Florian Severac

• Daily alerts monitoring, complex investigation on logs (triage) and respond to security incidents on WORKSTATION, SERVER, ACTIVE DIRECTORY, 0365 and AWS
• Design custom detection (develop rules with SIEM) targeting PowerShell threats based on MITRE ATT&CK
• Design custom detection (develop rules with SIEM) targeting Windows servers based on MITRE ATT&CK
• Design threat detections based on EDR sensors (like malware detection)

• Daily alerts monitoring, complex investigation on logs (triage) and respond to security incidents on WORKSTATION, SERVER, ACTIVE DIRECTORY.
• Custom detection on attacks that is used by threats actors (develop rules with SIEM) targeting ACTIVE DIRECTORY.
• Enhanced the efectiveness of security monitoring services ofered by MSSP by spearheading monitoring initiatives for Active Directory environments to optimize detection and response mechanisms
• Managed the AIRBUS CYBER MSSP initiative by applying project management expertise to drive the implementation of France Televisions new SOC within 3 months

Improve detection strategy, logging policy and incident response procedures;
Security events handling
Instructor.

• Established a new Security Operations Center (SOC) by improving planning, detection, documentation, and investigation

• Streamlined incident response processes by formulating alert parameters and correlation rules to optimize threat detection
• Improved the traceability of Morphos IT information systems by 30% by implementing a comprehensive log management policy to adapt to evolving threats

• Identified areas for security enhancement and remediation by analyzing Qualys reports specific to Unix environments to recommend corrective actions (vulnerability scanning)
• Minimized downtime by managing Splunk administration tasks and resolving troubleshooting issues to maintain system functionality

• custom detection rules to detect threat
• Parsing logs
• Reduce false positive

• Set up conformity controls on a SIEM
• Custom detection to detect fraud attempts.
• SIEM optimization