Freelancer profile translated to English.

Description

🎓CISSP Certified (January 2025)

Cybersecurity Consultant, I have been able to bring my expertise in information system security and systems and network engineering to a large number of different environments with proven results.

AWS Solutions Architect & AZ500 Certified, I help companies secure their on-premises and cloud information systems through my technical and functional skills.

With skills in ICS (GICSP certified), cloud (Azure and AWS), risk analysis, and cyber project management, I can help you secure your infrastructure (on-premise or cloud) but also in integrating security into projects by adopting a Security by Design approach.

I am a very curious, autonomous person with good interpersonal skills. All these assets will be a plus for your team.

Languages

French
Native or bilingual
English
Fluent
Arabic
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 40km)

Société Générale
AWS Cloud Cybersecurity Expert
BANKING AND INSURANCE
February 2024 - Today (2 years and 6 months)
Fontenay-sous-Bois, France
- Support for projects to define security elements to be implemented
- Participation in risk analyses of projects and initiatives in the Cloud
Review of architectures (HLD/LLD)
Formulation of recommendations and measures to be implemented
Implementation of audit action plans
Analysis of requests for derogation from SG security policies
- Monitoring of security controls in the Cloud
- Security representative of the BU to other Group IS Security entities
- Third-party cyber evaluation
Participation in CNAPP PoC and formulation of a security opinion on the studied solution
Amazon Web Services Cybersecurity Cloud Security Cloud Security
engie
Cybersecurity Project Manager
ENERGY AND UTILITIES
January 2023 - Today (3 years and 7 months)
Paris, France
Project manager for the CERT on 2 projects:

- SOC detection improvement project by leveraging collected logs
o Study of threats and detection capabilities based on the MITRE ATT&CK framework
o Study of security solutions implemented at Engie, and the applied configuration
o Development of new Splunk detection use cases based on study results

- DNS log collection project
o Coordination of a team of 4 experts (AD expert, Splunk expert, architect, SOC expert)
o 48 domain controllers collected
o Solicitation of independent entities for the implementation of the collection architecture
o Drafting of collection procedures
o Implementation of project monitoring KPI dashboards
Project Management Cybersecurity MITRE ATT&CK Information Security Management
Engie
Cybersecurity & Cloud Consultant
ENERGY AND UTILITIES
July 2022 - Today (4 years)
Paris, France
Within Engie's CERT: improving cloud security incident detection by implementing new solutions and improving existing processes.

Activities:
- AWS IAM Access Analyzer: Study of the solution, integration with Splunk, and reporting product limitations
- AWS Detective: Study of the solution in the Engie context
- Prisma Cloud CSPM: Study of anomaly policies, selection of alerts to integrate into Splunk, development of use cases and playbooks
- Prisma Cloud CWP: Study of workload protection functionalities
- Definition and implementation of a log collection architecture (AWS and Azure)
- Cloud Forensics: Definition of an intervention mechanism and development of a procedure
Cloud Security Project Management Amazon Web Services Microsoft Azure Cybersecurity

Check out Mosaab's experience

Yassine B. and 1 other person have recommended Mosaab

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

Baptiste Duhen

Fullstack developer

4.6

(4)

Amed Hamou

Senior Lead Developer

(2)

Audrey Champion

Web developer

4.3

(3)

Signup to reveal

Communication Systems and Networks
National Institute of Applied Sciences of Rennes
2018
Système et Réseaux de Communication
Telecommunications Engineering
School of Technology (ÉTS)
2017
Ingénierie des télécommunications