Othmane BENTAJA

Skills: Hardware Security Module (HSM) · Key Management · KMS · PKI · EMV · APDU · Digital Certificates · X.509 · ManageEngine · EJBCA · Active Directory · Entrust PKI · Certificate Authority · Certificate Management · SSL Certificates · PKCS · Identity and Access Management (IAM) · Single Sign-On (SSO) · Multi-factor Authentication · OAuth · Cryptography · Data Security · Pretty Good Privacy (PGP) · JSON Web Token (JWT) · Payment Card Industry Data Security Standard (PCI DSS) · Compliance PCI · ISO 27001 · Personal Data Protection · Secure File Transfer Protocol (SFTP) · CFT · Secure Shell (SSH) · Python (Programming Language) · Automation · PayShield 10K · PayShield 9K · payShield Trusted Management Device · Key Ceremony · Incident Management · Incident Investigation · Incident Handling · Security Incident Response · Incident Reporting · Payment Industry · PCI-X

Implementation of a SIEM solution for the simulation, detection and qualification of security incidents: The final year project on the implementation of a SIEM solution for simulation, detection, and classification of information security incidents was carried out in three distinct stages. Firstly, a simulation architecture was defined, and QRadar SIEM was installed to leverage its numerous advantages. Later, a vulnerable attack environment was set up to be exploited by the Kali machine, which was considered as the attacker. Several common types of attacks were simulated, including network, web, windows, and wireless attacks. QRadar use cases were employed to identify these attacks and direct them to security analysts for prompt response. The final phase of the project used the MITRE ATT&CK matrix to characterize these incidents, allowing a deeper understanding of the tactics, techniques, and procedures (TTP) used by attackers. This step was essential to gain insight into how attackers try to exploit system vulnerabilities and prepare security teams to deal with these threats. In summary, this project enabled the implementation of a powerful SIEM solution to detect and classify security vulnerabilities while training security teams to better understand and respond appropriately to attacks.

Securing an operator LAN2LAN link by : - VXLAN FortiGate - L2TPv3 In this internship, i was able to secure a LAN-to-LAN operator link (layer 2 link that we have no @IP). This link is used to link the VLAN of site 1 with the same VLAN of site 2 so that they are in the same network of the site. Since the data is confidential, my job was to secure this later 2 VPN by adding layer 3 equipment in two sites, so that the traffic leaving the sites will be encrypted and secured, and the operator cannot read it.