Baptiste Pellegrini

• Expanded SOC coverage by creating detection rules for Microsoft Defender and AWS GuardDuty. • Developed alert investigation playbooks for Defender for Cloud and AWS GuardDuty. • Rewrote the entire detection catalog to enable alerting rule deployment through a new CI/CD process. • Onboarded new AXA subsidiaries into the SOC. • Designed the SOC’s MITRE ATT&CK heat map to track detection gaps. • Supervised and mentored an apprentice focused on automating the documentation of detection rules. • Technical context: Microsoft Sentinel, Microsoft Defender, Azure DevOps, AWS GuardDuty, Python, KQL.

• Drove continuous improvement of processes and detection capabilities. • Mentored and provided technical escalation support for L1 SOC analysts. • Collaborated closely with international local teams across the globe. • Automated day-to-day operational tasks, including alert analysis and the detection of outdated code. • Technical context: Microsoft Sentinel, Cybereason, Python, KQL, ArcSight.

• Triaged security alerts and led incident response. • Drove continuous improvement of processes and detection capabilities. • Monitored business specific risks : power grid blackout, fraud. • Analyzed suspicious emails and malware files.