Alexandre Miege, Ph.D. Email & Phone Number

Geneva, GE, CH

Genève, CH

• Responsible for the cybersecurity strategy and overall cybersecurity governance.
• Responsible for the Cybersecurity Maturity Program: NIST-based program running in its 5th year, covering all aspects of cybersecurity.
• Responsible for the IT & cybersecurity risk management: threat and risk assessments, data security (inc. DLP), application security, cyberculture, security audits
• Responsible of the CSIRT: security incident management, security investigations and threat intelligence.
• Leading a team of 25 security professionals.

Genève, CH

Paris, Ile De France, FR

CESIN - Club des experts en Sécurité de l'Information et du Numérique

Paris, FR

• Cybersecurity Advisor and Program Manager at the French Ministry of the Economy and Finance
• Cybersecurity point person at the General Secretary of the Ministry.
• Successfully completed security reviews of large IT systems: threat and risk assessment (EBIOS), technical audit management, stakeholder coordination, mitigation measures definition and enforcement.
• Involvement in numerous security projects: PKI, critical application inventory, vulnerability management, etc.
• Advisory role to the CIO on governance and technical topics. Liaison with ANSSI (French Cybersecurity Agency). Representation of the Ministry in interministerial workgroups and meetings.
• Building and animation of the Ministry CISO Workgroup. Active member of the CESIN (National Cybersecurity experts’ Workgroup).

Ottawa, Ontario, CA

Co-creator of the company.Lightship Security specializes in providing high assurance, independent IT security testing and advisory services, as well as conformance automation solutions.Communs Criteria et FIPS 140-2 consulting and evaluations.In charge of finances, and of the development of the quality system.

Toronto, Ontario, CA

InfoSec is a Swiss-Canadian company that specializes in cryptographic solutions, test labs building and security training.I took part in the setting up of the security lab.I contributed to the future of the company by bringing new ideas and shaping day-to-day operations.As part of the core leadership team, my main activities were the following:- In charge.

Montreal, Quebec, CA

This was a new position created with the expansion of the lab.My objectives were to:- Provide a consistent approach to project management, delivery and client experience across certification programs and Schemes.- Drive innovation in the labs. Organize and lead innovation groups, with the goal of increasing delivery efficiency.- In charge of a team of 14.

Montreal, Quebec, CA

In this role, I was responsible for of all delivery aspects of Common Criteria projects.Example of evaluations: Oracle Solaris 11, VMware vSphere, Juniper Networks JunOS, etc. The main tasks were:- Overall responsibility for all technical aspects relating to the program.- Building of the team - hiring, training, review - from 0 to 6 security.

CA

As the Program Manager my main tasks were to:- Organize and lead meetings with vendors and documentation suppliers, and track progress.- Handle the bids of the subcontractors for the evaluations assurance packages.- Project Manament- Liaise with CSEC for milestones and testing organization.- Qualit review for all documents and reports produced by the.

Montréal, Quebec, CA

In this position I had three assignments: IT Security expert, Office Director and Open Source Software specialist.Security projects:- Internal PKI deployment, using the EJBCA solution. In charge of the partnership with PrimeKey (the EJBCA company).- Server hardering. Consulting and troubleshooting for our customer.- Risk Assessment: I conducted an internal.

Ottawa, On, CA

Activities:- Development of a DDoS attack detection tool: DDoSniffer. Based on a fine-grained analysis of the TCP protocol, this tool can detect the use of a computer to perform a distributed denial of service attack. Development in C++. This was a 5 months project.- Definition a of new collaborative access control model: T-CAC (Threshold-based.

Montigny-le-Bretonneux, FR

- I worked on a CC-EAL2+ evaluation of a Digital Signature Web-Service and a CC-EAL3+ evaluation.- EBIOS risk assessment and security plan design. - Performed a Wi-Fi intrusion audit.

Palaiseau, FR

• Ph.D. Thesis title: "Definition of a formal framework for specifying security policies: The Or-BAC model and extensions"Development of a software prototype: MotOr-Bac.More details
• Ph.D. funded by France Télécom R&D (now Orange).
• Definition of a new access control model, the Or-BAC model, built as an extension of RBAC. This work was carried out in the context of the research project named MP6 funded by the French Ministry of Research.
• Development of a software dedicated to the definition and verification of security policies: MotOrBAC. Development in Java and SWI-Prolog, using Eclipse on Linux and Windows platforms. MotOrBAC is now an open source.
• Development of a tool that converts access control policies written in XML into firewall configuration scripts, using XSL transformations (XSLT). Tested on IPTables (RedHat) and IPFilter (OpenBSD).
• Supervision of Master students. Teaching IT security. Writing and presenting articles in international conferences.

Les Clayes-sous-Bois, France, FR

Java Programmer: Development of a WAP browser simulator and a WAP gateway.

Post-Doctorate, Information Security

Ph.D., It Security

Master, It Security

Ing., Computer Science, Network And Telecommunications