Dhoha Jemai

Provide security expertise for various projects and corporate initiatives to secure new environments. Design and implement necessary actions to strengthen the security level of existing information systems, networks, applications, and infrastructures. Analyze results (identify vulnerabilities and potential risks). Define recommendations, develop a remediation roadmap, and make the necessary adjustments to address identified vulnerabilities and risks. Stay up to date with security solutions and trends in attack techniques in order to propose appropriate recommendations. Participate in security awareness activities for all clients. Contribute to the overall improvement of security and support the activities of the security department.

• Led cloud security assessments and implementations (AWS, Azure) for clients in healthcare and finance. • Developed incident response playbooks, reducing breach response time by 40%. • Delivered ISO 27001 readiness assessments for U.S.-based SMEs. • Implemented Zero Trust frameworks and IAM best practices across multi-cloud environments.

Managed and maintained Windows/Linux servers in virtualized environments to ensure uptime for critical systems (ticketing, reservations, flight operations, communication). Monitored and secured LAN/WAN networks across headquarters and airport sites; implemented firewalls, antivirus, VPNs, and ensured compliance with aviation cybersecurity standards. Supported airline-specific systems including flight planning, reservation (e.g., Amadeus/Sabre), and crew management; coordinated third-party integrations. Established automated backups and disaster recovery protocols to safeguard critical databases and ensure business continuity. Protected passenger and operational data by enforcing data confidentiality, encryption, and integrity. Deployed IDS/IPS, monitored security logs for anomalies, patched vulnerabilities, and managed endpoint security. Ensured compliance with IATA, GDPR, and Tunisian data protection laws; prepared for and supported internal and external security audits. Managed Active Directory and access controls enforcing least privilege and strong authentication methods. Conducted security awareness training on phishing, password security, and safe data handling; tested staff readiness through simulated attacks. Provided technical support to internal departments; managed mail servers and endpoint devices. Maintained thorough documentation of system configurations, network diagrams, and security logs; collaborated with compliance/legal teams on IT audit requirements.