Charles Amr Ibrahim

• Drive technology strategy and lead engineering partnerships, integrating AI-assisted tooling and cloud-native services to accelerate product delivery. • Serve as strategic advisor to C-level executives (DSI, RSSI, CTO, CEO) on cybersecurity posture, AI roadmaps, and technology investment decisions — building on direct advisory relationships initiated at Wavestone and deepened through successive CTO/CISO mandates. • Overhauled the end-to-end delivery pipeline for identity-centric integration projects (MFA, PAM, and related IAM missions), reducing deployment lead times through automated CI/CD workflows and infrastructure-as-code practices. • Architected and launched the managed security services offering, defining SLAs, operational runbooks, and observability dashboards. • Founded Akonis Engineering Studio, a dedicated unit that designs, implements, and operates software and engineering modules for XDR platforms using an agile squad model & continuous delivery pipelines. • Currently leading projects applying AI-driven development workflows and advanced prompt-engineering frameworks to accelerate software delivery and improve code quality.

ISO 27001 certified under 9 months Complete reimplementation of a SaaS SOAR Managed security services for 120+ clients AI for workflow generation I've hired almost every people in the technical direction - 30 people, and manage them (team organization, process optimisation, individual performance) through team leaders I've established budgets and roadmaps And of course I'm defining the technological strategy Technical Stack: - Fully terragunt-ed & dockerized infrastructure on AWS - Backend architecture implemented in Golang - NextJS frontend - Gilab-CI (with continuous delivery/deployment) - LLM-based workflow generator

L'association "Hamlet, on gère" vise à promouvoir la pratique théâtrale en banlieue, à favoriser l'émergence de créations dramaturgiques et d'expériences de partage autour du théâtre et du spectacle vivant.

• Full rehaul of the identity governance, setup and implementation of MFA & SSO • Full redesign of the Privileged Administration Model, RFP & build of a PAM architecture with a Bastion • RFP & build of a SOC with SIEM, EDR, and SOAR technologies • Deep technical audits, from web to ISO 27001, going through internal red teaming • Support to Product & Sales team to design IPSEC solutions & new authentication services • (Re)build from scratch of the security team • Rewriting of the Information Security Policy, revamping of the vulnerability management

In the context of H2020, evaluation of a project pertaining to the struggle against cybercriminals

Development of advanced tools for security data vizualisation - Forensics - Penetration testings - Open Source Intelligence & investigation on cybercrime markets

Hardening of an IPSEC implementation. I have essentially worked on telecoms security themes, particularly IPSEC, Quality of Services, routing in the Linux Kernel, virtualized and strenghtened environments, ...

As a junior analyst in the domain of cybercrimes and cyberdefense, I am seeking global tendencies, attack schemes, and investigating black markets. I write daily notes about major software flaws, vulnerabilities, and new attack tools, but also about the IT security market directions, and about state or organization's cyber-strategies. I have to write articles for www.secu-insight.fr too, take part in producing the monthly publications we deliver to our clients, and attend weekly conferences delivered by top-class professionals about cybercrime and cyberdefense.

During this ten months long internship, I had the opportunity to get my first and real professional experience, as a system information consultant, in a strongly established software editor and turn-key information systems conceptor. Although I have not been checked against every task a consultant could possibly have to perform, I have joined a number of projects, which allowed me to gain a sense of what being a system information consultant is about. The missions I was involved in may be linked to technologic surveillance, conformity validation, and change management. I was mostly involved in conformity validation missions, which can basically contain numerous different actions.

Developement of a web-oriented application with Oracle Application 10g.