Hichem Belguendouz

• Monitor and investigate security alerts in client cloud environments to identify suspicious or malicious activities • Analyze logs from network, compute, and storage services to detect anomalies and potential threats • Reduce the false positive alerts by 60% • Collect and use threat intelligence from OSINT, DFIR reports, and external feeds based on client context • Support the SOC and CSIRT team by producing clear and actionable reports • Contribute to incident response activities, including alert triage, analysis, and escalation • Use MITRE ATT&CK to understand attacker techniques better and improve detection • Participate in improving detection use cases and overall SOC visibility • Developed CSIRT documentation, including an Incident Response Plan, playbooks, and runbooks.

By complete This Internship, I was able to provide technical support to Employees: - Installing and configuring computer hardware, software - Maintaining computer systems. - Repairing and replacing equipment as necessary - Providing technical support

- Analyzed cybersecurity call for tender specifications and requirements. - Prepared technical offers aligned with client needs and security standards. - Proposed appropriate cybersecurity solutions based on use cases and constraints. - Designed high-level implementation architectures for the proposed solutions.

- Installing and Configuring New Cisco Route C4200. ِ - Migrate configuration from Cisco Switch to Huawei Switch. - Create Network Documentation. - Create Information Security Policies. - Help Desk For End Users.

- Acquire a good Experience, Especially The Cyber Security Part. By the End of this Internship, I was able to interact and use some Tools such as Endpoint detection & response, Endpoint protection Antivirus, Web Security Appliance, Email Security Application - Perform on web penetration testing: finding low-level vulnerabilities and writing a report.