MSFreelancer profile translated to English.
Back to original languageAbout Motaz
I specialize in DevSecOps, with strong expertise in integrating security tools (SAST/SCA) into CI/CD pipelines (Jenkins, etc.), as well as implementing best practices for rapid detection and remediation of vulnerabilities. I have notably implemented solutions like Fortify, Nexus IQ, and OWASP Dependency Check, while ensuring rigorous issue tracking and effective risk reduction.
My methodology is based on the "Shift Left" principle to integrate security from the early stages of development. I support teams through targeted training, development of technical documentation, and establishment of metrics to regularly assess the progress of corrective actions.
Through these practices, I facilitate smooth interaction between development, security, and operations, ensuring each stakeholder has the necessary support and tools to maintain an optimal security level at every stage of the software lifecycle.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- BNPPDevSecOps EngineerOctober 2022 - Today (3 years and 8 months)Paris, FranceBNPP• Deployment and integration of SAST/SCA tools (Fortify, Nexus IQ) into the CI/CD chain.• Consulting and support for teams on effective scan adoption.• Conducting DevSecOps training sessions and writing documentation to optimize workflows.• Implementing security best practices for Docker and Kubernetes (image scanning, orchestrator configuration, vulnerability management).• Supervising the integration of new applications, monitoring production vulnerabilities, and developing security reports.• Identifying vulnerabilities and tracking remediation actions, with the implementation of operational indicators to measure the effectiveness of fixes.• Writing and updating technical documents and remediation plans.• Technical support for teams in applying security solutions.• Implementing and monitoring security indicators with PowerBI.• Organizing and leading security-focused code reviews, periodically conducting compliance audits, and tracking remediation plans.
- STAR AssuranceDevSecOps EngineerMarch 2023 - October 2023 (7 months)Tunis, TunisiaSTAR assurance• Setting up and optimizing continuous integration and deployment pipelines, ensuring speed and reliability of production releases.• Automating security scans to identify vulnerabilities in dependencies, with proactive management of false positives to maintain result relevance.• Strengthening security and hardening production environments by following industry best practices, ensuring increased compliance.• Continuous detection of secrets and prevention of sensitive data leaks, contributing to enhanced project security.• Regularly performing security scans on web applications, transferring results to Defect Dojo, and rigorously tracking vulnerabilities until their effective resolution.• Conducting manual security assessments on production servers and automating successful strategies to improve compliance and reduce risks.
- STAR AssuranceOperational Security EngineerMarch 2021 - March 2022 (1 year)Tunis, TunisiaSTAR assurance• Installation and configuration of Sophos XG firewalls, with security synchronization between Sophos Endpoint and Sophos XG.• Implementing VPNs via Fortigate and deploying multi-factor authentication (MFA) with Azure AD SSO.• Managing Sophos antivirus and configuring security profiles in compliance with company policies.• Conducting Active Directory audits and developing access management policies.• Automating the hardening of Windows and Linux servers with Ansible, according to NIST standards.• Configuring security profiles in Intune.• Developing PowerShell scripts to delegate Active Directory access based on the principle of least privilege.• Contributing to the writing of security policies and procedures, monitoring their implementation.• Deploying a phishing simulation tool, conducting phishing campaigns, and leading security awareness training.
Recommendations
Be the first to recommend Motaz
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineering degree, Network infrastructure and data securityESPRIT2020Diplome d'ingénieur, Network infrastructure and data security
- Bachelor's degree, Systems and network administrationAriana2017Licence, Administration systèmes et réseaux