Mohamed Aydi

As a SOC Analyst, I’m responsible with my team for 24/7 monitoring of security events and alerts using tools like Elasticsearch, Cortex XDR and XSOAR. I analyze and investigate potential threats by leveraging Threat Intelligence, IoCs and IoAs, and align detection techniques with the MITRE ATT&CK framework. My role involves acting as an Incident Analyst, conducting in-depth investigations, and using Behavioral Analysis, OSINT (OpenCTI) to support threat hunting, Courses of Action (CoA) against the TTPs, and incident response.

- Designed and implemented a DevSecOps Framework based on the “shifting security to the left” approach - Conducted a thorough analysis of existing DevOps practices to identify security gaps - Collaborated with cross-functional teams to integrate security measures early in the development lifecycle - Developed custom security policies and guidelines tailored to project requirements - Examined the NIST SSDF and OWASP DevSecOps frameworks - Studied and compared key principles and best practices from both frameworks - Adapted relevant strategies to enhance the security posture of the DevSecOps pipeline - Documented findings and provided recommendations for continuous improvement - Integrated tools and automated security practices into a CI/CD pipeline for continuous monitoring - Selected and implemented security tools for static code analysis, dynamic testing, and dependency scanning - Automated security checks to run in parallel with CI/CD processes, ensuring continuous compliance - Set up real-time alerts and dashboards to monitor security metrics and vulnerabilities - Reduced 80% of vulnerabilities in the early stages of the DevOps cycle - Prioritized the remediation of critical vulnerabilities through automated and manual interventions - Conducted regular security audits and penetration testing to validate the effectiveness of implemented measures - Deployed the application on Azure AKS using ArgoCD - Containerized applications using Docker and orchestrated them using Kubernetes - Implemented ArgoCD for declarative GitOps-based continuous delivery - Ensured high availability and scalability of the deployed applications - Evaluated the implemented security measures using the OWASP Maturity Model - Conducted a comprehensive assessment of security practices against the OWASP Maturity Model - Identified areas for improvement and developed an action plan to address gaps

- Designed and implemented RPA robots to automatically generate daily supervision reports - Analyzed reporting requirements to identify key metrics and data sources - Developed custom RPA scripts to automate data extraction and processing from various platforms - Integrated with Outlook, Qlik Sense, and Qlik View to gather relevant data - Collected data from various platforms like Outlook, Qlik Sense, and Qlik View - Established secure connections and authentication mechanisms to access data - Implemented data validation and error handling to ensure accuracy and completeness - Aggregated and transformed data into a standardized format for reporting - Reduced the time to prepare and send the report via email to 4 minutes - Automated the report generation process to eliminate manual intervention - Designed email templates and scheduling mechanisms to automate report distribution - Monitored the performance of RPA robots and optimized them for faster execution - Achieved significant time savings, improving operational efficiency and decision-making

- Designed and developed a web application for servers monitoring - Implemented real-time monitoring features to track server performance and health - Developed a user-friendly interface to visualize server metrics and alerts - Implemented a CI/CD pipeline for continuous integration and deployment of the application - Automated the build, test, and deployment processes to ensure rapid and reliable updates - Integrated version control with Git to manage code changes and collaboration - Utilized Docker for containerization to ensure consistency across different environments - Implemented automated testing to maintain application stability and performance - Deployed the application using Kubernetes for scalability and high availability

- Developed a web service communication interface using REST API to facilitate data exchange between the ERP system and the MES in the factory - Analyzed business requirements and system specifications to design the communication interface - Collaborated with stakeholders to ensure the interface met operational needs and performance expectations - Designed, implemented, and tested RESTful endpoints for seamless integration and real-time synchronization of data between the two systems - Created comprehensive API documentation to guide developers and ensure consistent implementation - Conducted rigorous testing, including unit, to validate endpoint functionality - Defined API endpoints, handled authentication and authorization mechanisms - Designed role-based authorization to ensure appropriate permissions and access levels for different users - Ensured data integrity and security - Applied data validation techniques and encryption methods to protect sensitive information - Provided documentation and support for system integration