Tristan Rafinon

– Vulnerability & Audit Governance: Led the end-to-end remediation lifecycle using Qualys across global infrastructure, ensuring all audit findings were translated into actionable technical roadmaps. – Compliance Enforcement (PCI-DSS, NIS2, DORA): Orchestrated hardening initiatives for high-sensitivity zones, maintaining strict alignment with regulatory requirements and hosting regular steering committees to close non-compliance gaps – Strategic Remediation Tracking: Facilitated monthly reviews with cross-functional teams to drive the closure of critical vulnerabilities and track the progress of security recommendations. – Hardening Standardization: Engineered and deployed OS/Middleware hardening baselines based on CIS Benchmarks, achieving a measurable increase in the global infrastructure security posture. – Continuous Risk Control: Integrated mandatory security scans for new system masters into the deployment pipeline to ensure "secure-by-design" compliance. – SPlunk Monitoring & Reporting: Created executive dashboards to track remediation KPIs and the progress of security audit actions. – Global Support: Acted as the primary point of contact for international business units, providing expert guidance on vulnerability mitigation and hardening standards.

– Administered, supervised, and maintained security equipment, ensuring the continuous integrity and functionality of critical systems. – Managed security incidents, promptly processing requests to maintain operational continuity. – Conducted vulnerability analyses and generated comprehensive reports using Nessus, contributing to the overall security posture. – Proficiently handled firewalling and network traffic analysis utilizing F5, Palo Alto, and Juniper technologies. – Managed Bind DNS, ensuring the reliability and security of domain name resolution. – Successfully oversaw VIP management on F5, optimizing network performance and accessibility. – Effectively managed Proofpoint, enhancing email security through meticulous administration and configuration.

– L2//L3 Support – Qualys expertise, scanning and reporting, created multiple weekly weekly scan with various intensity, weekly and monthly report – Server patch management on an iso 27001 infrastructure – Linux Administration (kerberos, password manager) – Splunk, Data analysis and reporting, created dashboards and extracted datas in order to troubleshoot multiple issues – vulnerability remediation on both windows server and linux – Checkpoint management, network troubleshooting and port opening, whitelisting – Windows Administration, managed active directory and made GPO, deployed update through WSUS