Mohamed Sofiane B.

I help organizations identify vulnerabilities, secure their infrastructure, and reduce cyber risk through penetration testing, security monitoring, and infrastructure hardening. Whether you need to assess your environment, secure your Active Directory, deploy a SIEM, or validate your defenses, I provide practical cybersecurity services with clear findings and actionable remediation recommendations. During my Master's in Information Systems Security, I designed and implemented an enterprise cyber range based on the MITRE ATT&CK framework to emulate real-world adversary techniques and evaluate detection and response capabilities. Clients typically hire me to: ✔ Perform penetration testing and vulnerability assessments ✔ Deploy and configure Wazuh SIEM ✔ Review Active Directory security ✔ Configure firewalls ✔ Secure Windows Server and Linux infrastructures ✔ Perform security hardening following CIS Benchmarks ✔ Simulate adversary techniques using MITRE ATT&CK ✔ Review network security architecture and segmentation CORE EXPERTISE - PENETRATION TESTING • Web Application Security (OWASP Top 10) • Internal Network Penetration Testing • Vulnerability Assessments • Attack Simulation & Adversary Emulation - SOC & SECURITY MONITORING • Deploy and configure SIEM solutions • Log Analysis • Threat Detection • Security Monitoring • Detection Engineering - NETWORK & INFRASTRUCTURE SECURITY • FortiGate & pfSense • Network Segmentation • Windows Server • Active Directory • Linux Administration • System Hardening - SECURITY TOOLS • Wazuh • Splunk • Burp Suite • Nessus • Nmap • Metasploit • SQLMap • Wireshark • MITRE Caldera • Sliver C2 • Proxmox VE • VMware • Python & PowerShell - WHY CLIENTS WORK WITH ME • 100% Job Success on Upwork • Practical offensive and defensive cybersecurity expertise • Experience securing Windows, Linux, and Active Directory environments • Hands-on enterprise cyber range built using MITRE ATT&CK • Clear documentation and actionable remediation recommendations • Reliable communication and on-time project delivery Whether you need a one-time security assessment or ongoing cybersecurity support, I'm committed to delivering practical, reliable, and high-quality security solutions.