Bertrand Thomas

Built an AI assistant using LLMs (Vertex AI, LangChain) that lets support and customer success teams instantly query Symantec's internal knowledge base and 76,000+ support cases — replacing hours of manual search with conversational AI.

Built ESG Echo, a full-stack operations platform (Next.js, BigQuery, Vertex AI) serving 8 global Catalyst partners — BI dashboards, renewal forecasting, AI-powered pricing recommendations, and customer success tools that replaced fragmented spreadsheets with a single multi-tenant source of truth.

Created Intello, ESG's customer intelligence platform, from scratch — unified entitlement data, product telemetry, and Sales notes into a single source of truth that replaced the legacy CRM and became the operating backbone for Sales GTM and Customer Success across the entire division.

Provided direct support to Symantec's leadership team to build the Annual Operating Plan — quantitative and qualitative models that forecast financial performance, define product strategy, and set the division's targets for the year.

Owned the GTM plan for Broadcom SES Core customers ($200M) — articulated positioning and pricing strategy to Product, Marketing, and Sales teams, increasing annual recurring revenue by 11% in 12 months.

Built TurboPlay, a Sales Play recommendation engine that uses customer intelligence data to help sales teams determine the best approach to win renewal deals — matching account signals to proven playbooks.

Built a web-based MITRE ATT&CK efficacy dashboard with Precision/Recall modeling — replaced a stale Excel spreadsheet with real-time signal-to-noise analysis that changed how product teams prioritized detection gaps.

Built an interactive MITRE ATT&CK sales enablement tool that let sales engineers walk C-Level and SOC decision-makers through Symantec's detection coverage on specific threat techniques — adopted division-wide.

Ran competitive research across endpoint security products — identified product gaps and fed findings to product marketing and solution engineers so they could articulate Symantec's differentiated value against CrowdStrike, Microsoft, and SentinelOne.

Designed and built BPCE's SOC from scratch: recruited 15 engineers, secured 12M€ in funding over 3 years, and stood up the bank's first 24x7 cybersecurity monitoring capability.

Led the incident-response team through major security crises — reported directly to C-Level executives in real-time and rewrote the crisis management playbook based on post-mortem gaps.

Managed executive-level relationships with US security vendor CCOs — ran structured PoC evaluations and aligned vendor roadmaps with BPCE's multi-year security strategy.

Managed endpoint security across 60,000 workstations and 6,000 ATMs — deployment plans, architecture docs, and operations manuals. Hired full-time after a successful consulting assignment.

Built an ELK-based analytics platform that went enterprise-wide — personally trained 60 engineers across departments to use it, cutting incident resolution time by 30%.

Applied anomaly detection algorithms to network traffic and endpoint data — reduced investigation time by 80% by killing false positives so analysts could focus on real threats.

Led two security rationalization projects during a subsidiary merger — consolidated duplicate tools and processes, saving 1M€ per year.

Ran penetration tests and red team engagements for CAC 40 and Fortune 500 companies — presented findings and remediation plans directly to Chief Security Officers.

Gave live smartphone exploitation demos to government and law-enforcement agencies — showed how contacts, messages, location history, and credentials could be extracted from mobile devices in real-time.