Maher Maalaoui

• Investigated and qualified security alerts by analyzing logs and events collected from Microsoft Sentinel, Microsoft Defender, and other security tools (e.g., firewalls, proxies, antivirus). • Correlated data from multiple sensors and sources (e.g., Defender for Endpoint, Defender for Identity, Azure logs) to identify threats and support decision-making. • Monitored and responded to incidents using Microsoft Sentinel (SIEM) and Microsoft Defender (XDR/EDR) to detect and mitigate security risks. • Developed and maintained SOC process documentation, including rule dictionaries, severity matrices for security alerts, and incident management playbooks. • Measured and reported on key performance indicators (KPIs) and key risk indicators (KRIs) to evaluate SOC effectiveness and improve processes. • Analyzed phishing emails and malicious attachments using Microsoft Defender for Office 365 and integrated threat intelligence feeds. • Conducted periodic vulnerability scans using Azure-native tools and third-party solutions, prioritizing remediation efforts based on risk levels. • Collaborated with cross-functional teams to implement and optimize Azure security solutions, ensuring alignment with best practices and compliance requirements Tools: ✅ Scan ==> Nmap, Nessus, Greenbone OpenVAS, Nessus, Owasp ZAP ✅ SIEM ==>Azure Sentinel, Splunk, Security Onion, ELK ✅ Threat Intelligence Platform ==> Misp, OpenCTI, Taranis NG, AlienVault OTX ✅ EDR ==> Kaspersky Endpoint Security, Microsoft Defender, Elastic Agent

• Audited source code and configurations of web and mobile applications, as well as network environment, • Conducted Black Box, Gray Box, and White Box penetration tests and prepared penetration testing reports, • Analyzed and contextualized vulnerabilities to prioritize them, • Assessing the exploitability and effectiveness of implemented security controls, • Created proof-of-concept (POC) models for vulnerabilities, • Drafted risk-oriented reports and providing reporting for internal clients, • Monitored corrective actions: ensuring the implementation and effectiveness of corrective measures to guarantee long-term security. Tools: ✅ Vulnerability Scanners: Burp Suite, Nessus Pro, Nikto,Nuclei ✅ Reconnaissance & Enumeration: Nmap, Amass, Shodan, Sublist3r ✅ Exploitation Frameworks: Metasploit, Exploit-DB, Sqlmap, Impacket ✅ Mobile Testing: MobSF, Frida, Objection, Drozer, Apktool, AndroBugs Framework, SSL Pinning ✅ Web Application Testing: OWASP ZAP, Burp Suite Pro, W3af ✅ Password Cracking: Hashcat, John the Ripper, Hydra, SecLists