Laura Aunion

Cybersecurity Analyst with 6+ years of experience in Security Operations, Incident Response and Security Engineering within international banking environments. Experienced in security monitoring, incident response, vulnerability management, endpoint security, identity and access management (IAM), data protection and Zero Trust initiatives. Strong analytical mindset with proven ability to collaborate with technical and business stakeholders, improve security controls and strengthen enterprise cyber resilience.

Cybersecurity Engineer at BNP PARIBAS (2023-09 – Present)

• Manage security exceptions for firewall policies, Cisco Secure Email Gateway and Cisco Secure Web Manager, ensuring secure connectivity across international banking environments.
• Perform security risk assessments by reviewing network flows, protocols and business requirements to ensure secure implementation of security controls.
• Coordinate remediation activities with Infrastructure, Network and Security teams to reduce security risks and strengthen enterprise security posture.
• Manage email security, web filtering and endpoint download protection through Cisco Secure Email Gateway and Cisco Secure Web Manager.
• Support Data Loss Prevention (DLP) and Insider Risk Management initiatives by analysing policy violations and improving data protection controls.
• Collaborate with Infrastructure, Network and Security teams to implement security controls aligned with Zero Trust principles.
• Produce technical documentation, operational procedures, dashboards and security reports.
• Automate operational security processes using Python to improve efficiency and reporting.

Cybersecurity Analyst (CISO Cyberthreat Unit) at Santander Bank (Santander Digital Services) (2020-08 – 2023-09)

• Monitored and investigated security alerts generated by SIEM and EDR platforms within a global banking environment.
• Investigated and responded to cybersecurity incidents, performing alert triage, root cause analysis and coordinating remediation activities.
• Supported incident response by analysing malicious activity, containing threats and documenting investigation findings.
• Performed threat analysis, Threat Hunting and malware investigations to identify and mitigate security risks.
• Collaborated with technical teams and stakeholders to coordinate security incidents and improve response capabilities.
• Worked with Endpoint Detection & Response (EDR), Identity & Access Management (IAM) and Data Loss Prevention (DLP) technologies to strengthen enterprise security.
• Developed technical documentation, security procedures, detection playbooks and operational dashboards.
• Supported GDPR compliance and internal cybersecurity standards across incident response activities.

Dual Degree in Business Administration & Law – Carlos III University

Bootcamp in Full Stack Web Development – Le Wagon