Yazan Hawash

Support for a strategic cybersecurity project focused on threat detection and response capabilities. Management of security topics, stakeholder coordination, security and information system (SSI) requirements monitoring, risk management, participation in project committees, and support for teams in implementing security actions.

• Management of security projects (NDR, SBXs, IDS/IPS) and operational monitoring.

• Supervision of 8 cybersecurity solutions (IPS/IDS, NDR, Mail and Web Sandboxes, etc.).

• Critical challenge of technical architectures proposed by IT teams and security recommendations.

• Redesign of the IPS architecture on Fortinet.

• Operational monitoring of IT/GRC projects in conjunction with business and technical teams.

• Facilitation of strategic meetings and monitoring of team objectives.

• Development and implementation of cybersecurity and risk management strategies aligned with IT governance (GRC).

• Manage the monitoring of IDS/IPS inspection coverage at the interconnection points of intra-datacenter networks.

• Put security policies into production on managed solutions.

• Implement changes with impact assessment.

• Investigate security incidents reported by the PDIS SOC.

• Provide on-call support during non-business hours.

• Write activity reports.

Technical Environment: Microsoft Defender O365, PaloAlto, Fortinet, Cisco, Vectra, McAfee Trellix, gatewatcher, Entrust

• Management of 7 security solutions:

• Implementation, supervision, and optimization of IT infrastructure protection tools, including DarkTrace, Cyberwatch, DLP, IAM, IPS/IDS, and Sandboxes.

• Risk and compliance management (GRC): Ensuring the application of security policies (PSSI, ISO 27002, GDPR, ISO 27001), monitoring security audits, ensuring system compliance, establishing SI security procedures in case of crisis, conducting penetration tests to exploit vulnerabilities, writing observation reports, and proposing relevant recommendations.

• Incident supervision and cyber attack response: Coordination of security incident management in collaboration with operational teams and the SOC.

• Development of cybersecurity strategies: Development of continuous improvement plans, managing access rights and authorizations (privileged accounts), defining an access request procedure, implementing key performance indicators (KPIs), and monitoring corrective actions.

• Awareness and training of teams: Implementation of awareness programs to improve cybersecurity culture within the company.

• Collaboration with management: Regular reporting to the CISO and coordination with IT and business teams to align cybersecurity with the company's strategic objectives.

• Supporting IT teams in remediating detected vulnerabilities.

Technical Environment: Darktrace, Cyberwatch, Office 365, SentinelOne