Ayoub ECH CHKAF

• Security Incident Management (SIEM) using IBM QRadar, Splunk, and Exabeam. • Orchestration, Automation, and Security Response (SOAR) with IBM Resilient, Exabeam, and Cortex XSOAR. • Investigation of escalated security incidents. • Security Incident Response for Endpoint Detection and Response (EDR) & XDR solutions (CrowdStrike Falcon, SentinelOne, etc.). • Reverse Engineering & Threat Intelligence. • Prevention and detection of phishing attacks and advanced threats. • Management of detection rules. • Creation of Use Cases and detection playbooks. • Mentoring and coaching Level 1 analysts. • Reporting and measurement of key performance indicators.

• Analyze and evaluate security incidents detected by IBM QRadar and ELK. • Collaborate with the SecOps team to maintain security requirements. • Work with SIEM engineers to resolve false positives. • Assist incident response teams in their investigations. • Contribute to the development and maintenance of event correlation rules.

- Development of a Real-Time, Intelligent, Synchronous and AES/RSA/ECC-SHA256 Secure IOT SG Architecture based on CoAP/ZigBee protocols for Validation in Blockchain-based Platforms for Smart City and Smart Grid

• Install, configure, and set up the institution's computer equipment. • Perform performance and failure diagnostics. • Validate installations and updates. • Ensure the maintenance of the institution's computer equipment.