Rached Cherif

- Monitored and analyzed 100+ security events per day using Symantec Endpoint Security (SESC) and FortiAnalyzer, proactively detecting and investigating security threats. - Performed security log analysis, event correlation, and incident triage to identify and prioritize potential security incidents. - Reduced false positives by approximately 40% through correlation rule tuning and optimization of EDR security policies. - Conducted Root Cause Analysis (RCA) and contributed to incident response by providing remediation recommendations and corrective action plans. - Deployed and configured Symantec Endpoint Security agents across client endpoints to ensure comprehensive detection coverage. - Collaborated directly with clients to explain security incidents, recommend mitigation measures, and improve SOC operational procedures. - Performed continuous threat intelligence and vulnerability monitoring, including analysis of critical CVEs (CVSS ≥ 7.0), exploits, and emerging cyber threats, producing both technical and executive security reports.

Building a Secure DevSecOps Architecture for Kubernetes : - Designed and deployed a 6-VM Kubernetes cluster (3 masters, 2 workers, 1 HA load balancer) with Ansible automation. - Integrated open-source security and observability tools: Trivy, Kyverno, Falco, Robusta, Prometheus, Grafana, Loki, OpenObserve, Chaos Mesh. - Implemented proactive security with container image scanning (Trivy) and admission control policies (Kyverno). - Deployed real-time threat detection using Falco with alert routing via FalcoSidekick to Slack and Grafana dashboards. - Centralized metrics and logs with Prometheus + Loki/OpenObserve for monitoring and analysis. - Automated incident response using Robusta playbooks to remediate compromised pods and notify teams. - Validated resilience of the cluster through Chaos Engineering experiments with Chaos Mesh.

• Designed and deployed a Threat Intelligence platform using OpenCTI, enhancing IoC collection and correlation. • Conducted security log analysis across multiple SIEM platforms to improve threat detection and incident visibility. • Produced cybersecurity intelligence reports for technical teams and decision-makers, supporting strategic decisions.

– Design and development of a mobile/web application for a vehicle announcement site. – Creation of the database (MySQL) – Development of the Dashboard (Admin section) – Creation of the Front End (Client section) – API testing using Postman

– Developed a web application for streamlined port management. – Created an Dashboard within the Administrator section. – Implemented essential CRUD (Create, Read, Update, Delete) functionalities.