Ayoub Ha

• • Design of OT security architectures compliant with standards (IEC 62443), including network segmentation (zones and conduits), hardening of remote access, and securing OT/IT flows.

• • Integration of OT cybersecurity solutions: Nozomi Guardian (IDS), Splunk (SIEM), Xona (remote access bastion), OWL (data diode), TXOne (OT endpoint protection), Stormshield (firewall), and Acronis DeviceLock DLP (data loss prevention and device control) to improve the security posture and resilience of OT environments.

• • Conducting OT security audits (architecture and configuration), risk analysis, and developing remediation plans adapted to critical industrial environments.

• • Deployment of secure architectures for Industry 4.0 industrial monitoring via the Vnode solution, enabling remote supervision of production KPIs and automated integration with ERP systems.

• • Contribution to business development activities (pre-sales, prospecting, client needs qualification).

• • Leading cybersecurity awareness sessions for client employees.

• • Delivering industrial cybersecurity and Python programming training as part of JobIntech programs, to support the skill development of young talents towards cybersecurity careers.

• • Design and development of an Industry 4.0 monitoring solution for real-time tracking of industrial KPIs.

• • Implementation of a complete data acquisition, storage, and visualization chain (smart sensors, real-time database, supervision dashboards).

• • Development of a dedicated mobile application for inputting and integrating uninstrumented data, particularly for quality monitoring.

• • Deployment of a modular cloud architecture, ensuring solution scalability and client operational autonomy.

• • Integration of production data with the ERP system.

• • On-site integration of the solution with clients, deployment support, and team training on using the monitoring platform.

• • Conduct comprehensive cybersecurity tests on an industrial testbed using the Nozomi Networks solution.

• • Programming and configuration of a physical industrial testbed consisting of a Siemens S7-1200 PLC, a SINAMICS V20 drive, a Siemens KTP700 HMI, and a three-phase motor.

• • Integration and configuration of an "Ewon Flexy 202" industrial router for remote automation management.

• • Vulnerability identification using the Nozomi Guardian industrial cybersecurity solution.

• • Penetration testing using Wireshark, Colasoft Packet Builder, and Python scripts.

• • Attack detection with Nozomi Guardian and incident response with a Fortigate firewall.

• • Study of the IEC 62443 standard and development of an audit checklist.