I am responsible for the Global CyberSOC of Orange Cyberdefense, the leading independent cyber security provider in Europe. I've been working in the field of cyber security since 2001 and gathering experiences in both red and blue team activities since then. Together with my team, we focus on detection, analysis and response of possible security incidents within IT and OT environments using the full SOC technology stack. This includes defining roles, processes and technology, setting up sensor technology, establishing secure information transfer, engineering correlation rules and machine learning algorithms, testing incident detection using targeted attacks in replicated company environments, dynamic malware analysis and reverse engineering. My team and I have been engaged as experts in many different cases ranging from simple opportunistic, widespread attacks to more complex, targeted and advanced persistent threats in CERT/CSIRT activities. As a trainer and speaker my portfolio covers technically demanding cyber security trainings as well as powerful demonstrations to illustrate possible risks of cyber threats.