BAPTISTE BEDUNEAU

Built and led the internal technical security team (3 people), responsible for structuring detection, incident response, vulnerability management and offensive security capabilities.

SOC & Incident Response

• Built and maintained in operational condition the internal SOC, covering 150+ users and 2,000+ endpoints, mostly on-premise.
• Designed, deployed and maintained an ecosystem of 10+ security tools, including SIEM, SOAR, EDR and EPP.
• Automated incident response processes by building SOAR playbooks and integrating the various security tools.
• Defined and improved capabilities for detecting, qualifying, investigating and responding to security incidents.

VOC - Vulnerability Management

• Set up and led a Vulnerability Operations Center (VOC) dedicated to monitoring the company’s exposure.
• Centralized, qualified and prioritized vulnerabilities based on their severity, exploitability and impact on the information system.
• Tracking, remediation and reporting of vulnerabilities.

Offensive Security & Audits

• Defined and managed an annual program of 15+ security audits, based on business stakes and company needs.
• Personally conducted 2 to 3 audits per year, including penetration tests, architecture audits and configuration audits.
• Identified attack scenarios, analyzed exploitable vulnerabilities and supported technical teams through remediation.

Governance, Management & Compliance

• Defined and monitored the security team’s performance and activity KPIs.
• Defined security best practices in line with applicable frameworks and standards, and controlled their enforcement.
• Contributed to maintaining the ISO 27001 certification: preparing and providing evidence, monitoring security controls, taking part in certification and surveillance audits, and following up on the remediation of non-conformities.

Member and co-creator of the Nameshield CERT, in an ISO 27001 certified company.

• Cybersecurity incident handling and employee security awareness.
• Supported development teams by providing a global view of threats, vulnerabilities and countermeasures.
• Standardized the team’s processes to join the InterCERT-FR, TF-CSIRT and FIRST communities.
• Performed cybersecurity audits of web applications.
• Developed security task automation to optimize and improve efficiency.

• Developed cybersecurity automation and analysis tools.
• Set up and maintained applications in a containerized environment.
• Software development (Python, Java, PHP, JavaScript ES6+) and system administration of a mostly on-premise infrastructure (Bash, LXC, ZFS, Ansible).
• Helped design an AWS analysis application (EC2, Lambda, Kinesis) using IaC (Terraform).
• Documented, analyzed and drafted projects within a team of 10 sysadmins to improve visibility and prioritization in an Agile environment.

• Designed and developed a cybersecurity tool to detect and prevent domain name anomalies.
• Built with Java and Python, relying on DNS technologies and research.

Four-month internship in the NIKHEF group as a software engineer.

• Operated and tested a GPS module.
• Implemented a Windows application to manage and visualize a software database.