance2015Gestionnaire en maintenance et support informatique, Sécurité / sûreté de l'information des systèmes informatiques