Guillaume B.

Cybersecurity Engineer @Schaeffler

Paris, FR

Cybersecurity Engineer for Schaeffler\'s SOC located in Herzogenaurach (Germany).Continuance of the tasks performed during my internship and new projects: Project of upgrade from TheHive 4 to TheHive 5• Implementation of a comprehensive upgrade plan with a timeline• Definition of specifications for our servers• Setting up a pre-production environment• Updating internal Python scripts to the new API• Updating Cortex analyzers & responders• Testing internal tools and interconnections• Production deployment of the new version & supervision of it (Hypercare Phase)• Team training CTI Management• Operational maintenance of MISP platform• Constant improvement of our CTI (Feed Quality)• Integration of our CTI into our detection scenarios Interface between Microsoft Defender & TheHive5• Python script to interconnect Microsoft Defender & TheHive 5• Creation of Defender Incidents as TheHive cases• Synchronization between both platforms• Creation of Defender IoCs to TheHive observables Analysis and resolution of security incidents• Use of TheHive as a SIRP• Investigation via Microsoft Defender & Splunk• Analysis of complex scenarios• Analysis reporting Splunk• Creation of detection rules Maintenance & supervision of infrastructures Python & PowerShell Scripting• Azure API based reports Working in an intercultural (France, Germany, Malaysia, Canada) & Agile (Scrumban) environment.

EFREI - Grande école du numérique

Master Degree in Computer Science, Cybersecurity

Lycée Hoche

Baccalaureat, Sciences