photo de profil d'un membre

Ralph NOUJEIM

RalphNOUJEIM

33 ans

Expériences professionnelles

Csirt/soc lead engineer

Kering , Paris

De Janvier 2023 à Septembre 2025

- Leading Cybersecurity incidents response at L3
- Led the SIEM migration from Tehtris to Splunk
- Forensics and Incident Response for major and confidential incidents
- Splunk dashboarding, use-cases and investigations

Csirt/soc engineer

Kering , Paris - CDI

De Avril 2021 à Janvier 2023

- Led the migration from Splunk to Tehtris SIEM (infrastructure implementation and documentation, use-cases testing and optimization)
- Responding to Redteam and Purpleteam exercises
- Threat Hunting using the available security tools
- Continuously updating the internal SOC use-case catalog and Incident Response Playbooks

Soc engineer

BNP Paribas , Paris - CDI

De Janvier 2020 à Avril 2021

- Defined and implemented Office 365 use-cases on Splunk as well as AD, SWIFT, McAfee ePO, CyberArk, MS-AD etc. on Elasticsearch for the Group
- Migrated detection scenarios from ArcSight to Elasticsearch using the native DSL language
- Analyzed and assessed the group security logs for potential detection scenarios (FW/IDS/IPS, Proxy, WAF, DLP, Sandbox, Endpoint, WebSSO..)
- Helped in setting up an internal framework for a new Threat Hunting team
- Implemented surveillance use-cases for IoC's fetched from the CyberThreatIntelligence platform
- Onboarding BNPP of business units onto the CyberSOC program

Endpoint security engineer

BNP Paribas , Paris - CDI

De Septembre 2017 à Janvier 2020

Led a major migration project from legacy to next generation solutions on McAfee products.
Defined, documented and implemented the Group strategy and policies for the following McAfee endpoint softwares:
- Data Loss Prevention
- Drive Encryption
- Removable Media Protection
- Endpoint Security (Threat Prevention and Firewall)
- Advanced Threat Protection for building a Threat Intelligence for endpoints

Formation complémentaire

Master

Télécom ParisTech

2015 à 2017

Associations

Association des Scouts du Liban

https://www.scoutsduliban.org/

Membre, Chef Troupe

Parcours officiels

USJ – INCI – Licence – 2014 – Licence en télécommunications

Langues

Arabe - Langue maternelle

Français - Courant

Anglais - Courant

Espagnol - Technique