Freelancer profile translated to English.

Description

Security consultant with 8 years of experience in IT security and cloud architectures, primarily on Azure. I specialize in securing cloud infrastructures, Kubernetes environments, Identity and Access Management (IAM), data protection, and risk analysis (security by design).

Languages

French
Native or bilingual
English
Fluent
Arabic
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

Saint-Gobain
Azure Security Officer
March 2025 - Today (1 year and 3 months)
Courbevoie, France
Governance & Compliance:
• Oversight of compliance activities (audits, periodic reporting, remediation plan tracking).
• Management of the vulnerability and non-compliance remediation plan.
• Periodic review and re-certification of access and permissions.
• Support for project teams in integrating security from the design phase.
• Review and validation of architecture diagrams during Design Authority committees.
• Review and validation of network traffic openings.
• Performance of risk analyses and monitoring of security measure implementation.
• Analysis and documentation of exception requests.
Cloud & Data Security:
• Drafting and monitoring of a hardening plan for the Snowflake platform.
• Monitoring of pilot projects on Microsoft Fabric and Purview Data Cataloguing.
• Participation in the pilot integration of the WIZ CNAPP solution.
• Analysis of Azure asset compliance with existing security policies, and monitoring of remediation plans.
• Consulting on secure Azure architecture, in line with Cloud best practices (IAM, segmentation, encryption, etc.).
• Monitoring of the DevSecOps process in Data Analytics projects.
Detection & Response:
• Proposal and monitoring of the implementation of detection rules on the SIEM/XDR solution.
Application Security DevSecOps CNAPP Data Security Cloud Security
Société Générale
AZURE SECURITY ENGINEER
July 2022 - Today (3 years and 11 months)
Fontenay-sous-Bois, France
Security review and validation of Low-Level Design & High-Level Design Architectures
Community review and validation of Cloud Azure service risk analyses
Acceptance testing of Azure security components and Go To Cloud capabilities (Subscription creation workflow for projects, IAM, Control deployment, CyberArk Bastion integration, Qualys vulnerability management)
Participation in risk analyses for projects and initiatives in the Cloud
Analysis of derogation requests from security policy
Application of the Security Framework for projects before their integration into the ecosystem
Participation in the study and POC of CNAPP/CSPM solutions
Formalization of Cloud alert management processes
Consulting and support for application migration to the new Landing Zone (Go-To-Cloud transformation project)
Management of access and permissions in Azure Cloud
Preparation and facilitation of steering and operational committees
Management and monitoring of SecOps team activities (Team in India).
Microsoft Azure Cybersecurity Prisma Cloud Application Security Cloud Security
WAKAM
SECOPS ENGINEER
BANKING AND INSURANCE
February 2022 - June 2022 (5 months)
Paris, France
Assist the CISO with operational IT security management activities:
Administration of Cloud infrastructure monitoring tools (MS Defender for Cloud (Formerly Azure Security Center))
Monitoring and control of security recommendations application in the Cloud environment
Monitoring of regular audit/Pentest campaigns and the proper deployment of recommendations
Monitoring of security awareness campaign indicators for employees
Formalization of an IT security indicator dashboard
Performance of a benchmark of password management solutions (Bitwarden, PassBolt, LastPass)
Assistance in preparing IT security committees
Assist the CISO with monitoring and implementing resilience roadmap projects:
Update of the IT security management system, support for the operational deployment of IT security policies (asset management, incident management, access management, etc.): definition of operational procedures and monitoring of their deployment in conjunction with the relevant teams (Infrastructure, HR, Management, etc.)
Support for MFA deployment and user support
Assistance with the deployment of managed EDR and operator monitoring.
EDR Azure Policy Microsoft Azure Cybersecurity Cloud Security