Mouha Hani

• - Vulnerability management and security risk assessment using Qualys (scan, analysis, vulnerability prioritization).

• - Conducted a Gap Analysis of the product against CRA requirements, documenting discrepancies, recommendations, and a compliance plan.

• - Security incident response.

• - Integrated security into DevOps pipelines with SAST, DAST, and SCA tests using SonarQube, Burp Suite, and Snyk.

• - Technological watch on vulnerabilities, exploits, and pentest techniques.

• - Assisted in the implementation of security solutions and user awareness training on best practices.

• - Deployment and integration of security and monitoring solutions (Nozomi, Splunk, and FortiGate) across 3 sites.

• - Automation and industrialization of processes to secure and ensure the reliability of operations.

• - Identification of vulnerabilities and risk analysis to secure systems and infrastructures.

• - Developed an IT/OT/IIoT test scenario bank based on MITRE ATT&CK to assess resilience and enhance system security.

• - Technical and security architecture audit in accordance with IEC 62443 standard.

• - Hardening of SCADA system components (PLC, RTU, HMI, and OS).

• - Developed a virtual and physical laboratory for testing and validating security solutions, devices, and products through FAT/SAT tests.

• - Maintained operational and secure infrastructure (MCO/MCS).

• - Project management and methodical preparation for the efficient deployment of Microsoft EDR on 180 workstations.

• - Governance and access management on Active Directory according to the principle of least privilege.

• - Developed and delivered training sessions and documentation (French / English).

• - Implementation of digital video surveillance systems.

• - Installation and configuration of cameras and digital video recorders (NVR/DVR).

• - Deployment of network cabling and configuration of network equipment (switch, router, Firewall, and access points).