Alexandre Revil-Signorat

– Construction, execution and industrialization of authorization reviews (IAM / UserCube) – Deployment and testing of DLP (Data Loss Prevention) Microsoft tools + SSL inspection – User awareness of good production access practices – Analysis of usage and improper behavior related to technical accounts – Tests for integration of several Threat Intelligence solutions – Securing operating procedures related to employee password renewal processes – Compliance/security of company domain names (referencing, withdrawals) – Employee acculturation and handling of security incidents – Validation and presentation of projects in the various project committee instances (COPIL/COSTRAT/CSE)

Missions transverses en cybersécurité et multisectorielles (vision 360°): – Project management in cybersecurity within the cybersecurity pole of a large banking group, with project steering: Data Loss Prevention (DLP), authorization review (UserCube), technical account security, domain name security – Operational security management within an SSI team (assistance sector), from handling ad-hoc security requests to managing the deployment of security projects (EDR with +100 endpoints covered / MFA / MDM ...) – Integration and operational support of an identity management solution (IAM), via BUILD and RUN activities (insurance sector) – Security risk analyses of IT projects, with a volume of +50 analyses processed (banking sector) – Verifications and audits of Security Assurance Plans (PAS) for subcontractors, with a hundred reviews and a dozen audits in 1 year (railway sector) – ISP (Integration of Security into Projects) in a service center, in the security pole, in direct relation with about twenty interlocutors spread across different teams (internal control, architecture, network) (banking sector) Contributions internes: – Co-animation of the cybersecurity practice of the Nantes office for 1 year (monthly meetings, expertise topics, community events) – Coaching of a student team in the context of an inter-school cybersecurity challenge organized by Wavestone (Wavegame) – Tutoring of a final year master's intern on the theme "Digital Marketing & CIAM", now in CDI in our teams – Occasional participation in discovery appointments for our various prospects

Stage de fin d'études au sein de la division Cybersécurité & Confiance Numérique. Contribution à de multiples missions et réalisation de sujets internes : – Security risk analyses of IT projects – SSI risk analyses using the EBIOS RM method – Analysis of responses to calls for tenders for the implementation of a SOC (Security Operations Center) – Competitive intelligence on cybersecurity players in the Grand Ouest region – Contribution to the drafting of commercial proposals – Co-realization of a prospecting plan for the industrial cybersecurity offer within the Nantes office – Internship subject on the challenges and risk management of industrial cybersecurity

Pendant ces 2 mois de stage, j'ai pu dans un premier temps découvrir les équipements industriels particuliers à ce secteur d'activité, puis dans un second temps, réaliser diverses missions telles que : – A complete study of industrial risks near the site, notably through a census of classified facilities for environmental protection (ICPE) – An analysis of safety events impacting the proper temporal progress of site maintenance activities – Migration of a database listing industrial equipment, to facilitate the monitoring of the IT park by the entire site IT department – Proposals for improving the implementation of intervention reliability practices, in collaboration with another engineering student and human factors specialists

Je me suis vu attribuer la majorité des missions réalisables par un équipier : – Poste en cuisine (travail à la chaîne) – Service en salle – Plonge – Dépotage de livraisons en chambre froide – Nettoyage du restaurant Le temps de travail était de 24 heures hebdomadaires, réparties lors des phases de forte affluence

Ce stage ouvrier d'une durée d'un mois m'a permis de découvrir ce secteur d'activité auquel je n'étais pas du tout familier, et ce, par le biais de missions telles que : – Le suivi d'un électrotechnicien, sur site, avec réalisation d'opérations élémentaires en électricité – La maintenance, ainsi que le remplacement de pompes de relevage et d'eaux usées à débits très élevés