Description

Cybersecurity professional with hands-on experience, I help organizations strengthen their cyber resilience by improving their detection capabilities, investigating security incidents, identifying vulnerabilities, and implementing security best practices across on-premise and cloud environments.

Domaines d’expertise

Langues

Français
Bilingue ou natif
Anglais
Capacité professionnelle complète

Préférences en matière de lieu de travail

Accepte de travailler sur site

Lyon (jusqu’à 50 km)

Amaris Consulting
Azure Security Cloud Consultant
AGENCE & SSII
janvier 2026 - avril 2026 (3 mois)
Securing workloads (Bastion, AKS, Storage/Blob, Cosmos DB, Containers, Stream Analytics, VMs, Servers) with continuous optimization using Advisor
and Defender for Cloud
Microsoft Azure Cloud Azure Azure IoT Hub advisor M365
Rhon'Telecom
Systems and Security Engineer
TÉLÉCOMMUNICATIONS
septembre 2023 - janvier 2026 (2 ans et 4 mois)
Lyon, France
• CSIRT: Detection, analysis, and response to security incidents + creation of procedures (Microsoft Defender for Endpoint, M365 Unified Audit Log)
• Deployment of a SIEM (Wazuh) + creation of alert correlation rules
• Firewall management (Fortigate): rule management, opening/closing flows,
• VPN tunnel implementation
• DevSecOps: CI/CD (Azure DevOps)
• Administration of Office 365 suite (Entra ID, Intune, Security Admin, etc.)
• Employee awareness training (Gophish, LUCY)
• Compliance with NIS2 / ISO 27001 + ITIL recommendations (Disaster
• Recovery Plan, access management, segmentation, etc.)
• System hardening (hosting, workstations, applications)
• GRC (deployment prerequisites, access management tools, webinar hosting)
• Weekly reporting: KPI tracking and report automation (Power BI)
• Employee training
• Business analysis (AMOA): coordination, Product Owner alignment and scoping (Secure by Design)
EDR SIEM Fortinet Azure DevOps Microsoft Power BI
Almarena IT
Systems and Security Administrator
octobre 2021 - mars 2023 (1 an et 5 mois)
Lyon, France
• Application pentesting (Nmap, MSFConsole, OWASP ZAP, etc.)
• Website security (WAF, headers)
• Hosting management (Apache, NGINX)
• DevSecOps: automation of DAST & SAST, file deployments, backup and log creation (GitLab)
• Governance: implementation of ISO 27001 (Disaster Recovery Plan + password policy)
• Risk analysis: ISO 27005 (EBIOS RM)
PenTest Nmap Gitlab OWASP SonarQube