Aiman El Fachtali

Application Security Project Manager (SAST & DAST), cloud migration, security integration in projects

- DevSecOps Referent for the entity and promote DevSecOps practices within teams: Identify and integrate security champions, mentor teams to strengthen security in engineering activities.

- Define the DevSecOps framework for engineering teams: Identify and assist in deploying security tools, define and maintain the security baseline for developers (container security, ...).

- Maintain & improve the security tool repository: Consolidate KPIs from DevSecOps tools through automation and report KPIs to management.

- Provide expertise and support to engineering teams on application security topics: Tool installation procedures (SAST/SCA/DAST, image analysis), assistance in understanding vulnerabilities and proposing fixes and workarounds.

- Evaluation of the existing situation, needs, and expected objectives.

- Planning, organization, and conduct of workshops with different entities.

- Monitoring and support of business units for the deployment of Data Discovery, Classification, and Encryption tools, and Data Access Monitoring (DAM).

- Monitoring and support on Big Data topics, working on data inventories, storage, deletion, extraction, ... as well as the various tools to meet these needs.