Laurent Mathieu

Laurent Mathieu Telegram: @ltmat | Email:-| Web: www.lmathieu.com Profile I have been working in the realm of cybersecurity for almost 20 years doing many things from security systems design and implementation, to SOC / CERT operations, to advising developers, solution architects and senior management about security risks and solutions. I gained a rich experience, having worked across many industries in complex environments and across multiple geographic regions. Over the past decade, I have also been growing interest in cloud computing and gradually turned from a cloud skeptic to an evangelist. Whereas cloud and security are often in conflict in the minds of many people, I strongly believe they are both intertwined and need to evolve together as key foundation pillars for businesses to grow towards their digital transformation objectives. It all comes down to new paradigms, awareness and education about security, cloud and security in the cloud. This has been my main focus area over the past few years. People who have worked with me describe me as driven, versatile, out-of-the-box thinker and eager to learn and transmit knowledge. Core skills Cybersecurity: I have a holistic view of cybersecurity. A blend of management and technical experience in almost all areas of cybersecurity across various industries. Extensive know-how in security architecture, cloud security, governance, risk & compliance, incident response management and security operations. Amazon Web Services (AWS): I have a robust background in AWS. I first started by assessing the security posture of various deployments. Since then I got my hands on the majority of services and gained a solid understanding of the AWS ecosystem, as well as an in-depth knowledge in the essential services (S3, EC2, ECS, VPC, Lambda, API), security, analytics (Athena, Quicksight) and DevOps tooling. Instruction and Training: Throughout my career, I have always been engaged in training the next generation of tech talent. I taught as a Guest Lecturer, trained a large number of professionals, co-built an eLearning platform and volunteered for NGOs as Trainer and Training Manager. Professional background 2021: Cloud Security Architect at Arkema (contractor) Cloud architectures security review, DevSecOps and cyber-analytics tooling development. 2021: Independent Consultant and Owner at Secloudia Cybersecurity, cloud & AWS consultancy and training for various SMEs, NGOs and startups-: IT & Training Manager at Passerelles Numériques – Phnom Penh, Cambodia Served for 15 months as International Solidarity Volunteer (French VSI) for an international NGO. Responsible for the Systems & Network Administration (SNA) curriculum as well as the overall IT of the school (35 staff and 150 students). Led a team of 4 FTEs (2 SNA Trainers and 2 IT Officers).  Developed cybersecurity and cloud computing modules  Applied for the AWS Educate institution grant and embedded it into the SNA curriculum  Moved IT labs from hardware-based to cloud-based amid COVID-19 school closure and beyond CV Laurent Mathieu – Page 1/3 – Updated in October-2021 CV Laurent Mathieu – Page 2/3  Increased Google G Suite adoption and organized the training of all staff and students during C-19  Established and maintained relationships with various partners (businesses, NGOs, government)  Selected as part of the AWS Educate Cloud Ambassador 2020 cohort 2019: Volunteer Cybersecurity Trainer at Passerelles Numériques – Vietnam, Philippines, Cambodia Traveled for 4 months to the 3 countries where Passerelles Numériques operates in Asia and delivered training in cyber-security as a volunteer.  Delivered training to students (2 weeks in Da Nang, Vietnam and 4 weeks in Cebu, Philippines)  Mentored and trained the local IT & training team in Phnom Penh, Cambodia-: Senior Information Security Risk Analyst at ABN AMRO Bank – Amsterdam, Netherlands Information security risk assessment & advisory for the Corporate Information Security Office (CISO).  Supported senior management in making risk-based decisions to achieve business objectives  Identified and assessed risks in all aspects of information security for various projects  Provided security advisory and architecture support during projects  Performed vendor security assessments (e.g. BPO, cloud suppliers, data center inspection, etc.)  Coordinated penetration testing and vulnerability assessments  Monitored ongoing risks and followed up on remediation  Established relationships with business lines, subsidiaries and other risk functions (legal, compliance, audit-: IT Operations Security Lead at French National Space Agency (CNES) – Toulouse, France IT security operations and outsourcing management for the CNES ICT Department.  Reviewed and oversaw the overall incident management process  Reviewed vendors' security controls to ensure ongoing compliance with standards and policies  Monitored security systems operations, performance, availability and capacity  Reviewed and monitored security vulnerabilities and remediation activities  Developed requests for tender and supported tender evaluations  Led continuous service improvement for security-: Information Security Consultant at Scassi – Toulouse, France R&D, presales, training delivery and consulting.  Co-built the eLearning platform PHOSFOREA and authored courses in information security  Delivered training in cloud computing security to IT auditors-: CERT Senior Security Analyst at European Space Agency (ESA) – Rome, Italy ESA's Computer Emergency Response Team (ESACERT). Assigned as a consultant for Verizon Business.  Led incident response and threat hunting  Performed malware analysis and forensics activities  Performed security & vulnerability assessments and monitored findings resolution  Co-organized security awareness campaign and seminars for all ESA sites  Wrote security articles for the ESA community-: Senior Security Consultant at Verizon Business – Luxembourg / Italy Verizon Business Professional Services EMEA. Worked for various SME & Enterprise customers. CV Laurent Mathieu – Page 2/3 – Updated in October-2021 CV Laurent Mathieu – Page 3/3  Designed, tested, deployed and supported security infra and systems in complex environments  Performed security audits, reviews and assessments  Developed security policies, guidelines and standard operating procedures  Developed and optimized security assessment tools  Delivered security training, managed projects, developed solutions and performed presales activities-: Guest Lecturer at Université de Lorraine – Nancy, France Part-time teaching for the specialized Bachelor program in mobile networks and security.  Taught cryptography, cybersecurity and hacking (app. 30 hours every year)  Member of the pedagogic council-: Security Analyst at Cybertrust – Luxembourg Security Operations Center (SOC) environment in a 24x7x365 shift work schedule providing Managed Security Services to various customers.  Analyzed logs and security trends  Investigated intrusion detection alerts and handled security incidents  Supported customer security devices administration such as firewall, IDPS, router, VPN and proxy  Supported the SOC back-end and Linux/Unix system administration 2004: Internship in system & network administration at La SNET – Metz, France Project in end-user software releases packaging, testing & deployment. Education-: Master's Degree, Management & Business Engineering from EM Strasbourg – France Part-time study. Project management, sales & marketing, strategy-: University Degree, Network & Telecom from Université de Lorraine – France Awards & certifications Since 2021: AWS Certified Security – Specialty Since 2020: AWS Certified Solutions Architect – Associate Since 2020: AWS Community Builder Since 2020: AWS Educate Cloud Ambassador Since 2015: ISACA CISM (Certified Information Security Manager) Since 2013: ISC2 CISSP (Certified Information Systems Security Professional) Since 2013: CSA CCSK (Certificate of Cloud Security Knowledge) Since 2008: EXIN ITIL Foundation version 3 Expired: ISO 27032 Lead Cybersecurity Manager (2017), ISACA CISA (2013), ISO 27005/31000 Risk Manager (2012), ISC2 SSCP (2007), CheckPoint CCSA & CCSE (2005), Cisco CCNA (2004) Other information Citizenship: French Languages: Bilingual English/French Personal interests: Rock climbing, photography, blogging (https://laumat.medium.com) CV Laurent Mathieu – Page 3/3 – Updated in October-2021