Théo Foucher Email & Phone Number

Rennes, Fr

- Designed and implemented generative AI features in Nokia's XDR platform (Cyberdome) for telecom environments- Developed an automated testing framework to evaluate the performance and quality of the AI security assistant- Collaborated with UX team to design intuitive components

France

- Built Nokia's Cyber Threat Intelligence service offering within the managed security services portfolio- Architected the end-to-end CTI service framework including processes, methodologies, and deliverables- Developed a specialized telecom attack pattern library covering threats from 2G to 5G infrastructure- Conducted attack simulations in lab environments to validate detection mechanisms using MITRE FiGHT- Authored technical threat reports focusing on telecom-specific threats and attack methodologies- Led technical workshops and strategic customer engagements for service experimentation

Lannion, Bretagne, France

- Digital Forensics and Incident ResponseInstructed a 16-hour course, equipping students with essential skills to investigate cyber incidents, collect digital evidence, and respond effectively to security breaches. Emphasized real-world scenarios and best practices.

Paris Et Périphérie

- Malware AnalysisLead instructor for a comprehensive 16-hour course, providing students with hands-on experience in dissecting and understanding malicious software. Covered topics include reverse engineering, behavior analysis, and detection techniques.- Digital Forensics and Incident ResponseInstructed a 16-hour course, equipping students with essential skills to investigate cyber incidents, collect digital evidence, and respond effectively to security breaches. Emphasized real-world scenarios and best practices.

France

- Produced numerous malware analysis reports, documenting malware characteristics, capabilities, and potential impact on organizations.- Extracted Tactics, Techniques & Procedures (MITRE ATT&CK) to better understand the techniques used by attackers and help identify patterns.- Developed detection rules using file-based detection tools (YARA), system-based detection tools (SIGMA), and network-based detection tools (SURICATA) to identify and respond to malware threats.- Created a malware corpus to assist in malware analysis and improve detection capabilities (10M+ unique samples).- Developped specific tooling increasing speed of malware analysis, such as malware configuration extractors.- Participated in 6 cyber exercises, including ComCyber DEFNET, NATO Locked Shields, and partnerships with foreign countries, to test incident response and enhance malware analysis skills.

France

- Specialized in Digital Forensics and Malware Analysis.- Detected, investigated, and responded to security incidents.- Conducted forensic analysis and analyzed security alerts for incident identification.- Collaborated with cross-functional teams to resolve security incidents.- Dedicated to ongoing knowledge of evolving threat trends and security best practices.

Québec, Canada

- Developed advanced cybersecurity features, including code similarity analysis using cryptographic hashes for rapid threat detection and classification.- Contributed to malware family recognition by identifying and classifying malware based on unique code signatures.

Diplôme D'Ingénieur En Sciences Et Technologies Du Numérique, Computer And Information Systems Security/Information Assurance

Activities and Societies: ESIEA Secure Edition 2016Apprenticeship program with the Ministry of the Armed Forces during the three years..

Dut Informatique, Informatique

Last semester in Quebec (CA) in the CEGEP of Sainte-Foy thanks to a partnership with the I.U.T Lyon 1.

Computer Programming