Yaya Doumbia

Within BNP Paribas, I am the reference and expert for Cybersecurity in international subsidiaries and I am involved in the following areas:

Internal vulnerability detection and remediation plan monitoring

Expert in the following areas (Network Security, Malware Protection, Patching & Vulnerability Management, DDoS Protection)

Scripting: use of PowerShell to extract data from AD

Scripting: use of Python scripts on Qualys to scan the network.

Within the Directorate, I contributed to the operational and security maintenance of the ACS platform (provisioning, diagnostics, Box and Gateway monitoring), and its evolution by managing user needs expressions (EBU) for the supplier, describing functional evolutions in technical and security documentation. Finally, I contributed to incident resolution by escalating from support teams.

My missions:

• Technical lead with expertise in the ACS environment

• Leadership of Redhat system hardening projects based on ANSSI's reference guide directives and vulnerability correction

• Study, design, realization, VSR of projects

• Scoping and launching projects: scope, partitioning, planning, and budget

• Interface and management of multidisciplinary teams: products, validation, operations, suppliers

• Leadership and participation in studies, architecture choices

• Organization and facilitation of project committees/working meetings

• Writing EBUs (user needs expressions)

• Writing SAGs (System Architecture Specifications) and STIs (Technical Interface Specifications)

• Monitoring performance indicators (tracking the number of provisioned and active equipment, which led to the launch of a disk addition project)

• Monitoring system and application obsolescence management

• Interface and management of multidisciplinary teams for incident resolution

• Connecting to systems via SSH jump to diagnose and assist in incident resolution

• MCO/MCS of critical systems

• IT configuration control and compliance

Within the IT department of Safran SA, I contributed to the deployment of a WAN infrastructure, the maintenance of security for assets, and I implemented requests for traffic opening and certificates.

My missions:

• Project scoping and launch: study, design, project realization

• Leadership of WAN and LAN solution deployment

• Mapping and inventory of network and security assets according to the operator's standard

• Deployment from Legacy infrastructure to a new infrastructure operated by OBS

• Identification of hardware, software against the operator's standard

• Management of obsolescence for network and security assets

• Request for opening/derogation of network and security traffic

• Management of certificates related to web applications

• Regular visits to server rooms and verification of good hosting practices