Ahmed Amine HARROUZ
SOC Lead/Senior SOC Analyst|Incident Response CTI
Salary / Daily rate
Paris, France
Freelance
Can come onsite
Skills
Languages
About me
Intro
Senior cybersecurity professional with 12+ years’ experience across SOC, IR, DFIR, CTI, threat hunting and detection engineering. Led SOC teams, managed complex incidents, built SIEM/EDR detections, SOAR playbooks and cloud monitoring. Strong expertise in Sentinel, Splunk, EDR, vulnerability management, SaaS & business application security, including monitoring rules for Salesforce and GitHub.
Work experience
Valuelytix
Mar 2022 - Present
4 years 8 months
Paris, France
Technical Cyber security SOC Lead
Apr 2025 - Present
1 year 7 months
Paris, France
– Lead and manage a global SOC team of 6 analysts, ensuring efficient operations and continuous skills development – Oversee the full lifecycle of cybersecurity incidents, from detection to remediation, while assisting IT teams in incident management and response – Collaborate with cross-functional IT and security teams to identify detection gaps and implement improvements in monitoring and alerting – Design, implement, and enhance threat hunting processes to proactively identify and mitigate advanced threats
Senior Incident Responder / Cybersecurity Analyst L3
Mar 2022 - May 2025
3 years 3 months
– Manage cybersecurity incidents from detection to remediation, updating incident response processes (React Matrix). – Automated response workflows with SOAR and PowerShell/Python – logging into Azure Monitor, automated Sentinel playbooks, CI/CD security controls – Enhance forensic tools and telemetry systems for incident investigation. – Automate incident response via SOAR platforms, reducing response times and improving efficiency. – Threat Hunting: – Identify emerging attack patterns and transform them into detection rules. – Conduct post-mortem analysis to address detection gaps and enhance prevention mechanisms. – Cyber Threat Intelligence: – Monitor for phishing, brand abuse, and exposed services. – vulnerability management – led initiatives, working with IT teams to assess and remediate vulnerabilities across cloud and on-premise environments – Continuously improve detection rules and incident response procedures, strengthening overall security posture and resilience
Senior SOC Analyst / Incident Responder Consultant / Vulnerability management
Eva group (ex BSSI)
Nov 2019 - Mar 2022
2 years 5 months
Mission 1: Financial Institution (Jan 2020 – July 2020) – Managed PCI DSS incidents and developed SOC procedures for L1/L2 teams. – Improved phishing detection, vulnerability management, and security incident response. Mission 2: Luxury Company (July 2020 – March 2022) – Handled major incidents (DDoS, compromised servers) and led root cause analysis. – Developed security playbooks and integrated business applications into SIEM (Splunk, Sentinel) systems. – Deployed Mitre ATT&CK rules, built dashboards, and handled vulnerability management. – Managed vulnerability assessments and coordinated with IT teams to ensure timely patching and remediation of security gaps
Senior IT Security Engineer
Macirvie Insurance Company
Apr 2019 - Nov 2019
8 months
Kouba, Algeria
– Redesigned infrastructure security following the Cyber Kill Chain model. – Implemented Elasticsearch SIEM and conducted web server/firewall audits. – Developed and tested business continuity and disaster recovery plans.
Senior Network Security Engineer
SLC Internet Provider
Apr 2018 - Jan 2019
10 months
Kouba, Algeria
– Led an MSSP project, handling NGFW administration, vulnerability management, and threat hunting. – Designed a SOC service with detection rules and use cases for various security layers. – Supervised SOC projects, performing POC testing and deploying SIEM solutions.
Cybersecurity Consultant
Ota Djezzy Veon
Oct 2015 - Mar 2018
2 years 6 months
Kouba, Algeria
– Administered security solutions (NGFW, IPS/IDS), integrated platforms with SIEM for a global SOC. – Ensured SOX IT compliance and developed use cases for privileged user monitoring. – Deployed and maintained ArcSight SIEM and related security policies.
IT Security Engineer
Quantum Network Security
Oct 2013 - Aug 2014
11 months
Kouba, Algeria
– Deployed and configured Sourcefire security solutions, performing network audits for public companies. – Trained engineers on Sourcefire products and managed network security.
Licenses & certifications
Splunk Certified Cybersecurity Defense Analyst
Issued: Jan 2023
Azure Security Engineer Associate
Issued: Jan 2020
Qualys Certified Specialist
Issued: Jan 2019
Professional Cloud Security Manager
Issued: Jan 2019
ArcSight ESM 6.5 Administrator and Analyst - ATP
Issued: Jan 2016
HP Accredited Solutions Expert ArcSight Logger V1
Issued: Jan 2016
Sourcefire Certified Security Engineer
Issued: Jan 2015
Sourcefire Certified Security Architect
Issued: Jan 2015
Sourcefire Certified Professional
Issued: Jan 2015