Soufiane KOUSTA

-Automated BIOS/UEFI hardening using PowerShell and deployed configurations via Active Directory GPOs. -Implemented Microsoft LAPS for secure management and rotation of local administrator passwords. -Contributed to the development of an Incident Response Plan (IRP) aligned with the NIST CSF framework, including attack simulation exercises. -Prepared a migration strategy to Microsoft Azure integrating Entra ID, Key Vault, Storage & Backup, Defender for Cloud, Azure Monitor, and Microsoft Purview for data security. -Optimized the inter-VLAN flux matrix to correct vulnerabilities and enhance network security in accordance with best practices.

-Developed a Flutter mobile application for dispute management and a landing page for the company’s technical services using PHP. -Enhanced the security of a Linux VPS server by configuring SSH authentication, changing default ports, creating a secure user, and implementing Fail2Ban and basic iptables rules.

-Completed a job simulation where I served as an analyst on Mastercard’s Security Awareness Team -Helped identify and report phishing -Analyzed and identified which areas of the business needed more robust security training and implemented training courses and procedures for those teams