- Integrating Security and monitoring solutions ( TheHive, Shuffle, Wazuh ).- Monitoring Security events and incidents ( Qradar, TrendMicro, SecureWorks, Wazuh).- Designing detection rules.- Assist in developping processes and procedures for clients.- Incident Response.

Point of contact between the company and it's clients taking in charge the technical aspect related to several Endpoint Detection and Response solutions (EDR) such as : - Crowdstrike - SentinelOne- HarfanglabFollowing up with client's regarding their EDR security policies and evaluating the maturity of their parc.Providing technical support for client's regarding deployment, configuration and dealing with the EDR solutions.

• Investigate and qualify alerts through examining events collected from different security equipments such as ( firewalls, Proxies, Antivirus ).• Correlate between different sensors and sources to help in decision making.• In case of compromisation, accompany the customer by providing action plan and remediation steps to minimize the impact.• Work with multiple Security technologies such as SIEM, EDR, XDR.• Take part in development of investigation procedures.• Improve and test SPL rules.• Analyze phishing emails.• Take part in threat hunting tasks through providing IOCs and articles about cybersecurity news.• Periodic vulnerability scanning.

• Develop a detailed explanation for each PCI DSS requirement.• Develop a testing checklist to validate PCI DSS compliance for customers.• Develop a tools box based on PowerShell and Shell script to automate a part of PCI DSS compliance checks.

 Create Attack scenarios based on vulnerable machines for education purposes. • Scan and enumeration of Active Directory • Exploit Vulnerabilities using metasploit framework • Exploit vulnerabilities using Powershell scripts • Exploit CMS vulnerabilities.