Audric A.

Enedis is the company that operates France’s public electricity distribution network and is the parent organization behind the Linky smart meter. It manages grid maintenance, electricity delivery, and the deployment and operation of Linky across the country. Activities: • Lead threat modeling workshops in collaboration with business and infrastructure teams to identify potential risks and attack vectors. • Design and implement detection rules and advanced threat hunting analytics in Splunk (ES, RBA), targeting defined threat scenarios. 
• Act as a technical leader for detection use cases on Microsoft 365 services and Entra ID, driving visibility and threat coverage across cloud identity and productivity platforms. • Assess and enhance detection coverage using the MITRE ATT&CK framework and custom KPIs. • Drive continuous improvement by partnering with SOC analysts, red teamers, and auditors to refine detection strategies. • Develop and deliver workshops to train SOC Analysts and Incident Responders in incident handling, investigation methodologies, and remediation procedures. • Contribute to the evolution of the detection engineering lifecycle, including automation of rule deployment, testing, and operational processes. • Stay current with detection engineering advancements, tooling, and industry practices to continuously improve detection design and automation.

• Support major French enterprises and fast-growing start-ups in securing their information systems, delivering risk assessments, security-by-design workshops, remediation roadmaps, and governance models. • Lead incident-response engagements covering the full lifecycle: detection and scoping, containment, eradication, recovery, and post-incident hardening. Produce detailed forensic reports with findings, executive summary and an actionable improvement roadmap. • Conduct comparative studies and benchmarks of security solutions: define evaluation criteria, run proofs of concept, analyse TCO, and present decision dashboards that guide technology selection and stack optimisation. • With 2 co-founders, developed Feedlestack, a web and mobile app to help cybersecurity professionals keep up with the news. Tech stack: Azure Functions/Cosmo DB/Gitlab CI/CD, TypeScript/Auth0/React Native/Vue.js.

AG2R La Mondiale is a French insurance and social protection group specializing in health, life insurance, pensions, and savings. It supports individuals and businesses by providing coverage, financial planning, and long-term protection solutions. Activities: • Led a detailed organizational audit to refine CERT roles and responsibilities. • Benchmarked SOAR solutions and Threat Intelligence Platforms, customizing them to meet organizational needs. • Implemented the SOAR and Threat Intel platform, established processes, and provided training for effective use of the new tools.

Groupe Pomona is a French food distribution company specializing in supplying fresh, frozen, and packaged food products to restaurants and food professionals. It supports the food service sector by delivering a wide range of ingredients through its specialized distribution networks. Activities: Upgrade and improvment of the group Information System monitoring solution: • Upgrade of monitoring solution: What's Up Gold v16 • Implementation of the maintenance process • Team training

• Development of the client-server oriented membership management application (formerly under Access) using Windev • Installation of the Windows Server 2008 R2 server (25 users) and network redesign • Installation of a secured Remote Desktop Gateway to access RemoteApp applications • Deployment • End-users training • Application and server management

• Renewal of 20 user workstations • Installation under Windows 7 Pro (using Sysprep) • Products configuration • Compatibility checks

Configuration and deployment of an automated Windows Installation Kit (WAIK) on 30 computers.