Raed Cherif

SSO configurations to implement Zero Trust principles across

multi-tenant client environments.

phishing recognition, MFA adoption, and secure M365 usage

across 50+ client organisations reducing security-related support

incidents and improving client-side baseline hygiene scores.

hybrid Active Directory environments designing OU hierarchies,

delegating RBAC with least-privilege principals, and enforcing

GPO-driven security baselines aligned to CIS and Microsoft Security

Baselines eliminating over-privileged account sprawl across 50+

client tenants.

endpoints achieving and maintaining 95%+ device compliance rate,

remediating non-compliant devices within defined SLA windows, and

directly reducing client attack surface exposure.

policy baseline across 500+ endpoints spanning 50+ multi-tenant

environments defining ASR rules, tamper protection enforcement,

and exclusion governance frameworks that reduced alert noise

by ~30% while maintaining operational compatibility across

heterogeneous client OS estates.

client environments converting high-volume recurring security

incidents into documented remediation runbooks and targeted

hardening actions, achieving a 20% reduction in repeat incident rate

and enabling consistent security posture uplift at scale.

roadmaps across the client portfolio translating Microsoft Secure

Score gaps, Defender vulnerability findings, and Sentinel alert trends

into prioritized action plans presented to client stakeholders.

Dans le cadre de cette mission freelance, j’ai réalisé des tests d’intrusion sur plusieurs sites web du client afin d’évaluer leur niveau de sécurité. L’objectif était d’identifier les vulnérabilités potentielles (injections, failles d’authentification, mauvaise configuration, etc.), d’analyser les risques associés et de fournir des recommandations correctives concrètes. Cette intervention a permis au client de renforcer la sécurité de ses applications et de protéger efficacement les données sensibles de ses utilisateurs.