Qadeer Adrien Balkhi

● Identifies, categorizes, analyzes, and qualifies security events in real-time or asynchronously, based on analysis reports from the IT infrastructure and threat intelligence.

● Identifies, categorizes, analyzes, and qualifies security events in real-time or asynchronously, based on analysis reports from the IT infrastructure and threat intelligence.

● Proposes actions and projects within the security remediation plan, following vulnerabilities detected by themselves, colleagues, and security audits.

● Shares security-related technology updates within their scope with the CISO, helping to adapt security measures to new and known threats.

● Updates security metrics monthly using internal tools and processes, ensuring their alignment with the Information System.

● Requests the scheduling of actions and projects from the remediation plan by functional managers of impacted assets.

● Communicates with various technical teams to promote best practices in Information Security.

● Supports the CISO and management in actions to be taken during security incidents.

● Operationally adheres to the rules defined in the Information Security Policy (PSSI).

● Assists in handling confirmed security incidents in support of technical teams.

● Acts as the primary contact with the SOC provider.

☞ Surveillance, détection, investigation et triage des alertes des événements de sécurité. ☞ Gestion des réponses aux incidents de sécurité, notamment l'analyse des malwares. ☞ Evaluer les risques et cyber menaces et mettre en œuvre les moyens de détection associés. ☞ Threat Intelligence: Analyse et veille des menaces. ☞ Détecter et gérer les incidents de sécurité remontés par le SIEM ☞ Gestion des renseignements sur les menaces (ingestion, production, curation et diffusion). ☞ Gestion des vulnérabilités basée sur les risques (notamment, la priorisation des correctifs). ☞ Traque des menaces. ☞ Gestion et maintenance des dispositifs de sécurité. ☞ Développement de données et d'indicateurs pour le reporting/la gestion de la conformité.

Assist the Network Administrators in administrating LAN, WAN, vLAN and Active Directory administration including adding and removing users, groups, printers and managing user permissions