
Thomas Orsini
@thomasorsini
I build detection, incident-response automation, and agentic cybersecurity systems.
What I'm looking for
At HeadMind Partners, I support BNP Paribas on SIEM detection coverage, Purple Team testing, and incident-response automation. I assess detections against MITRE ATT&CK, prioritize remediation, and defined six automation projects including EDR endpoint isolation and TheHive/ServiceNow integration.
I've also triaged CERT alerts for Thales, built cybersecurity automation MVPs for BPCE-IT, and coordinated ransomware isolation exercises for AXA GO. Outside client work, I build tool-using agentic systems and operate a self-hosted Proxmox, Docker, Linux, and Kubernetes homelab.
Experience
Work history, roles, and key accomplishments
Associate Consultant, Cyber Risk & Security
HeadMind Partners
Sep 2024 - Present (2 years)
Assessed SIEM detection use cases against a baseline and MITRE ATT&CK; identified coverage gaps and prioritized remediation. Coordinated a Purple Team campaign and defined six incident response automation projects.
CSIRT, Detection & Automation Consultant
BNP Paribas
Sep 2024 - Present (2 years)
Assessed SIEM detection use cases against a baseline and MITRE ATT&CK; identified coverage gaps and prioritized remediation. Coordinated a Purple Team campaign and defined six incident response automation projects.
Assistant Project Manager
AXA GO
Feb 2024 - Aug 2024 (6 months)
Analyzed ransomware isolation scripts and coordinated SOC, network and crisis management teams. Organized two international tabletop crisis exercises and built two impact dashboards for the Fast Isolation process.
Cyber Resilience Intern
HeadMind Partners
Feb 2024 - Aug 2024 (6 months)
Analyzed ransomware isolation scripts and coordinated SOC, network and crisis management teams. Organized two international tabletop crisis exercises and built two impact dashboards for the Fast Isolation process.
Power Platform Cybersecurity Intern
BPCE-IT
Jul 2022 - Dec 2022 (5 months)
Built three MVPs to automate incident handling, data protection controls and security tracking across projects.
Tier 1 CERT Analyst, Operational Backup
Triaged alerts, performed first-level investigations and enriched IOCs across phishing, fraud, vulnerability and suspected compromise cases.
Education
Degrees, certifications, and relevant coursework
ISC2
Certified in Cybersecurity (CC), Cybersecurity
Certified in Cybersecurity (CC) by ISC2, achieved in 2026.
ISEP
Engineering degree, Digital Security and Networks
Engineering degree in Digital Security and Networks from ISEP, completed in 2024.
Shibaura Institute of Technology
Exchange program, Cybersecurity
Participated in a cybersecurity exchange program at Shibaura Institute of Technology in Tokyo.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Thomas?
You can contact Thomas and 90k+ other talented remote workers on Himalayas.
Message ThomasGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
