From scoping to production, 1239 Security helps secure your projects and operations.
For CIOs, CISOs and SMEs looking for clear decisions and workable solutions.
01 / EXPERTISE
Establish rules for AI use and assign responsibilities. The scope covers data protection, access and reference documentation, as well as control, accountability and traceability for actions triggered by tools.
Structure identities, permissions and privileged access. I help integrate directories, define roles and manage sensitive accounts, including authentication and authorization controls.
Connect event collection to the assets you need to protect. I design logging architectures, integrate data sources and develop monitoring use cases with your teams.
Build security controls into development and cloud operations. From tool selection to vulnerability management, I work with your teams on pipelines, configurations and remediation.
Make configurations repeatable and operations traceable. I combine system hardening, infrastructure as code and security task automation.
Give your projects a practical framework: responsibilities, architecture documentation, procedures and evidence. I help teams prepare for audits and implement security requirements.
02 / CASE STUDIES
Energy, finance, technology, transport, insurance and aviation: examples from my career, from integration projects to architecture studies.
Defined secure AI usage, centralized reference material and standardized documentation around a single source of truth. Designed and developed MCP (Model Context Protocol) integrations aligned with security requirements in regulated environments.
Defined data and tool access, human approval and traceability. Used AI to assist system security audits, with human verification of findings.
A shift-left initiative and a Vulnerability Operations Center to structure application security.
Led SAST, secrets, IaC, open-source, CI/CD posture and container security initiatives; assessed the ASPM market and ran end-to-end proofs of concept. Standardized and scaled application security processes and trained developers to embed these practices in their daily work.
The scope also includes SIEM and PKI migrations.
A digital sovereignty study in the context of diplomatic tensions. Studied a transition from Microsoft Active Directory to an LDAP solution for Windows and Linux servers and workstations, with stronger authentication.
Connecting DLP and employee offboarding processes to security operations.
Automated Google Workspace DLP triage, analysis, response and reporting; automated offboarding triggered by contract termination.
Deployed Lacework CSPM on AWS and GCP, with an inline scanner that blocks builds.
ArcSight SIEM integration to monitor critical assets. Defined attack scenarios and use cases, and integrated parsers and connectors.
Designed the on-premises and cloud collection architecture using the Macroscope methodology, informed by the LogRhythm health assessment.
Two separate projects beyond collection: aligning IAM processes across divisions and aligning firewall management processes.
Projects covering system protection, privileged access and hybrid SIEM.
Redesigned BitDefender / Trend Micro anti-malware protection and standardized configurations across 5 data centers; took One Identity Safeguard from proof of concept to production.
Hybrid GCP StackDriver SIEM with parsers for application sources and directories.
Implemented Oracle Unified Directory and Internet Directory; Kerberos authentication and Active Directory authorization; integrated Oracle accounts into CyberArk.
Developed an on-demand privilege elevation solution integrated with HP Service Manager.
03 / ABOUT
Over 17 years of experience in France and Canada, working with the teams that develop and operate information systems.
Through 1239 Security, I bring that experience to your projects. I work with your teams to understand the current environment, select appropriate controls and document what is needed to maintain the solution over time.
04 / LET’S DISCUSS YOUR PROJECT
Need an audit, a platform review or help scoping a project? Describe your context, priorities and timeline. Together, we will define the engagement and the information needed for a quote.
contact@1239security.comBordeaux
Let’s discuss your AI needs
