Freelancer profile translated to English.
Back to original languageAbout Yassine
Are you looking for an expert capable of securing IT/OT industrial architectures and integrating cybersecurity from the design of your solutions?
An OT cybersecurity engineer certified ISO 27001 Lead Implementer, I work on critical industrial environments (IACS, energy infrastructures, transport) to structure risk management, strengthen communication architectures, and integrate Secure by Design into development cycles.
My expertise covers:
risk analysis (EBIOS RM, ISO 27005),
ISO 27001 and IEC 62443 compliance,
threat modeling (STRIDE, DFD, Microsoft TMT),
industrial protocol security (IEC 61850 / MMS, EtherCAT, SCADAPack, SCADA architectures based on Redis),
integration of Secure SDLC practices (SAST – Coverity, Squore, SCA – BDBA, vulnerability validation, CVSS scoring).
I support technical and product teams on Build-Time and Run-Time aspects (access control, input validation, segmentation, secure exchanges, traceability), with a pragmatic approach focused on attack surface reduction and operational resilience.
My added value: a dual understanding of development & industrial cybersecurity, allowing me to bridge the gap between technical architecture, regulatory requirements, and OT field constraints.
French
Native or bilingual
English
Native or bilingual
Arabic
Conversational
Spanish
Conversational
Can work on-site
Paris (up to 50km)
Experience
- Schneider ElectricOT/IT Cybersecurity Consultant / Referent – Industrial SystemsJuly 2025 - Today (11 months)Schneider Electric is a global leader in energy management and industrial automation, present in over 100 countries and strongly committed to developing critical solutions for industrial infrastructures.Within the EcoStruxure Automation Expert team, I led cybersecurity activities on industrial communication stacks, particularly around IEC 61850 (MMS Client), EtherCAT, SCADAPack, and SCADA integrations based on Redis.Tasks performed:• Conducted threat modeling activities (STRIDE) on Build-Time and Run-Time architectures• Analyzed and secured MMS flows between the IEC 61850 wrapper and external IEDs• Identified and formalized attack scenarios: spoofing, sniffing, privilege escalation, tampering, denial of service• Assessed vulnerabilities using CVSS v4 and drafted actionable test reports• Validated security controls in constrained OT environments• Integrated Secure SDLC practices (SAST, SCA, architecture reviews)• Contributed to aligning architectures with IEC 62443 and ISO 27001
- EIFFAGEOT/IT Cybersecurity Consultant – Grand Paris Express (Line 15)July 2024 - July 2025 (1 year)Paris, FranceEiffage is a major European infrastructure player, involved in critical transport and energy projects.As part of the Grand Paris Express project, I participated in the deployment of cybersecurity requirements on complex industrial infrastructures.Missions performed:• IT/OT risk analysis on critical infrastructures• Application of ISO 27001 and IEC 62443 requirements• Design of network segmentation strategies• Hardening of industrial equipment and firewalls• Mapping of OT exposure surfaces• Coordination between IT, OT, and engineering teams
- SETICIT/OT Cybersecurity EngineerSeptember 2021 - July 2024 (2 years and 10 months)Lognes, FranceSETIC is an industrial company specializing in the design and manufacture of cabling machinery for the energy and infrastructure sectors.Contribution to the implementation and continuous improvement of the ISMS (ISO 27001).Performance of IT/OT risk analyses and development of treatment plans.Application of IEC 62443 requirements to connected industrial environments.Definition of security perimeters and implementation of organizational and technical controls.
Recommendations
Be the first to recommend Yassine
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineering SchoolCNAM Paris2024Ecole d'ingénieur, Systèmes Electroniques, Telecommunications et Informatique
- BTS Digital SystemsLycée Louis Armand Paris 15e2021BTS Systèmes Numériques
Certifications
- ISO 27001 Lead ImplementerPECB2025