Adrien Murillo

Consultant externe intervenant sur l’industrialisation et la sécurisation d’un cloud privé en environnement défense. Contribution au déploiement de services avancés IaaS/CaaS, avec alignement des automatisations sur les exigences techniques, fonctionnelles et sécurité. Environnement : HPE Morpheus, VMware vSphere, cloud privé IaaS/CaaS, Kubernetes/K3s, Rancher, Podman, Ansible, Ansible Molecule, Terraform, GitLab CI/CD, Nexus, Grype, Bash/Shell, Linux RHEL 8/9, Red Hat, Debian, MongoDB, MariaDB, PostgreSQL, SQL Server, DevSecOps.

Security, hardening, and reliability project for a critical test platform in the space sector (>100 VMs), operated in a classified industrial environment. Key achievements: • Administration and MCO/MCS of Proxmox clusters and Linux/Windows environments ensuring test campaign availability • Secure-by-default provisioning automation (PXE, Puppet) aligned with CRA requirements • Security-oriented monitoring and operations (Graylog, Nagios): log centralization, metrics analysis, anomaly detection • Contribution to security impact analyses and technical/operational documentation • CVE qualification and prioritization based on technical criticality and business impact • Hardening, remediation, and operational maintenance of critical Linux systems (L2/L3) Environment: Linux (RHEL/Debian), Proxmox, PXE, Puppet, GitLab CI, Graylog, Nagios, RPM/DEB, CVE management, CRA / NIS2 frameworks

Project conducted as part of a thesis entitled “Attack Scenario Design on an Open-Source CyberRange”, presented at European level. Key achievements: • European-level project presentation highlighting pedagogical and technical innovation • Deployment of a KYPO CyberRange with realistic attack scenarios, increasing capacity and reducing setup time • Virtualization and isolation of multiple critical environments via OpenStack, compliant with NIS2 requirements • Automation and anomaly detection using Python/Bash and ML / Deep Learning approaches • Exploratory self-training on AI/NLP solutions (Vertex AI, LangChain) applied to scenario optimization Environment: KYPO, OpenStack, Python, Bash, ML / Deep Learning, LangChain, Vertex AI, NIS2

Support for major public and private organizations on regulatory compliance and cyber risk analysis in sensitive operational environments. Key achievements: • Risk assessments and audits (EBIOS RM, ISO 27001 / 27005) aligned with NIS2 and CRA controls • Cyber crisis management following ransomware attacks: attack vector analysis, containment, recovery, BCP/DRP implementation • Targeted penetration testing (Nmap, Burp Suite, Metasploit) to validate risk scenarios • Cybersecurity awareness sessions for technical and non-technical audiences Environment: EBIOS RM, NIS2, ISO 27001/27005, ANSSI, OpenVAS, Burp Suite, Metasploit, BCP, DRP

• Security and supervision of a multi-site infrastructure with strong availability and resilience requirements • Monitoring and hardening of production environments to ensure service continuity • Automation of backups and system configurations (Bash, PowerShell, Ansible) • Compliance audits and vulnerability management with remediation recommendations Environment: Linux/Windows, Ansible, PowerShell, OpenVAS, Burp Suite, ZAP

• Design and security of a critical multi-site infrastructure with high availability and resilience constraints • Deployment and operation of a SIEM platform (Grafana, Prometheus, AlienVault OTX) • Infrastructure automation and standardization using IaC (Terraform, Ansible) • Network security hardening (OPNsense) and formalization of internal security policies

• Operation, supervision, and security of a 50+ server multi-site environment • Performance optimization and hardening of virtualized infrastructures (VMware) • Implementation of system and network security fundamentals (segmentation, access control, hardening)

Program focused on cybersecurity applied to critical environments: risk management, systems security, forensics, and operational hardening. Thesis: smart card security (attack modeling, vulnerability analysis, countermeasures). Practical work: deployment of OpenStack environments, Python/Bash automation, monitoring, security audits, and agile project methodologies.

Advanced coursework in security policies, secure architecture design, system hardening, and monitoring. Completed work included: designing resilient architectures, threat modeling, applied penetration testing, and validation of security measures.

Program focused on core systems, networks, and programming (C/C++, Rust), databases, and operational security. Applied approach to Linux/Windows administration, monitoring, and software structures.