Raed Cherif

SSO configurations to implement Zero Trust principles across

multi-tenant client environments.

phishing recognition, MFA adoption, and secure M365 usage

across 50+ client organisations reducing security-related support

incidents and improving client-side baseline hygiene scores.

hybrid Active Directory environments designing OU hierarchies, delegating RBAC with least-privilege principals, and enforcing

GPO-driven security baselines aligned to CIS and Microsoft Security

Baselines eliminating over-privileged account sprawl across 50+

client tenants.

endpoints achieving and maintaining 95%+ device compliance rate,

remediating non-compliant devices within defined SLA windows, and

directly reducing client attack surface exposure.

policy baseline across 500+ endpoints spanning 50+ multi-tenant

environments defining ASR rules, tamper protection enforcement, and

exclusion governance frameworks that reduced alert noise by ~30% while maintaining operational compatibility across

heterogeneous client OS estates.

incidents into documented remediation runbooks and targeted

hardening actions, achieving a 20% reduction in repeat incident rate

and enabling consistent security posture uplift at scale.

roadmaps across the client portfolio translating Microsoft Secure

Score gaps, Defender vulnerability findings, and Sentinel alert trends

into prioritized action plans presented to client stakeholders.

As part of this freelance mission, I conducted penetration tests on several of the client's websites to assess their security level. The objective was to identify potential vulnerabilities (injections, authentication flaws, misconfigurations, etc.), analyze associated risks, and provide concrete corrective recommendations. This intervention allowed the client to strengthen the security of their applications and effectively protect their users' sensitive data.