Firas Benromdhane

• Manage Fortinet FortiGate firewalls across 30+ sites, including SD-WAN, IPsec VPNs, security profiles (IPS, Web Filtering,..) and security policies, as well as FortiAP wireless access points, ensuring secure and reliable enterprise network traffic.

• Administer FortiAuthenticator to provide secure authentication and user access management, FortiManager for centralized device configuration and policy deployment, and FortiAnalyzer for log collection and analysis, maintaining a resilient Fortinet security infrastructure.

• Operate and administer LogRhythm SIEM for security monitoring by integrating logs from servers, network devices, and cloud sources; enhance threat detection through tuned alerts and custom AIE rules.

• Develop Python scripts to automate ingestion of SOCRadar threat intelligence (STIX format via API) into FortiGate and LogRhythm, enabling proactive alerting and faster threat response.

• Collaborate in a 24/7 Security Operations Center (SOC) for incident triage, forensic investigations, and vulnerability remediation in coordination with cross-functional teams.

• Manage certification processes, ensuring compliance with security standards and supporting audit readiness.

• Support ISO 27001 compliance by implementing security policies and documentation, and assisting GRC teams with control implementation and audit preparation.

• Performed security assessments of Azure, Active Directory, and network systems using Microsoft Defender for Cloud, Ping Castle, and network analysis tools.

• Implemented audit recommendations to enhance Azure and AD infrastructure security in collaboration with IT and development teams.

• Managed and led FortiGate firewall operations, including configuration, policy deployment, VPN management, SD-WAN optimization, and security rule enforcement.

• Performed proactive CrowdStrike threat hunting, analyzing alerts, identifying potential threats, investigating suspicious activity, and coordinating remediation actions.

• Developed a vulnerability management strategy with regular assessments, remediation prioritization, and continuous monitoring using Qualys.

• Monitored alerts from CrowdStrike and FortiAnalyzer, proactively managing IT risks and incident responses.

• Migrated Cisco ASA firewalls rewalls to Fortinet solutions, deploying FortiManager and FortiNAC for centralized management and network access control.

• Designed and implemented secure IPsec/SSL VPNs, SD-WAN PoC, and FortiADC load balancing to optimize application delivery.

• Deployed FortiWeb and F5 (WAF) to protect web applications from advanced threats.

• Lead FortiSIEM PoC for unified log management and security insights, and FortiGate SD-WAN PoC to optimize traffic monitoring and efficiency.

• Produced detailed technical documentation (LLD, HLD) for operational teams.