Sofiane Touimi

Expert CyberSecurity at BNP Paribas Real Estate

Lead vulnerability management across DAST/System/Network; implement health checks and secure baselines; define security policies and KPIs; build security dashboards (Power BI/Tableau); coordinate remediation with project teams; manage scan infrastructure and deploy security agents on Windows/Linux/AIX; migrate Grafana dashboards to Power BI for improved readability.

Professional Services Consultant at Tenable, Inc.

Deliver client engagements for Tenable solutions; gather requirements; install/configure products; develop custom reports/dashboards; interpret Nessus results and risk levels; conduct Tenable-based assessments; provide pre/post-sales support and client training.

Expert Vulnerability Management and CrowdStrike at ENGIE Global Business Support

Define/implement vulnerability scanning policies; support group entities in monitoring, auditing, and remediation; deploy services, manage assets and scans; produce dashboards/reports; perform threat/risk analysis; provide methodological guidance and remediation tracking; configure CrowdStrike policies.

Vulnerability Management Consultant at Thales Digital Factory

Create Vulnerability Management process; define scan policies for compliance and regular scans; develop scan report templates; automate report publication; integrate vulnerability dashboards with Blue/Red Teams; ticketing integration with Tenable.io/Tenable.sc/Checkmarx; monitor critical vulnerabilities and remediation plans; define risk acceptance workflows.

Consultant Cyber Security at Aviva

Manage vulnerabilities (Nexpose Rapid7); assess findings and track remediation within deadlines; ensure availability of scan reports for AVIVA France and UFF; monitor critical vulnerabilities; provide security awareness and guidance; define scan scopes and VA tooling; develop tooling for KPI/SLA calculation; patch management; static code analysis (Checkmarx).

Cyber Security Analyst at Prosodie Capgemini

Develop SOC capabilities (Logpoint, Trend Micro DeepSecurity, NessusPro); create/modify parsers; incident reporting and asset management; provide 2nd/3rd line security support; define SIEM alert rules; perform pentests on web apps; support security testing activities.