Aziz Sebihi

-Managed Linux user accounts and access rights (creation, modification, deletion). -Configured firewall rules and managed ACLs to control and secure access to system resources. -Contributed to the deployment of a bastion host to secure privileged access. -Automated system administration tasks using Bash scripting. -Provided Level 1 technical support, resolving incidents related to system access and infrastructure. -Produced technical procedures and operational documentation for IT teams.

-Deployed and administered AWS IAM policies (users, roles, and permissions). -Designed an authentication system using Amazon Cognito to secure application access. -Implemented secure CI/CD pipelines with GitLab integrating SAST/DAST, reducing application vulnerabilities. -Provisioned cloud infrastructure using Terraform . -Implemented Network Policies and RBAC in Kubernetes, improving network segmentation and access governance. -Monitored infrastructure and managed alerts using Datadog.

-Designed and deployed a next-generation SOC integrating SIEM, EDR, SOAR, IPS, antivirus and firewall, providing full supervision of both on-premises and cloud environments. -Reduced alert volume by 60% and false positives by 45% through centralized correlation in Wazuh and automatic enrichment via VirusTotal Threat Intelligence. -Automated incident response using n8n SOAR, Bash and PowerShell scripts, cutting mean response time by 70%. -Enhanced malware detection by integrating custom YARA rules -Implemented centralized dashboards via Zabbix and Grafana, delivering real-time infrastructure visibility. -Integrated the MITRE ATTACK framework to enhance understanding of TTPs. -Participated in user awareness sessions and trained SOC analysts

-Proactive monitoring of threats and intrusions using Microsoft Defender in a hybrid cloud environment. -Monitoring and management of identities and access through Azure AD, including detection of privilege abuse and abnormal access. -Analysis and handling of phishing and pharming incidents, including investigation of malicious emails and account compromise attempts. -Incident response and contribution to continuous improvement of the security posture and risk management processes.

Mise en œuvre de la conteneurisation applicative avec Docker. Conception et mise en place de pipelines CI/CD avec Jenkins, assurant l’intégration et le déploiement continus. Provisionnement d’infrastructures cloud GCP via une approche IaC par Terraform. Administration et sécurisation des droits d’accès cloud IAM.