Aymen HAROUN

Cybersecurity Projects: - Integrated data sources with outsourced SOC. - Defined scenarios for SIEM correlation rules based on MITRE ATT&CK. - TENABLE vulnerability management implementation. - Email security audit - Conducted internal pentests and supported external auditors. - Led an Active Directory security project and Windows hardening. - Audited and overhauled firewall rules. Data Security: - Data classification and data monitoring to prevent exfiltration. - Defined scenarios for data exfiltration. Pentesting and Audit: - Audited assets and proposed remediation solutions for vulnerabilities. Workshops and Knowledge Sharing: - Conducted internal workshops on cybersecurity solutions and security architecture changes. Architecture: - Actively participated in defining architecture to ensure infrastructure security. Patch Management: - Tracked vulnerabilities and reported them to relevant teams. Automation and Scripting: - Automated security tasks using PowerShell.

- Identify and document rules to be restricted within the flow matrix. - Analyze flow logs for inconsistencies, errors, or areas for improvement for Azure NSG Firewalls. - Develop a project timeline taking into account the project scope, priorities, and constraints. - Propose improvements for flow matrix optimization and validate proposed changes with the security team. - Coordinate the execution of changes, including testing and ongoing support. - Other Projects (including Patch Management, Cloud Security, and others): - Organize and participate in workshops, ensuring appropriate follow-up actions. - Establish timelines and schedules for project execution. - Coordinate operations with suppliers, including impact review, change management, and ongoing support. - Regularly report on project progress and milestones. - Participate in security committee meetings, contributing to discussions and decision-making processes. Deliverables: - An optimized flow matrix that meets security standards. - Weekly progress reports that detail project status and next steps. - Support for committee meetings, including agenda setting, meeting minutes, and follow-ups. - A detailed project timeline that includes milestones and key deliverables.

- Manage and coordinate the patch management process across all systems, ensuring that all software is updated with necessary patches in a timely manner. - Conduct regular vulnerability assessments on our systems and networks, identifying any weaknesses and implementing remediation strategies. - Oversee the security of our email systems using IRONPORT, ensuring that all communications are secure from external threats. - Update YARA signatures for known threats, ensuring that our systems can quickly identify and respond to these threats. - Provide level 2 support for McAfee Endpoint Security technologies, including TIE, Active Response, and ePO. - Manage and support Pulse Secure Technologies, providing level 3 support when necessary. Participate in defining the security architecture for our systems, and validating any changes to ensure alignment with security best practices. - Analyze system logs for signs of any potential breaches or irregularities, and respond swiftly and effectively to any security incidents.

• Network & Security Integration: Implemented and maintained robust network solutions. • Incident Management: Addressed and resolved network and security issues promptly. • Secure Network Design: Developed and optimized secure network architectures. • Technical Reporting: Produced detailed reports and technical acceptance documents.

• Daily-Checks: Ensured daily system reviews on the Digital Business Support System (DBSS). • Performance Monitoring: Utilized Zabbix to monitor network performance and ensure service availability. • Incident Management: Managed incidents and events following the ITIL framework. • System Optimization: Analyzed and enhanced the performance of the DBSS platform.

• Security Solutions: Implemented network security measures including NGFW, DLP, VPN, Proxy, Antivirus, Web & App Filtering. • PoC Development: Executed Proof of Concepts for FortiGate, McAfee ESM, and ePO solutions. • Client Support: Guided clients in network and security architecture, from design and audit to migration.