Nada Naour

Project : Application Security Evaluation: Penetration Testing on a Web Application. • Contributed to workshops focused on capturing requirements and defining team and project objectives. • Formulated the project action plan and established the methodology to be followed. • Conducted active and passive reconnaissance to gather critical information on the target. • Oversaw the application of the methodology and identified various security vulnerabilities. • Classified identified vulnerabilities using the CVSSv3 scoring system, assessing their potential impacts. • Documented each phase of the process, including collected information, identified vulnerabilities, exploitation scenarios, impact assessments, and remediation recommendations.

Project: Implementation of an Open Source Monitoring System to Oversee the IT Infrastructure of SGFG - Participated in various requirements capture workshops with members of the security department and the infrastructure team. - Evaluated and Benchmarked Open Source Monitoring Tools (Nagios Core, Zabbix, and PRTG Network Monitor). - Designed and implementated the project's technical architecture. - Set-up and configured a test environment and simulated various monitoring scenarios using the chosen solution: Nagios Core. - Implemented an automated email alert system in case of incidents. - Deployed and configured the monitoring system to the production IT infrastructure of SGFG. - Drafted the project's technical architecture documentation