Mr Kaaniche

– Provide punctual cybersecurity consultancy services to key account/SME clients. – Manage strategic activities and key cybersecurity operations for SME/corporate clients: Hardening security posture and strategically aligning their cybersecurity strategies with business objectives and compliance. – Manage cyber risks, either assessing the maturity of security capabilities for my clients. – Support of security audits and assisting clients in the implementation of organisational and technical measures to mitigate cyber risks in function of security frameworks and independent view. – Reporting to the management/security teams of my clients (definition of KPI's and design of dashboards).

– Design of secure architecture and deployment of version 2 of the satellite management platform, including configurations and patches of HW IS on classified and unclassified networks. – Lead cyber security operations and IT activities of teams (10 people) in the on-premise SOC involving 3 platforms: OPS (operation), TRA (tests), VAL (validation) of version 1 of the GNSS platform for managing communications for existing GALILEO navigation satellites. – Ensure that cybersecurity requirements are compliant with NATO/NIS2 standards using NATO/EU public and classified resources for unclassified and classified networks. – Management of Palo Alto/Fortinet firewall clusters and DMZ (DeMilitarized Zone) networks: remote servers, Honeypots, etc. – Establish strategies for optimizing the resources of critical blade servers in the data center hosting virtual machines and critical data from the APOLLO + GALILEO space systems. – Propose process/procedure improvement strategies and business continuity/recovery plans (BCP/BRP) to ensure the availability/recovery of critical services within the global infrastructure. – Management of security/system L4 tickets with HPE support (Hewlett Packard Enterprise support.hpe.com): Replacement of network equipment in datacenter and backup configuration management: L3 Switch HP Aruba 2930F. Replacement of RAM memory (cold plug) on HP ProLiant BL460c Gen9 Server Blade without interruption of critical data from space systems. – Management/configuration of virtual servers/machines/storage (vCPU/RAM/HDD) with Vsphere+VmWare ESXi v7.0 hypervisor/Ansible and supervision of HP TAPE storage servers with SCALITY RING Supervisor Administration (web GUI) to provide continuous storage for APOLLO/GALILEO data. – Management of FOX IT DataDiode FDDv3-1r-F servers in classified networks (purge of blocked classified file transfers, offline security updates...).

– Founder & Owner of Cybermakint OÜ, private limited company based in Tallinn, Estonia, specialized in cybersecurity and IT consulting services. – Provide punctual cybersecurity services as Consultant for clients: SME, large companies/organizations. – Hire contractor consultants for cybersecurity needs of clients.

– Government Program of Deployment of CSOC (Cyber Security Operation Center) with secure architecture design for ESA as part of the establishment of European Cybersecurity Center in Redu, taking in account cyber risks + physical security with teams, needed to protect unclassified/classified DATA (from Restricted to TOP SECRET) including critical space systems (telecommunications satellites (Artemis), Earth (Proba 1), solar observation (Proba 2) navigation (Galileo) used by ESA, RSS (Redu Space Services) and third parties Avanti, Eutelsat, SES) with separated Networks (unclassified, classified, AIRGAP...). Project linked with Leonardo (Vitrociset + Telespazio Belgium) – Propose improvements for SOC Risk Management Modeling and Security Diagram with Archimate using CMMC SOC/SABSA security framework. – Test & audit of security architecture & network of space systems with CyberRange cyberwiser.eu – Audit of Source code of CSP Protocol (Cubesat Space Protocol) used by ESA for embedded systems of Cubesat Satellites. – Creation and Update of "Playbook" repository documentation for SOC resources, including procedures/process. – Deployment/Administration of MSSP hybrid SOC (SIEM QRadar, Splunk; Cloud SIEM MS Sentinel Microsoft 365 Defender/Azure Security Center, servers, domain controllers LDAP, Firewalls, EDR/XDR, SOAR, SWG, DLP, hypervisors, data diodes...) and MDR (Managed Detection Response) services involving Infrastructures and Networks Security of Rheagroup and their clients. – Improving SOC detection capabilities (Installation/configuration of logs collectors, AQL rules/uses cases, offenses/alerts/events, SIEM applications using Al/Machine Learning for UEBA, IOC, etc.) – Crisis Management and Management of security incidents: Qualification, Analysis, Validation, Remediation until L4 end point of contact with support team of security solutions. – Creation & Implementation of KPIs, SLAs, Dashboards, penalties, reporting for SOC team. – Participation in compliance audits for ISO27001 certification of Rheagroup SOC, 3 times, certification obtained. – Project of Deployment Palo Alto Cortex XSOAR with MSSP license for SOC automation to solve some L2 security incidents automatically (emails, malwares, links). – PKI Automation with Horizon Evertrust PKI platform for Certificate Lifecycle Management (CLM) for devices involved in on-premise and cloud environments. – Perform risk assessments on the security of "unclassified" and "classified" information and implement mitigation measures in coordination with SOC Manager and CISO. – Monitoring in real time cyber risks using Cyber risk mapping with Diligent ERM software and other security tools. – Project to deploy IAM+PAM solutions and proposing a comparison of Wallix Bastion 8 + CyberArk Privileged Access Security v12 before purchase and validation by Rheagroup Business Service. – Daily presentation (turnover, 1 time/week) of SOC performance as Scrum Master for SOC team. – Cloud Security Administrator (restricted) of Microsoft 365 Defender and Azure Security center. – Monitoring of sensitive files classified at NATO/EU Secret levels – Service Vulnerability Owner: Perform manual & scheduled scans on workstations/servers. CTI, Vulnerability/Patch Management in a WAN perimeter (Europe + Canada), Research of 0-day exploit and APT groups in cybercrime forums and dark web open/closed sources to anticipate cyber-attacks. Contact server owners and collaborate with Rheagroup stakeholders (IT, Business, Executive...) to apply and control patch and security measures. – Management of SOC Team (6 people) and MSSP licences of security solutions of SOC – Provide Advises for the strategies of MSSP SOC to get client for Cybersecurity Directors on meetings – Propose strategies and baselines for management of SOC projects to complete it with costs efficiency – Work as SOC Manager by Interim: replace SOC manager during absences, review security incidents, report and present improvement of SOC detection and response capabilities, events to CISO and others stakeholders during meetings, manage SOC activities, trainings of SOC team, form new SOC analysts/engineers in the SOC environment. – Security clearances SECRET NATO + SECRET EU obtained in march 2023, valid until 2028.

– Resolve requests and security incidents related to security (opening of FireWall feeds, authorization to access URLs ...) without access on firewall rules, and following only IT security policy of company. – Validate security/admin rights on LDAP and security request involving IT system classified (secret) and manage BT & ATOS teams to follow their actions performed on Datacenter before to close requests. – Check and assess each vulnerability sent by Naval Group CERT and evaluate cyber risks according to the perimeter involved. – Update new rules of IT security policy needed to choose the right decision for each new user requests.

– Altran sponsorship project: Secure 2 Websites running on CMS Wordpress with http protocol and OVH shared hosting, already hacked. Search & Find Solutions to perform this task before 6 months and avoid new cyberattack following your plan. Project performed with success in 1 month and half.

– Work with AMOA Project Manager as part of LPM (French Military Program Law), providing technical deliverables (security matrix, procedures, etc.) before deadlines using amoa methodology of Project management and proposing solutions for Windows 10/Linux OS hardening project applied to Vital Importance Systems (SIV), for control of reactors in Nuclear Power Plants of EDF. – Review Hardening OS documents already done by security service and report cyber risks with independent views to improve security levels of assets in nulear environments. – Deliver hardening solutions for Windows/Linux OS and utilization of SCOOP device before it goes into the nuclear environment.

– Perform << stress test >> on routers for the validation of the new WAN networks with MPLS connectivity of new CMA CGM agencies. – Creation of new Subnet on request from CMA CGM agencies with IPAM Solution. – Management of firewalls clusters with Checkpoint, Fortinet, Palo Alto Firewalls for opening flows on the WAN network, and creation of Checkpoint authentication certificates for new users. – Management and Resolution of Security Incidents in WAN networks of CMA CGM involving Zscaler Zero Trust SASE and SSE services. – Renewal certificates for MRTG, Cacti, and WhatsUpSupport servers in production environment. – Technical Support for ToIP & VoIP CISCO Equipment with ServiceNow software for users.

– Work with agile methodology of project management to deliver reports of network operations in Confluence (JIRA) for the Network Support Team created by the Network Architect Service. – Validation of deliverables (design file, production sheet, DAT) respecting delays, cost and quality. – Creation of CVPN, CPE, LDAP configurations according to the network offers and services subscribed by the customers (Notaries), from the technical data. – Delivery of generated configurations to Technical Services.

– Fix IT Security issues encountered by users. – Analyse cyber risks using independent oversight of company security policy and SOC Architecture – Investigation & Resolution of Level 2 security incidents: Qualification, Analysis, Remediation respecting SLAs, and present results on meeting with KPI – Correlation of events from security equipments – Real-time analysis of security events – Technological Watch – Analysis of logs, malware and impacted systems – Perform "keelback" tasks on vip computer for forensic investigations with ENCASE. – Replace SOC Team Leader in vacation – Confidential security clearance (France) obtained.

– Resolve applications/networks security incidents L1/L2 under highly secure environment on WAN network. – Activation of REAL chip cards of notaries with download and Initialization of certificates managed by PKI belonging to French Notarial Superior Council (CSN). – Escalation & forward tickets If needed in the concerned services with PsSoft ticket software. – Resolve incidents by phone and Remote Administration on request by notaries, respecting time and SLA.

– Private teacher in Mathematics, engineering sciences, Computer Sciences for high school and University Student. – English Language Internship to improve my English language level (From December 2016 to March 2017) in Dublin (Ireland) with ISI School and Atlantic Language School. – French Secret Defense clearance obtained in the recruitment of French Cybersecurity Officer at the French Air Force in December 2015.

– Hardware and software installation of workstations/servers with encrypted partitions. – Create and secure virtual Environment using Oracle Virtualbox for Software Engineer. – Deploy, install and configure Cisco switches, routers with team using OpenWRT firmware for new network computers. – Analyze/Mitigate/Report Cyber risks inside IT infrastructures with different perimeters/parties (internal/external, physical, users/external contractors...) – Manage privileges with Wallix Bastion PAM for temporary access of sensitives resources for users. – Migration of company public data from NAS server to AWS (Amazon Web Server) S3 cloud instances to optimize company resources and restricted administration of AWS S3 and management consoles. – Installation and configuration of VPN server with team to provide VPN access to company personnel including user authentication (with SSL/TLS certificates) and strong authentication (2FA) Yubikey. – Manage Pfsense firewalls to open connections inside/outside the LAN network. – Deploy PXE Server with Xen Server hypervisor for LAN Network and workstations. – Hardening access for resources and sensitive files using DLP, FIL, PAM tools. – Project of deployment/administration of SIEM solutions (v-cycle Project management), solution chosen with teams : Splunk Enterprise. – Internal Pentests (networks, Infrastructures) in grey box and External networks in black box, Network support for users with Zendesk ticketing software.

– Hardening cybersecurity policy of company for end users. – Install, configure and troubleshooting of LAN Networks, research/close security breaches. – Evaluate cyber risks for all IT assets of company used by employees and bring mitigation to keep data secured. – Management of firewalls and opening communication flows (temp/perm) in function of users requests. – Resolve security incidents. Log analysis (Antivirus / Firewall / IDS/ DLP) and LAN / WLAN monitoring. – Pentests in company networks to audit network security and writing technical reports.

– Software development written in C++ with graphical interface Qt, using SDLC for project management. – Deploy and secure NAS server to save sensitive information in Linux environment of clients/partners. – Modify C++ programs when required by changes in procedures and reports desired. – Management of software/OS licenses in the DEV environment.