Chedli RIHANE

Lead Cybersecurity SOC Engineer chez Orange Cyberdefense

Salaire / Taux journalier

Paris, France

Mobilité : Île-de-France

Freelance, ouvert au CDI

Peut venir sur site

Expertises

CybersécuritéPythonLinuxIngénieur réseauRequêtes SQLPHPJavaJavascriptC++Support clientServiceNow

Langues

Arabe (Maternelle)Anglais (Maternelle)Français (Courant)Italien

À propos

Introduction

Ingénieur en cybersécurité avec plus de 6 ans d'expérience en SOC, incident response (L2/L3) et threat hunting dans des environnements enterprise critiques chez Orange CyberDefense. Spécialisé dans l'investigation avancée d'incidents de sécurité, l'analyse forensique endpoint et réseau, ainsi que la détection de menaces complexes (APT, ransomware, phishing ciblé). Forte expertise en corrélation d'événements, analyse comportementale et amélioration des règles SIEM. Expérience approfondie sur environnements hybrides (on-premise et cloud) avec utilisation d'outils avancés tels que Splunk, IBM QRadar, CrowdStrike Falcon, FireEye, Qualys et Google Chronicle Security.

Liens

Expérience de travail

Orange Cyberdefense

sept. 2018 - Présent

8 ans 2 mois

Paris, France

Lead Cybersecurity SOC Engineer

janv. 2024 - Présent

2 ans 10 mois

Paris, France

Focusing on more technical and decision-making responsibilities.

Cybersecurity SOC Analyst

sept. 2018 - déc. 2023

5 ans 4 mois

Région de Paris, France

Integration to the various CybeSOC to detect advanced threats and respond to incidents as quickly and decisively as possible. This is achieved by combining EDR, NDR and SIEM tools into a well-integrated whole, while retaining immediate visibility of all attacks: - Entry to the Orange Cyberdefense Academy (OCDA). - Multi-client/project technical environment: • SIEM: Qradar, Splunk & RSA Netwitness (logs collecting, attack detection on the client environment & Threat Hunting) • Orchestration, Automation & Response: Resilient (IBM SOAR) & Demisto (Cortex XSOAR) in management of security alerts and incidents • Automatic Remediation & Cybercrime: Tehtris (XDR/EDR) • Detection & Malware/Forensics investigation: Falcon Crowdstrike, Redline®, FireEye® AX (Forensic Analysis Platforms), FireEye® HX (Proactive Endpoint Security) • Phishing attack analysis: Proofpoint Targeted Attack Prevention (TAP) & Proofpoint Threat Response Auto Pull (TRAP) • Rule creation: FireEye® HXTool • ThreatStream & Intelligence-Driven: Anomali • Monitoring & Advanced Network Analysis: Vectra AI - Cognito Detect • Security & Email Management: Mimecast • Database & incidents impacting the Active directory: ALSID - Security monitoring of AD infrastructures & SQL Server Reporting Services (SSRS) • Secure web & Categorization: Symantec Enterprise Security business, Zscaler Internet Access & Blue Coat Systems -Team activity monitoring. -Proposal and creation of correlation rules. -Security incident management and response. -Preparation of operational documentation. -Monitor the team's quantitative and qualitative achievements. -Training & support for new engineers. -Scope: local France & frequent travel to the USA (ATL/NJ). -Regular on-call duty (nights/weekends). -Business sectors: Industry, Automotive, Healthcare, Banking, Catering.

Network & Security Engineer (Apprentice with Télécom SudParis)

CGI

oct. 2017 - oct. 2018

1 an 1 mois

Saint-Denis, France

• Network engineering: from defining the LAN/WAN network architecture to optimizing and securing it • Technical project management (installation, migration, etc.) as well as implementing developments in our clients' network and security infrastructures • Drafting and validating technical architecture files (DAT) • Auditing the network and security infrastructures of certain clients • Setting up Pentest environments via Kali Linux - Scope: Networking, Firewalling & CyberSecurity. - Technologies used: Palo Alto, Cisco ASA, HP, Nortel, Checkpoint, F5, ShrewSoft, pfSense, Kali Linux, etc. - Methods adopted: Pentesting, DDOS, Scripting, IP Spoofing, SSO, Port Scanning, Payloads, MITM, ARP Poisoning, Sniffer, etc.

Level 2 Network & Support Engineer

AVASO Technology SolutionsFreelance

sept. 2017 - oct. 2017

2 mois

Paris, France

Carrying out various missions throughout France, the aim of which is to gain more experience in support and computer networks: - Installation and configuration of routers, and migration of lines. - N2 support, monitoring of incidents of active equipment (Routers, Switches, Terminals) and modification and improvement of configurations. - Installation, maintenance, support and service to users in IT. - Management of access rights, for machines and users. - 1st and 2nd level technical support on micro-computing and network-analysis products. - Resolution of incidents and breakdowns using the common tool of IT Global (Service Now). Missions developed in premises and Datacenters located in: Lyon, Paris and Volx. I was able to considerably improve my English thanks to an internationally oriented work environment, (recurring exchanges with a team of engineers located in Denmark).

Network & Supervision Engineer (End-of-studies internship at TSE & IAE Saint-Étienne)

Groupe Casino

mars 2017 - oct. 2017

8 mois

Saint-Étienne, France

End-of-studies internship in the IT department, network and supervision division. 3 projects: 1- Develop the network equipment supervision platform (managed under hyper-v) in order to optimize its operation, facilitate its operation and developments, optimize alert management, standardize procedures and study the implementation of new features: • Incident monitoring of active equipment and configuration improvements • Categorize and prioritize alerts • Identify the right level of alerting • Reporting • Integration of plugins and packages • Inventory of HS resources • Organize the upgrade, etc. [The platform monitors several thousand network objects with alerts in the event of major/critical events and also monitors the network infrastructures of DataCenters, sales areas, warehouses, headquarters, etc.] 2- Qualify an IP addressing plan management solution: • Set up a technological watch on IP addressing solutions by studying the existing market, with the aim of evolving towards an IP address management tool that will be used by several internal teams. • Study of paid and open source IP addressing solutions. • Benchmarking. • Selection and implementation of a tool. • Commissioning, etc. 3- Integrate and optimize the operation of warehouse equipment in a new backup tool. Concept of cross-functional management used and developed. Technologies used: Centreon, phpIPAM, NetBox, NIPAP, GestióIP, IPAM, TeemIP, GLPI and BT Diamond IP, Linux, Bash, PHP, SQL, Perl, LDAP, VSS, Check Point, NetScaler, NCM (Network Configuration Manager). Mastery of the supervision tool: "Centreon" Mastery of the IPAM solution: "phpIPAM" I was able to acquire skills related to security (access to active equipment, implementation of certificate authority), and an ability to manage incidents in production environments.

System Engineer

HUTCHINSON NETWORKS LIMITEDFreelance

janv. 2017 - mars 2017

3 mois

Lyon, France

Carrying out various missions all over France, the aim of which is to gain more experience in computer networks that can enrich my abilities to handle practical cases in the field. During these missions carried out in different cities in France, I was accompanied by a network engineer, who guided me throughout the service: • On-Site Pre-Work • Rack Elevations • VIS Server Install • Port Blocking • Services Rack Clean • Network Rack Clean • Decibel Testing • Miscellaneous Tasks • Photo Checklist • On-Site Post-Work

Intern

Orange Tunisie

juil. 2015 - août 2015

2 mois

Bizerte, Tunisie

Initiative internship: ● Study and development of hybrid fixed access network architectures (optical and copper) for increasing throughput. ● Development of a QoS-QoE correlation model (analyze data collected from the OTN network, apply the different Data Mining tasks such as Clustering, Pattern Discovery, etc.). ● Implementation of test benches. ● Creation or update of technical and commercial documentation for the Datacenter service and creation of Templates for users.

Sales agent (1st year internship at Télécom Saint-Étienne)

Destock Sport et Mode.com

janv. 2015 - mars 2015

3 mois

Saint-Étienne, France

As part of my first internship at an engineering school in the "Destock Sport" store, I was required to perform several functions: ● Reception of customers, listening, fault finding, computer data entry ● File monitoring: customer telephone interviews, computer updates ● Storage: reorganization of the store's stock ● Merchandising: Shelving ● Familiarization with the works exhibited ● Maintenance of a network through customers on the internet ● Management of product stock and level control ● Packaging and conservation ● Delivery of products

Systems, Networks & Security Administrator (End-of-studies internship at ISET-B)

ANSI - tunCERT

févr. 2014 - juil. 2014

6 mois

Tunis, Tunisie

End of studies project within the National Agency for Computer Security as part of obtaining an applied degree in computer networks and services. The proposed solution is based on the development of integrated virtual firewalls whose main role is to control all data circulating in the internal and external network in order to increase the level of control and thus the level of security. These two firewalls ("ASA 842" / "PfSense") are developed in an emulator called "GNS3", its role is to group and manage all the equipment of the computer system and thus thanks to the international guide "CISCO SAFE", we can apply the design methods for corporate security. ("GNS3" is an open-source tool that allows you to create virtual networks. Initially created to allow network engineers to learn how Cisco equipment works, it was later extended to allow the study of other types of equipment. In GNS3, these hardware devices are simulated, meaning that you can perform almost the same operations as on real equipment but without having to acquire them.). On the other hand, there was an evaluation of open source Firewall solutions and the validation of the "Pfsense" product. I participated in the deployment of the solution in almost 50 schools and the customization of the "Pfsense" management interfaces as well as missions in Audit and IT security. -Technologies used: Linux, PfSense, Bash, LDAP, LAN/WAN, TCP/IP, PHP, CSS, CISCO PAQUET TRACER, GNS3. Mastery of the tool: "PfSense"

Computer network maintenance technician (2nd year internship at ISET-B)

Centre National de l'Informatique

janv. 2013 - mars 2013

3 mois

Tunis, Tunisie

Advanced training course: Subject: Management and Administration of the company's LAN and WAN networks. Department: Network and Security Department. Tasks: -Installation, maintenance, support and service to users in IT. -1st and 2nd level technical support on micro-computer products and network analysis. -Ensure the maintenance and updating of the IT equipment. -Backup techniques and media. -Virus protection. -Peripheral management. -Monitoring of gateways, routers, Switches. ● Acquired skills: OSI model, VLSM slicing, handling of Packet tracer software, TCP/IP. ● Tasks performed: Static and dynamic routing / Static and dynamic NAT / Standard and extended ACL / LS configuration (dedicated line) / Frame relay, Building cabling and network maintenance.

Financial Agent (1st year internship at ISET-B)

Amen Bank

janv. 2012 - mars 2012

3 mois

Tunis, Tunisie

Introductory internship/first experience: -Learning about the banking sector and its organization. -Direct contact with customers (Opening and closing accounts, depositing checks and foreign exchange transactions). -Learning about the different types of financing instruments for Small and Medium Enterprises. -Studying the profitability of projects using equity and credit financing. -Managing requests and issuing checkbooks, savings books and electronic money cards. -Monitoring unpaid checks. -Assistance in processing operations and loan files.


Formation

Télécom SudParis

Specialized Master ®, Systems and Network Security (SSR) / Information Security of Computer Systems (SSI)

2017 - 2018

1 an 1 mois

Résultat : High honours

The Advanced Track in Systems and Network Security is the Security option of Télécom SudParis that covers the security of systems and networks in order to ensure user authentication, protect access to information, preserve confidentiality and data integrity. The objective of this training is to meet the requirements of security governance in companies with a global approach covering technical, methodological, organizational and regulatory aspects. It provides the knowledge necessary for the development and implementation of a security plan intended to protect the company's vital resources against internal and external attacks of all kinds: intrusions, destruction or theft. The skills acquired during this training will allow you to participate in the entire process of a security study. -3 Cycles: Architectures, Tools and services and SNS.

IAE Saint-Etienne

Master 2 ® , Economic Intelligence & Innovation Management (IEGI)

2016 - 2017

1 an 1 mois

Résultat : Honours

This master's degree aims to provide professional training in the field of business intelligence and innovation management. This is to provide a response to companies facing new needs, whether economic or in terms of management of new technologies. Outcome: - Respond to new business needs in terms of business intelligence and organization of technological changes, - Adopt a behavior aimed at permanently consulting information sources and networks, - Mastery of data processing techniques and innovative activities: Innovation and industrial property law, Economics/Innovation management. - Information engineering: Extraction of knowledge from data, IS and cooperative work. - Strategic exploitation of information: Documentary research techniques, IE approach, Technological and competitive monitoring, Strategy and foresight, Information law.

Télécom Saint-Etienne

Engineering Degree ® , Networks & Telecommunications

2014 - 2017

3 ans 1 mois

Résultat : Honours

Activités et associations : Active member of the Music Club at the Bureau Des Arts (BDA). Active member of the Football Club at the Bureau Des Sports (BDS)

TELECOM Nancy

Computer option, Digital Health Information Technology

2016 - 2016

1 mois

Résultat : 12.875/20

Digital Health Weeks: Testing prognostic markers and verifying their suitability for metastatic progression. 2 main modules: • Coding and processing of medical data. • Health information systems. -Software used: RStudio.

Higher Institute of Technological Studies of Bizerte (ISET-B)

Applied license ® , Networks & IT Services (RSI)

2011 - 2014

3 ans 1 mois

Résultat : Highest honours

Activités et associations : Cisco Club Coordinator, Music Club Manager at the Arts Office & Drawing and Painting Club Manager at the Arts Office.

Bizerte Farhat Hached High School

Baccalaureate S

2007 - 2011

4 ans 1 mois

Résultat : High honours


Licences et certifications

The Art of Investigation

Délivré le : avr. 2025

Certifié par Splunk

Data and Tools for Defense Analysts

Délivré le : avr. 2025

Certifié par Splunk

Le meilleur endroit pour trouver votre prochaine opportunité

© 2026. Tous droits réservés.