Souayah Yassine

Security Operations Officer (SecOps) within the IoT & Digital Transformation division Vulnerability & Patch Manager: Implemented Qualys and designed the associated process. Incident Response: Implemented a SIEM (Alert Logic) in collaboration with the MSP and the corporate SOC. IoT & Digital Division Representative: Served as the IoT & Digital division representative within the Corporate CERT. Security Awareness: Established security controls (log review, physical controls, directories, Anti-Malware, etc.), conducted training, and shared best practices. MSP Coordination: Coordinated with Managed Service Providers (MSPs).

Risk Analysis: Conducted risk analysis using BitSight, Security ScoreCard, and RiskRecon. Security Tools Integration: Integrated various security tools. Compliance Management: Managed compliance with security standards. Data Analysis and Action Planning: Analyzed data and defined action plans with regional teams by zone and country. Coordination with Cybersecurity Rating Agencies: Coordinated with external cybersecurity rating agencies. Security Overhaul Projects: Led security overhaul projects for sites/applications involving online payments and critical personal information. Incident Resolution Contribution: Contributed to incident resolution, including event understanding, debriefing, and lessons learned. Reporting and Communication: Prepared reports and KPIs, and communicated company progress. Security Overhaul Project Contribution: Contributed to security overhaul projects, including the integration of QRadar and participation in Bug Bounty programs. Progress Tracking and Regional Team Coordination: Monitored action plans, coordinated, and supported regional teams.

Role 3 : Project Lead AMEI - AirLiquide (subco) Key Tasks & Outcomes Led patch & vulnerability management program; migrated/virtualized Windows Server workloads to Azure; upgraded to Windows Server 2012 R2; set up backup & archiving. Coordinated Windows 10 rollout; performed IT & application inventory (MapTool) and compatibility validation (Microsoft ACT). Ran testing/UAT in realistic labs, produced documentation/runbooks, and oversaw targeted migrations to AWS. Role 2 : Trainer — Microsoft Certified Trainer (MCT) Delivered official Microsoft courses: 20697-1 — Implementing and Managing Windows 10. 20698 — Installing and Configuring Windows 10. 20410 — Installing and Configuring Windows Server 2012 (R2). 40555A — Microsoft Security Workshop: Implementing PowerShell Security Best Practices. 10964C — Cloud & Datacenter Monitoring with System Center Operations Manager (SCOM). AZ-100 — Microsoft Azure Infrastructure and Deployment. 10979 — Introduction to Microsoft Azure for IT Professionals Built hands-on labs, authored materials/runbooks, and mentored junior admins. Enabled client teams on Windows, Azure, Microsoft 365, SCOM/SCCM; improved day-to-day operational maturity. Role 1 : Infrastructure & Cyber Security Consultant Integrated Office 365 ATP security (Safe Links/Attachments, anti-phishing) and hardened tenant policies. Implemented Azure security controls and identity hygiene; documented standards and operational runbooks. Deployed/administered Symantec Endpoint Protection; ran audits/diagnostics on Windows 7/8.1/10 and Windows Server 2012/2012 R2. Rolled out System Center — SCOM (monitoring) and SCCM (patching, inventory, software deployment) — and completed clean handovers. Environment Azure · AWS · Qualys · Windows Server 2008/2012/2012 R2 · Windows XP/7/8/10 · Ubuntu · Hyper-V · SQL Server · SCOM · G Suite · MapTool · Microsoft ACT (Application Compatibility Toolkit) · Backup/archiving solutions.

Designed and deployed a pilot Security Information & Event Management (SIEM) platform to provide real-time visibility and incident detection. Scope & pipeline: set up data onboarding (forwarders/syslog), normalization/indexing, and field extractions for Windows/Linux servers, network devices, and applications. Use cases & alerting: authored initial correlation rules (login anomalies, brute force, privilege misuse, malware indicators, network scans) with real-time alerts and thresholds. Dashboards & reporting: built operational dashboards for health, asset status, and security trends; created scheduled reports for stakeholders. Runbooks & handover: documented architecture, onboarding steps, and triage runbooks; trained users on search, dashboards, and alert handling. Outcome: delivered a working SIEM prototype that improved monitoring coverage and shortened detection time, establishing a foundation for production rollout.