
Chedli RIHANE
Lead Cybersecurity SOC Engineer chez Orange Cyberdefense
Salaire / Taux journalier
Paris, France
Mobilité : Île-de-France
Freelance, ouvert au CDI
Peut venir sur site
Expertises
Langues
À propos
Introduction
Ingénieur en cybersécurité avec plus de 6 ans d'expérience en SOC, incident response (L2/L3) et threat hunting dans des environnements enterprise critiques chez Orange CyberDefense. Spécialisé dans l'investigation avancée d'incidents de sécurité, l'analyse forensique endpoint et réseau, ainsi que la détection de menaces complexes (APT, ransomware, phishing ciblé). Forte expertise en corrélation d'événements, analyse comportementale et amélioration des règles SIEM. Expérience approfondie sur environnements hybrides (on-premise et cloud) avec utilisation d'outils avancés tels que Splunk, IBM QRadar, CrowdStrike Falcon, FireEye, Qualys et Google Chronicle Security.
Expérience de travail
Orange Cyberdefense
sept. 2018 - Présent
8 ans 2 mois
Paris, France
Lead Cybersecurity SOC Engineer
janv. 2024 - Présent
2 ans 10 mois
Paris, France
Focusing on more technical and decision-making responsibilities.
Cybersecurity SOC Analyst
sept. 2018 - déc. 2023
5 ans 4 mois
Région de Paris, France
Integration to the various CybeSOC to detect advanced threats and respond to incidents as quickly and decisively as possible. This is achieved by combining EDR, NDR and SIEM tools into a well-integrated whole, while retaining immediate visibility of all attacks: - Entry to the Orange Cyberdefense Academy (OCDA). - Multi-client/project technical environment: • SIEM: Qradar, Splunk & RSA Netwitness (logs collecting, attack detection on the client environment & Threat Hunting) • Orchestration, Automation & Response: Resilient (IBM SOAR) & Demisto (Cortex XSOAR) in management of security alerts and incidents • Automatic Remediation & Cybercrime: Tehtris (XDR/EDR) • Detection & Malware/Forensics investigation: Falcon Crowdstrike, Redline®, FireEye® AX (Forensic Analysis Platforms), FireEye® HX (Proactive Endpoint Security) • Phishing attack analysis: Proofpoint Targeted Attack Prevention (TAP) & Proofpoint Threat Response Auto Pull (TRAP) • Rule creation: FireEye® HXTool • ThreatStream & Intelligence-Driven: Anomali • Monitoring & Advanced Network Analysis: Vectra AI - Cognito Detect • Security & Email Management: Mimecast • Database & incidents impacting the Active directory: ALSID - Security monitoring of AD infrastructures & SQL Server Reporting Services (SSRS) • Secure web & Categorization: Symantec Enterprise Security business, Zscaler Internet Access & Blue Coat Systems -Team activity monitoring. -Proposal and creation of correlation rules. -Security incident management and response. -Preparation of operational documentation. -Monitor the team's quantitative and qualitative achievements. -Training & support for new engineers. -Scope: local France & frequent travel to the USA (ATL/NJ). -Regular on-call duty (nights/weekends). -Business sectors: Industry, Automotive, Healthcare, Banking, Catering.
Network & Security Engineer (Apprentice with Télécom SudParis)
CGI
oct. 2017 - oct. 2018
1 an 1 mois
Saint-Denis, France
• Network engineering: from defining the LAN/WAN network architecture to optimizing and securing it • Technical project management (installation, migration, etc.) as well as implementing developments in our clients' network and security infrastructures • Drafting and validating technical architecture files (DAT) • Auditing the network and security infrastructures of certain clients • Setting up Pentest environments via Kali Linux - Scope: Networking, Firewalling & CyberSecurity. - Technologies used: Palo Alto, Cisco ASA, HP, Nortel, Checkpoint, F5, ShrewSoft, pfSense, Kali Linux, etc. - Methods adopted: Pentesting, DDOS, Scripting, IP Spoofing, SSO, Port Scanning, Payloads, MITM, ARP Poisoning, Sniffer, etc.
Level 2 Network & Support Engineer
AVASO Technology SolutionsFreelance
sept. 2017 - oct. 2017
2 mois
Paris, France
Carrying out various missions throughout France, the aim of which is to gain more experience in support and computer networks: - Installation and configuration of routers, and migration of lines. - N2 support, monitoring of incidents of active equipment (Routers, Switches, Terminals) and modification and improvement of configurations. - Installation, maintenance, support and service to users in IT. - Management of access rights, for machines and users. - 1st and 2nd level technical support on micro-computing and network-analysis products. - Resolution of incidents and breakdowns using the common tool of IT Global (Service Now). Missions developed in premises and Datacenters located in: Lyon, Paris and Volx. I was able to considerably improve my English thanks to an internationally oriented work environment, (recurring exchanges with a team of engineers located in Denmark).
Network & Supervision Engineer (End-of-studies internship at TSE & IAE Saint-Étienne)
Groupe Casino
mars 2017 - oct. 2017
8 mois
Saint-Étienne, France
End-of-studies internship in the IT department, network and supervision division. 3 projects: 1- Develop the network equipment supervision platform (managed under hyper-v) in order to optimize its operation, facilitate its operation and developments, optimize alert management, standardize procedures and study the implementation of new features: • Incident monitoring of active equipment and configuration improvements • Categorize and prioritize alerts • Identify the right level of alerting • Reporting • Integration of plugins and packages • Inventory of HS resources • Organize the upgrade, etc. [The platform monitors several thousand network objects with alerts in the event of major/critical events and also monitors the network infrastructures of DataCenters, sales areas, warehouses, headquarters, etc.] 2- Qualify an IP addressing plan management solution: • Set up a technological watch on IP addressing solutions by studying the existing market, with the aim of evolving towards an IP address management tool that will be used by several internal teams. • Study of paid and open source IP addressing solutions. • Benchmarking. • Selection and implementation of a tool. • Commissioning, etc. 3- Integrate and optimize the operation of warehouse equipment in a new backup tool. Concept of cross-functional management used and developed. Technologies used: Centreon, phpIPAM, NetBox, NIPAP, GestióIP, IPAM, TeemIP, GLPI and BT Diamond IP, Linux, Bash, PHP, SQL, Perl, LDAP, VSS, Check Point, NetScaler, NCM (Network Configuration Manager). Mastery of the supervision tool: "Centreon" Mastery of the IPAM solution: "phpIPAM" I was able to acquire skills related to security (access to active equipment, implementation of certificate authority), and an ability to manage incidents in production environments.
System Engineer
HUTCHINSON NETWORKS LIMITEDFreelance
janv. 2017 - mars 2017
3 mois
Lyon, France
Carrying out various missions all over France, the aim of which is to gain more experience in computer networks that can enrich my abilities to handle practical cases in the field. During these missions carried out in different cities in France, I was accompanied by a network engineer, who guided me throughout the service: • On-Site Pre-Work • Rack Elevations • VIS Server Install • Port Blocking • Services Rack Clean • Network Rack Clean • Decibel Testing • Miscellaneous Tasks • Photo Checklist • On-Site Post-Work
Intern
Orange Tunisie
juil. 2015 - août 2015
2 mois
Bizerte, Tunisie
Initiative internship: ● Study and development of hybrid fixed access network architectures (optical and copper) for increasing throughput. ● Development of a QoS-QoE correlation model (analyze data collected from the OTN network, apply the different Data Mining tasks such as Clustering, Pattern Discovery, etc.). ● Implementation of test benches. ● Creation or update of technical and commercial documentation for the Datacenter service and creation of Templates for users.
Sales agent (1st year internship at Télécom Saint-Étienne)
Destock Sport et Mode.com
janv. 2015 - mars 2015
3 mois
Saint-Étienne, France
As part of my first internship at an engineering school in the "Destock Sport" store, I was required to perform several functions: ● Reception of customers, listening, fault finding, computer data entry ● File monitoring: customer telephone interviews, computer updates ● Storage: reorganization of the store's stock ● Merchandising: Shelving ● Familiarization with the works exhibited ● Maintenance of a network through customers on the internet ● Management of product stock and level control ● Packaging and conservation ● Delivery of products
Systems, Networks & Security Administrator (End-of-studies internship at ISET-B)
ANSI - tunCERT
févr. 2014 - juil. 2014
6 mois
Tunis, Tunisie
End of studies project within the National Agency for Computer Security as part of obtaining an applied degree in computer networks and services. The proposed solution is based on the development of integrated virtual firewalls whose main role is to control all data circulating in the internal and external network in order to increase the level of control and thus the level of security. These two firewalls ("ASA 842" / "PfSense") are developed in an emulator called "GNS3", its role is to group and manage all the equipment of the computer system and thus thanks to the international guide "CISCO SAFE", we can apply the design methods for corporate security. ("GNS3" is an open-source tool that allows you to create virtual networks. Initially created to allow network engineers to learn how Cisco equipment works, it was later extended to allow the study of other types of equipment. In GNS3, these hardware devices are simulated, meaning that you can perform almost the same operations as on real equipment but without having to acquire them.). On the other hand, there was an evaluation of open source Firewall solutions and the validation of the "Pfsense" product. I participated in the deployment of the solution in almost 50 schools and the customization of the "Pfsense" management interfaces as well as missions in Audit and IT security. -Technologies used: Linux, PfSense, Bash, LDAP, LAN/WAN, TCP/IP, PHP, CSS, CISCO PAQUET TRACER, GNS3. Mastery of the tool: "PfSense"
Computer network maintenance technician (2nd year internship at ISET-B)
Centre National de l'Informatique
janv. 2013 - mars 2013
3 mois
Tunis, Tunisie
Advanced training course: Subject: Management and Administration of the company's LAN and WAN networks. Department: Network and Security Department. Tasks: -Installation, maintenance, support and service to users in IT. -1st and 2nd level technical support on micro-computer products and network analysis. -Ensure the maintenance and updating of the IT equipment. -Backup techniques and media. -Virus protection. -Peripheral management. -Monitoring of gateways, routers, Switches. ● Acquired skills: OSI model, VLSM slicing, handling of Packet tracer software, TCP/IP. ● Tasks performed: Static and dynamic routing / Static and dynamic NAT / Standard and extended ACL / LS configuration (dedicated line) / Frame relay, Building cabling and network maintenance.
Financial Agent (1st year internship at ISET-B)
Amen Bank
janv. 2012 - mars 2012
3 mois
Tunis, Tunisie
Introductory internship/first experience: -Learning about the banking sector and its organization. -Direct contact with customers (Opening and closing accounts, depositing checks and foreign exchange transactions). -Learning about the different types of financing instruments for Small and Medium Enterprises. -Studying the profitability of projects using equity and credit financing. -Managing requests and issuing checkbooks, savings books and electronic money cards. -Monitoring unpaid checks. -Assistance in processing operations and loan files.
Formation
Télécom SudParis
Specialized Master ®, Systems and Network Security (SSR) / Information Security of Computer Systems (SSI)
2017 - 2018
1 an 1 mois
Résultat : High honours
The Advanced Track in Systems and Network Security is the Security option of Télécom SudParis that covers the security of systems and networks in order to ensure user authentication, protect access to information, preserve confidentiality and data integrity. The objective of this training is to meet the requirements of security governance in companies with a global approach covering technical, methodological, organizational and regulatory aspects. It provides the knowledge necessary for the development and implementation of a security plan intended to protect the company's vital resources against internal and external attacks of all kinds: intrusions, destruction or theft. The skills acquired during this training will allow you to participate in the entire process of a security study. -3 Cycles: Architectures, Tools and services and SNS.
IAE Saint-Etienne
Master 2 ® , Economic Intelligence & Innovation Management (IEGI)
2016 - 2017
1 an 1 mois
Résultat : Honours
This master's degree aims to provide professional training in the field of business intelligence and innovation management. This is to provide a response to companies facing new needs, whether economic or in terms of management of new technologies. Outcome: - Respond to new business needs in terms of business intelligence and organization of technological changes, - Adopt a behavior aimed at permanently consulting information sources and networks, - Mastery of data processing techniques and innovative activities: Innovation and industrial property law, Economics/Innovation management. - Information engineering: Extraction of knowledge from data, IS and cooperative work. - Strategic exploitation of information: Documentary research techniques, IE approach, Technological and competitive monitoring, Strategy and foresight, Information law.
Télécom Saint-Etienne
Engineering Degree ® , Networks & Telecommunications
2014 - 2017
3 ans 1 mois
Résultat : Honours
Activités et associations : Active member of the Music Club at the Bureau Des Arts (BDA). Active member of the Football Club at the Bureau Des Sports (BDS)
TELECOM Nancy
Computer option, Digital Health Information Technology
2016 - 2016
1 mois
Résultat : 12.875/20
Digital Health Weeks: Testing prognostic markers and verifying their suitability for metastatic progression. 2 main modules: • Coding and processing of medical data. • Health information systems. -Software used: RStudio.
Higher Institute of Technological Studies of Bizerte (ISET-B)
Applied license ® , Networks & IT Services (RSI)
2011 - 2014
3 ans 1 mois
Résultat : Highest honours
Activités et associations : Cisco Club Coordinator, Music Club Manager at the Arts Office & Drawing and Painting Club Manager at the Arts Office.
Bizerte Farhat Hached High School
Baccalaureate S
2007 - 2011
4 ans 1 mois
Résultat : High honours
Licences et certifications
The Art of Investigation
Délivré le : avr. 2025
Data and Tools for Defense Analysts
Délivré le : avr. 2025