Hassen El Golli

• Installed, configured, and demonstrated several open-source tools to implement a SOC, EDR, and SIEM. • Provided recommendations for a new secure and resilient cloud architecture tailored to identified threats. • Conducted attack simulations to assess the detection, alerting, and response capabilities. (Grafana. Graylog, Prometheus, Loki, Wazuh, Splunk, ELK, Velociraptor, OpenEDR, Sysmon, Suricata, Snort, TheHive, MISP, Zeek, OpenCTI, Security Onion)

• Audited the OVH cloud infrastructure, identified security and performance issues within multiple stacks of Docker containers, and proposed a more robust and stable architecture. • Designed a scalable, Kubernetes-ready architecture to enable future migration without vendor lock-in. • Developed Ansible and Terraform scripts to automate environment provisioning and service configuration. • Migrated to GitLab and implemented CI/CD pipelines to automate build, testing, and deployment across various repositories, introducing a GitLab Flow methodology. • Integrated security into CI/CD pipelines by adding SAST, SCA, and DAST scans for code, dependencies, and Docker images — aligned with the MITRE ATT&CK framework. • Deployed a monitoring and logging infrastructure (SOC, EDR, SIEM) to detect incidents, prevent attacks, and monitor application stability. • Defined and implemented a secure environment for development teams, including IAM, VPN, and Vault-based secret management. • Supported developers through clear documentation, training sessions, and hands-on workshops to ensure successful adoption of new tools and environments. (Docker, GitLab, Ansible, Terraform, K8S, Helm, OVH, Grafana, Graylog, Loki, Prometheus, Telegraf, ELK, HashiCorp Vault, Wazuh, Suricata, Snort, Fail2ban, SonarQube)

• Guided and supported the development team in technical decision-making, bug resolution, code reviews, and deployment of their work across development, qualification, and production environments. • Trained developers on DevOps methodologies and best practices. • Participated in the full lifecycle design and implementation of multiple APIs and applications. • Built and maintained development, qualification, and production environments for nationwide projects. • Designed and maintained CI/CD pipelines (Build/Test/Deploy) to ensure continuous integration and delivery. • Implemented BNP Paribas security policies within CI/CD pipelines and across environments. • Monitored production APIs and applications, conducted security audits, load testing, and reported KPIs. • Developed an API for Security Firewall Automation (SFWA) to streamline firewall management and improve automation. • Organized DevOps workshops to upskill developers and promote tools adoption. (Jira/Confluence, illumio, Python, Flask, Celery, PSQL, Redis, Apache, Gitlab, Jenkins, Ansible, Jfrog, Artifactory, Xray, RHEL, SonarQube, Splunk, Docker, Kubernetes, Kibana, ELK, RobotFramework)

• Audited the existing cloud infrastructure to identify design, performance, stability, and security issues. • Designed, implemented, and maintained a new private cloud infrastructure tailored to the needs of developer and data science teams. • Optimized PostgreSQL databases to improve performance and query efficiency. • Built, implemented, and maintained CI/CD pipelines for continuous integration, testing, and deployment (Build/Test/Deploy). • Established security policies and standards across development and production environments. • Conducted DevOps and Cybersecurity workshops for developer and data science teams to promote secure and efficient practices. • Monitored and secured the entire infrastructure to ensure availability, reliability, and compliance. • Detected and analyzed multiple intrusion attempts, performing incident investigation and remediation. • Performed code audits to identify and mitigate potential vulnerabilities early in the development cycle. • Provided 24/7 on-call support to maintain infrastructure health and operational continuity. (BigData, Debian, Dataiku, Postgresql, Docker, LXC, Gitlab, Ansible, Grafana, Graylog, ELK, Nagios, HAProxy, InfluxDB, Python, Snort, Hadoop, GCP, AWS)

• Designed and implemented the project architecture in collaboration with an API developer. • Developed various binary programs to meet API requirements. • Implemented a transparent proxy for router users to optimize network traffic. • Optimized system binaries to minimize resource usage and stay within hardware constraints. • Ported select x86/x64 binaries to MIPS architecture for compatibility. • Created a toolchain enabling clients to customize and compile firmware independently, without requiring technical expertise. (openwrt, mips, C/C++, shell, squid, libwebsocket, libcurl, openssl)

- Forensic/Analysis of compromised servers after an attack. - VPS systems administration. (ubuntu, lamp, rootkit, malware, exploit, nagios, fail2ban, logwatch, postfix, backup scripts)

Running an Apache Mesos and Marathon cluster with RancherOS and docker. http://rancher.com/running-a-mesos-cluster-on-rancheros/

Developing a python XBMC plugin with login, videos and live tv. (python, libcurl, json, rtmp, beautifulsoup)

• Fullstack Web Shop development • VPS installation and administration (debian, nginx, django, postgre, git, nagios, ssl)

• R&D on embedded system for TV set-up box (stlinux, mips, c/c++, dvb/ott/iptv) • SmartTV application development (javascript, iptv) • Custom Android ROM and application development (arm, java, c++, python) • System and network administration (ubuntu, fedora, proxmox, AWS)

• Prepared and organized course materials, practical labs (TD), and exams for the Network/CISCO curriculum. • Conducted hands-on experiments with networking and system hardware, including routers, switches, and servers, to support student learning and demonstrate real-world configurations.

Developed and maintained jRuby modules for a video-conferencing platform. (java, ruby, red5, rtmp)