Tarik Ziari

Mars 2025 à maintenant : Création d'offre sur-mesure à destination d'entreprises tech, saas & numérique de type PME De la définition stratégique de la gouvernance à l'implémentation technique jusqu'à l'audit et la compliance aux normes (RGPD, ISO27001, NIS2) De Mars 2023 à 2025 Full time chez Cultura en tant que consultant en cybersécurité & adjoint RSSI

- Audits de sécurité - Élaboration et gestion de la roadmap de test d'intrusion - Réalisation directe de certains tests d'intrusion (applicatif interne, réseau...) - Supervision des audits externalisés - Collaboration avec les équipes Dev & Infra pour le suivi des patchs et remédiation des vulnérabilités - Intégration de la sécurité dans les projets (ISP) - Analyse de risque - Analyse des partenaires & 3rd party - Gouvernance - Participation à la mise à jour de la PSSI - Rédaction de PSSI opérationnelle & guides d'usage sécurisé (IA, Secure Coding...) - Security & Privacy by design - Architecture Sécurité - En partenariat avec l'équipe SRE, mise en place d'une culture DevSecOps et protection des pipelines pour sécurisation en continu - Support pour les équipes en maintien en condition opérationnelle (EDR, Cloud Security, Mail Security, Antibot, WAF)

-Internal applications and APIs penetration testing; -Partners' penetration testing; -Setting awareness campaigns; -Internal penetration testing (Infrastructure, AD, Cloud Azure, PCI-DSS...); -External penetration; -Adversary Emulation.

Main freelance contract : FibreNoire is a global ISP, subsidiary of Videotron. Provide MSSP to their customers. • Deploy SD WAN architecture for FibreNoire ’s customers; • Help customers to define their security policies on NGFW; • Plan, Migrate, troubleshoot. 5/6 projects in parallel, I am the entry point to deliver services (I handle the security part and coordinate with network specialists)

- Technical implementation to follow NIST 800-171 recommendations; - Proof of concept in a real situation of an EDR, then implementation; - Implementation of a hardening policy for Windows 7 and 10 workstations (with CIS benchmark); - Risk analysis on business applications; - Review of security alerts through our SIEM and SOC; - Provides an action plan to the various teams following the analysis of security alerts; - Implementation of a change and incident management process; - Setting up a monitoring on the DarkWeb; - Implementation of a password vault with automatic rotation of administrator accounts; - Implementation of security on Office 365, based on the scores of the security center;

Implementation of network security products within medium to large-scale project, like : o Check Point SandBlast: 6 TE2000x HPP appliances with one PTC (private threat cloud) in full MTA. Process 420 000 emails per day; (Project of ~70 working days) o Check Point MDM and VSX: Merging 10 policy packages from one smart-1 to a cluster of Multi Domain Security Management 3150 with 8 CMAs, and managing approximately 50 Firewalls. Adding a VSX cluster to protect internal VRF (one VS for one VRF); (Project of ~40 working days) o F5 APM: Remote access for more than 1000 users with the F5 Big-IP Edge client and the host check agent (VPE with firewall check, antivirus check and remediation tunnel, plus check of windows updates for less than 5 days). (Project of ~40 working days); o Palo Alto and Tufin: Refinement of the entire policy (2 vsys). From 700 security rules to 390 rules. Rename all the objects to follow a naming convention. Skills transfer and POC of many functionalities like wildfire, SSL decryption and automatically remediate risks. Enable DNS sinkholing and QoS. (Project of ~30 working days) For all these deployments, I followed the major points : - Analyze of the customers'​ needs and their current architectures; - Design of the new architecture and writing of the documentations (LLD, HLD); - Troubleshooting of the new implementation if needed; - Skills transfer to customers. Certifications : CCSA R77, CCSE R77, CCSM R80, Palo Alto ACE 6.0 Network Security Products : NGFW : Check Point (R65-R80, Provider One, VSX, Threat Prevention,VPN, Sandblast and CloudGuard), Palo Alto (Threat-Prevention, Global Protect, URL Filtering,VPN) Firepower Threat Defense Reverse-Proxy : F5 (LTM, APM)