MOUHCINE EL GARTE

Designed and implemented a cybersecurity monitoring architecture based on Wazuh SIEM and Shuffle SOAR to centralize security events, detect threats, and automate incident response. Configured and optimized Wazuh agents, log collection, security monitoring, alert prioritization, and detection rules for Linux and Windows environments. Integrated Wazuh with Shuffle to automate incident response workflows, including malicious IP detection and blocking. Integrated Zabbix and Grafana for infrastructure monitoring and security visibility. Developed and tested custom detection rules and security integrations to improve SOC alerting and reduce false positives.

During my internship I simulated and detected eBPF attacks using Sigma rules for SIEM, and implemented SOAR integrations. I tested FortiGate actions (IP blocking, session control, firewall policies) and Sophos Central workflows (alerts, endpoint management, threat hunting, and automated remediation).

- Study of the network infrastructure and administration tools. - Management and maintenance of network equipment. - Discovery of the tasks of a network administrator in a professional environment.