Abdelhakim Bekkouche

Implementation of a Security Operations Center (SOC) and construction of an operational security team within the Europcar Mobility Group entity, which is undergoing a complete transformation : • Participation in the development and maintenance of mechanisms and rules for correlating events on SIEM (Splunk) • Research and testing of new security tools and recommendations on tools to be implemented in the SOC environment. • Creation and maintenance of operational reports for key performance indicators and weekly/monthly measurements. • Maintain security tool cases in operational condition • Implementation of detection scenarios and processing of associated alerts • Implementation of incident response and vulnerability reporting processes • Vulnerability management (support, qualification, monitoring) • Monitoring and analysis of detected security incidents (internally, by the CTI and CERT) as well as of remediation activities  • Steering investigations and inquiries requested by the business lines or management at the level of other Group entities. • Leading safety committees, workshops, awareness sessions, etc.

Within the SSI architecture team, intervene on the technical, technological and methodological choices that meet security requirements : • Validation of information system mapping and security assumptions for different environments during the design phase. • Writing and monitoring the implementation of the security requirements applicable to the different components of the architecture. • Writing and reviews of security requirements for tools used by business teams. • Participation in the design of the architecture and the implementation of systems by ensuring that the different bricks have the appropriate level of security

Supervision of information systems to ensure the detection, containment and remediation of Identity Access Management (IAM) security incidents : • Deploying and operating CyberArk Privileged Access Security Solution • Operating the tools (Active Directory, CA Identity Manager, ..) and the infrastructure to maintain the management of access rights • Management and implementation of sites on the web application firewalls (WAFs) through rWeb solution • Security policy administration of web portals • Development of automation tools for operational tasks • Deployment and implementation of security services for business users • N2 / N3 Incident Management Migration of a part of the information system to the Amazon Web Services (AWS) cloud : • Mapping and control the users access roles • Deployment of roles and access in interface with the CyberArk solution • Analysis of detection tools and organization of reaction to security alerts • Accompanying project teams in the appropriation of security services Establishment of the Security Operational Center (SOC) : • Managing exchanges with the teams working on different areas • Setting up the process of incident response and vulnerability Reporting • Following-up of detected malicious activities and remediation activities

• Website development and team management • Providing solutions • Interface between french clients and local technical team • Activity reports • Technical and functional specifications • Testing and production • Support