Freelancer profile translated to English.

Description

My name is Haddouche Rayan, I am currently coming from a 2-year mission at BPCE. Primarily focused on vulnerability monitoring and analysis, I also implemented hardening on several sensitive databases as part of my mission.

Industry field of expertise

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

BPCE Infogérance & Technologies
Vulnerability & Hardening Analyst - VOC
BANKING AND INSURANCE
June 2024 - April 2026 (1 year and 10 months)
Paris, France
• Conducted security assessments and risk analyses on all IT assets (servers, containers, IoT, DBMS, middleware), including the definition of remediation plans and follow-up with technical and application teams.
• Documented security processes, procedures, and architectures.
• Led monthly vulnerability scan campaigns on existing assets, new masters, and packaged applications.
• Advanced vulnerability remediation management: coordination with technical teams, leading meetings dedicated to critical vulnerabilities, preparing summaries for security committees.
• Automated and optimized reporting processes using Python and PowerShell scripts for seamless data integration between Qualys, Splunk, and the CMDB.
• Continuously improved security monitoring dashboards in Splunk, including adaptation to organizational and technological changes.
• Supported international teams in vulnerability management, hardening standards application, and security policy compliance.
• Implemented monthly compliance monitoring (CIS) for sensitive infrastructure databases.
Qualys Splunk Hardening CIS Benchmark Vulnerability Management
Attijariwafa Bank
Cybersecurity Analyst
BANKING AND INSURANCE
May 2023 - June 2024 (1 year and 1 month)
Paris, France
• Led vulnerability scans using Qualys (planning, execution, and monitoring, scan automation).
• Analyzed and qualified vulnerabilities (criticality, impact, prioritization) with reporting to technical and business teams.
• Recommended remediation solutions and supported teams in fixing vulnerabilities (weekly points).
• Monitored remediation plans and controlled the correction of security vulnerabilities.
• Managed and monitored security incidents, from detection to resolution.
• Wrote monthly reports and security indicators (KPIs).
• Technological and regulatory watch in cybersecurity (arrival of 0-days, impact, and handling).
• Analyzed project security and integrated security requirements from the design phase.
• Managed IS security projects (coordination, monitoring, continuous improvement).
• Documented security processes, procedures, and architectures.