Alexandre Miege, Ph.D. Email & Phone Number

Geneva, Ge, Ch

Genève, Ch

• Responsible for the cybersecurity strategy and overall cybersecurity governance.• Responsible for the Cybersecurity Maturity Program: NIST-based program running in its 5th year, covering all aspects of cybersecurity. • Responsible for the IT & cybersecurity risk management: threat and risk assessments, data security (inc. DLP), application security, cyberculture, security audits • Responsible of the CSIRT: security incident management, security investigations and threat intelligence. • Leading a team of 25 security professionals.

Genève, Ch

Paris, Ile De France, Fr

CESIN - Club des experts en Sécurité de l'Information et du Numérique

Paris, Fr

Cybersecurity Advisor and Program Manager at the French Ministry of the Economy and Finance• Cybersecurity point person at the General Secretary of the Ministry.• Successfully completed security reviews of large IT systems: threat and risk assessment (EBIOS), technical audit management, stakeholder coordination, mitigation measures definition and enforcement.• Involvement in numerous security projects: PKI, critical application inventory, vulnerability management, etc.• Advisory role to the CIO on governance and technical topics. Liaison with ANSSI (French Cybersecurity Agency). Representation of the Ministry in interministerial workgroups and meetings. • Building and animation of the Ministry CISO Workgroup. Active member of the CESIN (National Cybersecurity experts’ Workgroup).• Public tender specification. Establishment of partnerships with innovative startups. Compliance validation of 3rd party suppliers and vendors.

Ottawa, Ontario, Ca

Co-creator of the company.Lightship Security specializes in providing high assurance, independent IT security testing and advisory services, as well as conformance automation solutions.Communs Criteria et FIPS 140-2 consulting and evaluations.In charge of finances, and of the development of the quality system.

Toronto, Ontario, Ca

InfoSec is a Swiss-Canadian company that specializes in cryptographic solutions, test labs building and security training.I took part in the setting up of the security lab.I contributed to the future of the company by bringing new ideas and shaping day-to-day operations.As part of the core leadership team, my main activities were the following:- In charge of helping clients to create or improve their Security Labs.- Management of large international projects.- In charge of the security lab operations.

Montreal, Quebec, Ca

This was a new position created with the expansion of the lab.My objectives were to:- Provide a consistent approach to project management, delivery and client experience across certification programs and Schemes.- Drive innovation in the labs. Organize and lead innovation groups, with the goal of increasing delivery efficiency.- In charge of a team of 14 security professionals.- Definition of metrics and reporting processes to identify improvement strategies.- In charge of the PnL and financial reporting.- I supported the accreditation process for CGI US Lab under the NIAP-CCEVS.I was also the Quality Manager and responsible for internal and external reviews and audits (ISO 9001 and ISO 17025). Certification: ISO 17025 auditor

Montreal, Quebec, Ca

In this role, I was responsible for of all delivery aspects of Common Criteria projects.Example of evaluations: Oracle Solaris 11, VMware vSphere, Juniper Networks JunOS, etc. The main tasks were:- Overall responsibility for all technical aspects relating to the program.- Building of the team - hiring, training, review - from 0 to 6 security professionals.- Organize and lead meetings with vendors and documentation suppliers to track progress.- Liaise with CSE for milestones, testing organization, updates to the standard.- Main point of contact for the Common Criteria community (ICCC, CCUF, etc.).- Set up project schedule and work plans. - Provide technical guidance to testing teams as required.Certification: EAL4 Common Criteria Evauator under the Canadian CC Scheme (CSE).

Ca

As the Program Manager my main tasks were to:- Organize and lead meetings with vendors and documentation suppliers, and track progress.- Handle the bids of the subcontractors for the evaluations assurance packages.- Project Manament- Liaise with CSEC for milestones and testing organization.- Qualit review for all documents and reports produced by the program.

Montréal, Quebec, Ca

In this position I had three assignments: IT Security expert, Office Director and Open Source Software specialist.Security projects:- Internal PKI deployment, using the EJBCA solution. In charge of the partnership with PrimeKey (the EJBCA company).- Server hardering. Consulting and troubleshooting for our customer.- Risk Assessment: I conducted an internal risk assessment using EBIOS-2010.- ISO 27001: In charge of preparing the company to achieve certification ISO 27001.- Authoring of the Linux Server Security training manual.Business development:- Prospect for potential new clients in the Ottawa/Gatineau region.- Propose Open Source alternatives to the Federal Government.Instructor: I provided numerous training sessions in Ottawa, Montréal, Québec and Toronto.- Linux (beginner to advanced). SuSE and Ubuntu dedicated training.- Linux Server Security and Apache Security.Certification: LCPI-1, Ubuntu Certified Professional, Suse Certified Professional, EJBCA Certified Professional (Open Source PKI).

Ottawa, On, Ca

Activities:- Development of a DDoS attack detection tool: DDoSniffer. Based on a fine-grained analysis of the TCP protocol, this tool can detect the use of a computer to perform a distributed denial of service attack. Development in C++. This was a 5 months project.- Definition a of new collaborative access control model: T-CAC (Threshold-based Collaborative Access Control). Based on certificate sharing architecture, this model allows users to collaborate in order to avoid abuse of privileges.- Adaptation of the Organization-based access control model in the context of Web-services (SOA), using Jabber, JXTA, SOAP and XACML. Definition of a network architecture ensuring uniform access control guarantees across different constituent services.- Participation in the Liberty Alliance project.- Continuous teamwork in the lab in order to exchange ideas and to carry out consistent research work.- Multi-disciplinary and multi-cultural environment. - Assistance to Master and Ph.D. students. Giving orientation on their research and in writing articles.

Montigny-Le-Bretonneux, Fr

- I worked on a CC-EAL2+ evaluation of a Digital Signature Web-Service and a CC-EAL3+ evaluation.- EBIOS risk assessment and security plan design. - Performed a Wi-Fi intrusion audit.

Palaiseau, Fr

Ph.D. Thesis title: "Definition of a formal framework for specifying security policies: The Or-BAC model and extensions"Development of a software prototype: MotOr-Bac.More details• Ph.D. funded by France Télécom R&D (now Orange).• Definition of a new access control model, the Or-BAC model, built as an extension of RBAC. This work was carried out in the context of the research project named MP6 funded by the French Ministry of Research.• Development of a software dedicated to the definition and verification of security policies: MotOrBAC. Development in Java and SWI-Prolog, using Eclipse on Linux and Windows platforms. MotOrBAC is now an open source project. • Development of a tool that converts access control policies written in XML into firewall configuration scripts, using XSL transformations (XSLT). Tested on IPTables (RedHat) and IPFilter (OpenBSD). • Supervision of Master students. Teaching IT security. Writing and presenting articles in international conferences.

Les Clayes-Sous-Bois, France, Fr

Java Programmer: Development of a WAP browser simulator and a WAP gateway.

Post-Doctorate, Information Security

Ph.D., It Security

Master, It Security

Ing., Computer Science, Network And Telecommunications