Ferchau France · Blagnac

Remy Rockstroh

Expert Cybersecurity Engineer · Blue Team

Vulnerability management and system hardening. 3+ years of hands-on production experience.

Contact me → View projects →
About

How I work

profil.json
01 domain Blue Team · Defensive security. Infrastructure hardening, vulnerability management, patch management, remediation.
02 enjoys Analyzing an estate, finding weaknesses, prioritizing and fixing them. Automating security tasks. Hardening an infrastructure from a defined audit.
03 goal Moving towards security governance : running audits, setting priorities and driving their implementation.
04 approach Works alone or in a team. Digs into problems until they are solved. Comfortable explaining to non-technical people. Learns new tools fast.
EMPLOYED — Permanent contract, Ferchau France Blagnac · Toulouse
Projects

Technical projects

Click a card to see the project details.

847ASSETS12CRITICAL38HIGH94 %PATCH RATEPATCH PROGRESSSRV-PRODSRV-ADWKS-PARIS
Main project · AirCostControl · 2022–2024
Rolling out a unified Vuln / Patch / Push tool
▾
TaniumRapid7IvantiPowerShellPython
INTERNETDMZ · FIREWALLINTRANET · VLANZERO TRUSTAzure AD · IntuneConditional access
Capstone project · Ynov M2 · Team of 4
Zero Trust architecture — Company simulation
▾
AzureZero TrustSIEMHardeningDMZ
CRITICAL · login RUAutomatically blockedHIGH · login CNNetwork approval requestedINFO · login FRAllowed
Security scripts · AirCostControl · 2022–2024
Automation — Alerts & geographic detection
▾
PythonPowerShellBashTanium
Rolling out a unified Vuln / Patch / Push tool
Main project · AirCostControl · 2022–2024
Context: The company had no central tool able to handle vulnerabilities, patch management and application push across the whole estate at once (~60 servers, 150 workstations, international multi-site).
Benchmark & selection: Analysis and comparison of several market solutions. Requirements document, tests in an isolated environment, results presented to the CIO. Tanium was chosen for its real-time capability and built-in modules.
Deployment: Installation and configuration of Tanium on the existing infrastructure. Integration with Rapid7 InsightVM to report vulnerabilities. Gradual replacement of Ivanti by Tanium for patch management.
Automation: 3-wave rollout process (test → non-critical → critical). Alert script for out-of-date machines. Geographic detection script for unusual IPs with automatic blocking.
Result: Significant reduction of the overall vulnerability score, with no production incident. Repeatable, auditable process for ISO 27001 compliance.
TaniumRapid7 NexposeInsightVMIvantiPowerShellPythonBashISO 27001
Zero Trust architecture — Company simulation
Capstone project · Ynov M2 · Team of 4
Context: Final-year M2 project in a team of 4. Full simulation: a fictitious company submits an audit request, and the answer is adapted to its budget and defined needs.
Audit phase: Analysis of the existing infrastructure, risk identification, security recommendations prioritized according to the fictitious client's budget.
Infrastructure: Deployment of 5–6 virtual servers on Microsoft Azure. 3 user accounts with distinct access levels. VLAN segmentation, DMZ, Zero Trust approach.
Hardening: Windows Server and Active Directory hardening. SIEM deployment and centralized monitoring. Overall hardening of the architecture.
Presentation: Oral before/after presentation — initial state vs. secured infrastructure, with a justification for every technical choice.
Microsoft AzureWindows ServerActive DirectoryVLANZero TrustSIEMMonitoringHardening
Automation — Alerts & geographic detection
Security scripts · AirCostControl · 2022–2024
Script 1 — Out-of-date machine alert: Automatic detection of any workstation or server whose patches are out of date. Sends an alert identifying the machine and the missing fixes.
Script 2 — Geographic detection: Network connection monitoring. If a known IP of the estate connects from an unusual location, the script blocks access and triggers a manual authorization request.
Script 3 — Automated inventory: Automatic upload of the full estate inventory (hardware, software, patch status) to GLPI.
PythonPowerShellBashTaniumGLPIRapid7
Skills

Six domains, one standard

The tools I use in production, in training and in test environments.

Vulnerability Management
847 assets · prioritized CVEs · tracked remediation
Estate scanning, CVE analysis, prioritization by criticality, remediation tracking with no production impact.
Rapid7 NexposeInsightVMIvantiTanium
Firewall & Network security
4 sites · site-to-site VPN · VLAN/DMZ segmentation
Perimeter policy administration, site-to-site VPN, VLAN and DMZ segmentation.
CheckPointFortinet VPNCisco MerakiVLANs
Systems & Virtualization
60+ servers · Azure cloud · VMware ESXi
Windows Server, Active Directory, VMware ESXi, Hyper-V and Azure/OVH cloud administration.
Windows Server 2022AD · GPOVMwareAzure
Automation & Scripting
production scripts · alerts · auto patching · inventory
Security scripts, automatic alerts, patch deployment and estate inventory.
PowerShellPythonBashAnsible
Monitoring & Ops
24/7 monitoring · GLPI ticketing · Veeam backup
Infrastructure monitoring, asset management and ticketing, backups and service continuity.
CentreonZabbixGLPIVeeam
Hardening & Zero Trust
150 identities · security GPOs · least privilege
System hardening, security GPOs, least privilege, Zero Trust approach and ISO compliance.
GPOZero TrustIAMISO 27001
See the full tech stack 46 tools
Operational security 15 tools
Rapid7 Nexpose
InsightVM
Ivanti
Tanium
Insight EDR
Covalence Agent
Windows Defender
CheckPoint AV
Wireshark
Nmap
OSINT
Rapid7 SIEM
Splunk
Burp Suite
Metasploit
Network & Perimeter 7 tools
CheckPoint Firewall
Fortinet VPN
VLANs · DMZ
TCP/IP · OSI
Cisco Meraki
OpenVPN
Apache · Nginx
Systems & Virtualization 11 tools
Windows Server 2022
Active Directory · GPO
M365 · Teams · Teams Phone
VMware vSphere/ESXi
Azure AD
Microsoft Intune
Microsoft Azure
Linux Server
Hyper-V
OVH
Ansible
Scripting & Development 8 tools
PowerShell
Python
Bash
Git · GitHub
SQL
PHP
C
Monitoring & Ops 5 tools
Centreon
GLPI
Veeam Backup
Zabbix
Synology NAS
Level:
Basics / coursework
Used in production
Mastered / daily
scroll

Securing systems,
networks and infrastructure.

3+years in production
847assets tracked
94 %patch rate
150identities managed
Career

My Experience

3+ years on multi-site production environments in critical sectors.

01
Expert Cybersecurity Engineer
Ferchau France — Blagnac
Permanent contract · Engineering and consulting
Jun 2026 — Present
›Vulnerability management: Identifying, prioritizing and tracking the remediation of vulnerabilities.
›Hardening: Strengthening the configuration of systems and infrastructure.
02
Network / Security Administrator
Air Cost Control (A2C) — HEICO Group
Aerospace · Space · Defense · Worldwide multi-site
Jun 2022 — Oct 2024
~60 servers · 150 users · Multi-site infrastructure (Toulouse, Miami, Hamburg, Singapore) · IT team: 1 CIO, 1 IT systems manager, 1 infra/network admin, 2 apprentices
›Vulnerability Management : Led Rapid7 Nexpose/InsightVM campaigns. CVE analysis, score-based prioritization, reduction of the overall estate/server score. Remediation tracking with no production impact.
›Patch Management : Deployment through Ivanti then Tanium. 3-wave process: test → non-critical → critical.
›Automation: Out-of-date machine alert script. Geographic detection script for unusual IPs with blocking and a network authorization request.
See the 5 other missions
›Firewall & VPN : CheckPoint administration, site-to-site Fortinet tunnels, VLAN segmentation.
›Hardening & IAM : Windows Server 2022, AD, security GPOs, least privilege. 150 identities managed.
›Ops: Centreon/Zabbix, GLPI, Veeam, Synology NAS, VMware ESXi/Hyper-V.
›Workplace & Mobility: M365, Teams Phone, Intune, Cisco Meraki.
›Compliance: Internal ISO 27001 audits.
Rapid7InsightVMIvantiTaniumCheckPointFortinetCisco MerakiVMwareHyper-VVeeamCentreonZabbixGLPIIntuneAzure ADM365PowerShellPythonBashISO 27001
03
Network Administrator — Intern
Patrimum Group
Wealth management · SME
Jul 2020 — Dec 2020
~15 users · 3 servers · IT team: 1 manager + 1 intern
›L1/L2 support: Workstation incident resolution, good-practice awareness.
›GLPI : Upgrade and configuration of the ticketing solution.
See the 2 other missions
›GPO : Managing and updating Active Directory group policies.
›Inventory scripts: Developing scripts to automatically report the estate inventory.
GLPIActive DirectoryGPOPowerShellWindows Server
Education

Degrees & Certifications

Aug 2021 — Oct 2024
Master's (M2) in Cybersecurity
Ynov Toulouse Campus
Capstone project in a team of 4 — full audit and hardening simulation on Microsoft Azure
Zero Trust, DMZ, VLAN segmentation, Windows Server & AD hardening
SIEM deployment and centralized monitoring
Vulnerability management, patch management, ISO 27001 compliance
Oral before/after presentation: initial state → secured infrastructure
Sep 2019 — Aug 2021
BTS SIO — SISR option (IT services, networks & systems)
Institut Limayrac, Toulouse
Deploying a network infrastructure with servers and users
VLAN segmentation, DMZ, external portal
Configuring and securing inter-segment traffic
Windows Server and Linux fundamentals
Certification
SecNumAcadémie — ANSSI
French national cybersecurity certification
Recommendations

Professional feedback

Feedback from managers and colleagues from my professional experience.

"Remy is remarkably efficient and adapts to environments or tools he hasn't necessarily seen — he finds interesting and relevant approaches to the company's security."
DS
CIO
Air Cost Control
"Equally comfortable working alone or in a team. He digs into problems all the way and helps others dig too — it's rare to find someone who does both."
RS
IT Systems Manager
Air Cost Control
"What struck me was his ability to explain complex technical topics to non-technical people clearly, without needless jargon. A real asset in production."
AC
IT colleague
Air Cost Control
"He learns new tools very quickly. On Tanium, for example, he soon set up automations we hadn't considered."
IT
IT Manager
Patrimum Group
Contact

Let's talk

Permanent contract at Ferchau France (Blagnac). Open to professional conversations.

Contact details
Email
Click to send an email
LinkedIn
linkedin.com/in/remyrockstroh
Location
Toulouse · Blagnac
Status
Employed · Permanent contract, Ferchau France
Active — usually replies within 24 h
Send a message