Design and Implementation of a Centralized Cybersecurity Monitoring, Correlation, and Incident Detection Platform Based on an Open-Source SIEM Solution

Track

IT & Cybersecurity — Topic 01

Project description

As part of its efforts to strengthen the security of its information system, Enova Robotics is offering a final-year project focused on designing and deploying a centralized platform for cybersecurity monitoring and incident detection.

The project involves studying the existing IT infrastructure, designing a SIEM architecture and implementing a solution to centralize, analyze and correlate security events from the company's various devices and systems.

The intern will:

• Deploy and configure a solution based on open-source technologies such as Wazuh and OpenSearch
• Integrate network equipment, particularly FortiGate, as well as Linux and Windows servers
• Develop custom detection rules
• Implement dashboards and alerting mechanisms
• Create incident-simulation scenarios to test and validate the effectiveness of the deployed solution

Candidate profile

• Final-year engineering student, Bac+5
• Specialization in Computer Networks, Systems and Cybersecurity
• Strong interest in cybersecurity, monitoring and IT infrastructure administration

Required skills

• Good knowledge of computer networks, including TCP/IP, DNS, DHCP, VLAN and VPN
• Good command of Linux and Windows operating systems
• Knowledge of server and network equipment administration
• Basic knowledge of cybersecurity, intrusion detection and system log analysis
• Knowledge of Syslog and SNMP protocols
• Basic Python or Bash scripting skills
• Knowledge of SIEM solutions, particularly Wazuh, is an advantage

Duration

4 to 6 months.