Philippe VIALLE

"malware" course teacher: virus/malware history & typology. Specific malware case studies, high profile attacks analysis. Antivirus/EDR: limits, management, evolutions. "VX" world and economy, black markets, cyber-weapons.

- SOC auditor for end customers. Assessment topics: maturity, detection capabilities, automation (SOAR) needs and capabilities, incident response (SOC // CERT), Threat Intel, architecture, IT hygiene/hardening, management, roadmap, quality, SLA, KPI... Materials: SOC-CMM, CERT-CMM, OpenCSIRT SIM3, NIST CSF, MITRE 11 SOC strategies, FIRST, ANSSI PRIS... - CyberSecurity lecturer for Vinci SA: threat landscape evolution and key role of the lambda user. - SOC expert for end customer: build management (strategy, roadmap, outsourcing scenarios, budget).

Role: - teams management for L1 OPS, L2 OPS, and Build; - SOC team managers direct management; - technical leader. Tasks: - SOC Processes and automation, TIP/SIRP/SOAR; - Service development strategy; - security monitoring design, deployment management, and reporting management; - sales support; - recruiting support; - crisis management and escalation management.

SOC team manager (L1, L2), L3 support, SOC process design (based on NIST SP800-61 rev2), Incident escalation manager, trainer (security monitoring, incident response). Security monitoring design, SIEM/SIRP/TIP architect (integration and exploitation), with SOAR in mind. Cyber-security advisor for the hierarchy.

Was in charge of: - IT security incidents response (EMEA), forensics. Became internal Subject Matter Expert. - EMET product support - security bulletins (EMEA & French chapter). - Forefront antivirus support (FCS, FEP, SCEP) - security trainings and workshops (content creation & delivery): webcasts, onsites. Generic and advanced sessions, including for law enforcement/CERT.

Computer security watcher and security incident responder (DFIR). Among other missions, took part in the security operations team of a leading firm in transportation. I've worked more especially on: - Security watch: vulnerabilities, 0day identification, malice, new threats - patch management reporting - operations level response to threats (blocking, cleaning, emergency measures...) - computers security incident detection & handling, IT forensics - documentations: IT risks, best practices, guidelines, policies - law enforcement & issues (traceability, copyright, trademark, information disclosure...) - security events collection and analysis, SIEM concept, dashboards - government driven cyber security measures implementation - operational support to project teams - perimeter defense systems administration & audit, - filtering technologies (AV, URL, Internet content, spam, IM, proxies, firewall, NIPS, HIPS) monitoring - pentests - risks analysis and management - technical talks about IR & sec watch - security solution PoC and deployment (proxy/NIPS...)

Support technician. Skills: - antivirus deployment, policy design and audit, - virus cleaning, compromised computers issues, - work from remote with customers (phone, emails), - Windows all versions, Linux and Mac.

Part-time. Providing web services to local companies (website hosting and development, messaging, web services). Only open source solutions (Linux systems). Skills: remote administration, messaging (MTA/MDA) security, antispam & antivirus integration + development, dashboards (activity stats, security events), integrity checks.

Part-time. Computer fixing and virus cleaning, onsite or in lab. Skills: - malware cleaning (bootable CD, AV engines embedded, offline detection and fixing, Win32) - system auditing and fixing (soft & hard) - automated deployment solutions Antivirus solutions analyst/benchmarker. Working on new behavioral (signature-less) AV solutions: - webmaster of one of the only european independant websites dealing with behavioral/generic solutions pros/cons IRL - beta-tester of ViGuard antivirus before Vista hits the market.

Was in charge of people safety in one of the waterparks, part of the Disney's worldwide biggest parks. Skills: First aid, rescue, emergency procedures, safety, monitoring. Was member of the first French team to be allowed to act as slide operators with lifeguard role.