Zakaria Jabari

Attack Surface Management Governance and Compliance assessments Architecture audits

Main Skills : - Infrastructure penetration testing (on-site and external), - Web applications and web services penetration testing, - Mobile applications penetration testing, - WiFi penetration testing, - Thick clients penetration testing, - Social engineering, - Configuration and security assessments over a wide variety of environments (Linux, Windows Workstation and server, Firewall).

As a penetration tester in the BDS "Big Data & Cybersecurity" division. I am in charge of assessing the clients' Information Systems' robustness against known and less known attacks. During my exercise in BULL, I have worked on projects that covered the following penetration testing activities : - Web application vulnerabilities assessment, - On-site and external penetration tests, - Configuration assessments, - Network assessments, - Phishing campaign simulations. I have also had the opportunity to assist our clients in improving their information systems' security. My main activities consisted in : - Managing penetration testing project (Diffusing vulnerability reports to project managers, Filling security indicators based on CVSS scores, Explaining and discussing discovered vulnerabilities, Suggesting treatment possibilities, Counter auditing when needed for verification), - Performing security assessments on a periodical basis, - Collaborating with CISO to report on security indicators.

Analyzing and assessing the WebRTC API's robustness against web browser based attacks.

• Study and analysis of differential cryptanalysis against DES, • implementation in C language.