Raymond Sodji

– Collected, correlated, and analyzed threat data to identify attacker TTPs and extract actionable Indicators of Compromise (IoCs). – Authored and disseminated threat intelligence reports and alerts, providing strategic insights to executive leadership for informed security decisions. – Performed vulnerability evaluations, and post-incident analyses – Conducted Open-Source Intelligence (OSINT) investigations to identify, collect, and assess data related to threat actors, campaigns, and emerging risks. – Designed and maintained custom scripts (Python, PowerShell) to automate data collection, threat correlation, and alert enrichment workflows. – Performed dark web monitoring and leak detection on platforms such as Have I Been Pwned, specialized marketplaces, and illicit forums to identify compromised user accounts and data exposures. – Collaborated with SOC and Network Security teams to deliver actionable recommendations for improved threat detection, mitigation, and incident response. – Leveraged and tuned security monitoring tools such as Cortex XDR, Varonis, and Microsoft Sentinel for enhanced detection and response capabilities. – Executed daily cyber threat intelligence bulletins, consolidating insights from open sources, specialized forums, and trusted networks to maintain a proactive defense posture. – Daily assistance to users

– Detection and analysis of vulnerabilities; – Monitoring of vulnerability scanners; – Conducting penetration tests on government production systems to validate resilience and identify weak points to be corrected; – Management and remediation of security incidents; – Reporting and proposing remediation plans; – Deployment, supervision and configuration for the integration/orchestration of security and monitoring tools and solutions; – Threat Intelligence to define and update SOC rules, use cases for affected systems; – 24/7 monitoring of infrastructures within our perimeter; – In-depth analysis of attacks, data and affected systems; – Knowledge and management of Indicators of Compromise (IOC); – Analysis/investigation of host, network, event log base and malware search; – Security auditing in other public and private institutions; – Contribution/participation in national digital projects; – Training and awareness raising for technical teams and users. – Use threat Intel to update rules, use cases affected systems, and the extent of the attack; – Explores ways to identify stealthy threats that may have found their way inside network, – Recommends how to optimize security monitoring tools based on threat hunting discoveries; – Conducts penetration tests on production systems to validate resiliency and identify areas of weakness to fix; – Oversee and configure security & monitoring tools and solutions; – Analyze and Configure affected systems and identify stealthy threats; – Carry out in-depth and analysis to find the type of attack, and the data or systems impacted; – Perform analysis conducting host forensics, network forensics, log analysis, and malware triage – Investigations in order to determine root cause – Identify key data points regarding information security incidents, such as root-cause analysis, possible attack methods and techniques, malware infection and persistence methods, etc. – Recognize and codify attacker tools, tactics, and procedures in indicators of compromise (IOCs) that can be applied to current and future investigations – Build scripts, tools, or methodologies to enhance incident investigation processes – Implement integration/orchestration of existing and new forensic infrastructure and tools – Perform as an Information Security SME in the following areas: – Digital Forensics – Incident Response – Log analysis – Incident handling; – Popular operating systems (Windows, Mac, Linux, Android, etc.) – Cybercrime investigation; – Reporting; – Awareness

– User training on the CYBER RANGES platform through the simulation of nearly 100 scenarios.