Looking for a job

Salim Boumoncef

@salimboumoncef

Security Engineer at IBM who cut vulnerability exposure by about 30% and automated scanning for 56 production databases.

United States

Message

At IBM, I reduced vulnerability exposure by about 30% through enterprise remediation and patch orchestration with Tenable. I also increased authenticated scan coverage from 45% to 99%.

I automated vulnerability scanning for 56 production databases, cutting scan cycles from days to hours. I strengthened AWS security with Config Rules and Prowler assessments supporting NIST and CIS compliance.

At Dovel Technologies, I used Tenable to reduce open vulnerabilities from 10,000 to under 1,000 within three months. I also assessed web applications with Acunetix and helped remediate XSS and SQL injection vulnerabilities.

Earlier, I worked on vulnerability management, Linux infrastructure security, and malware analysis at Fusion PPT and ITC Management Group. I hold AWS Certified SysOps Administrator - Associate and CompTIA Advanced Security Practitioner (CASP+) certifications.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

IBM

Oct 2020 - Present (6 years 1 month)

Increased authenticated vulnerability scan coverage from 45% to 99% and reduced vulnerability exposure by ~30% through enterprise remediation and patch orchestration. Strengthened AWS security with Config Rules and Prowler assessments, and improved federal compliance with BOD 22-01 and FISMA.

Tenable AWS Config Prowler IAM S3 CloudTrail GuardDuty NIST CIS CISA BOD 22 01 FISMA Syft (SBOM)Grype GitHub Mend Dependabot Invicti Axonius SOPs

Security Engineer

Dovel Technologies

Nov 2018 - Feb 2020 (1 year 3 months)

Cut open vulnerabilities by over 90% within 3 months using Tenable and reduced web application vulnerabilities by 80% with Acunetix. Automated AWS vulnerability remediation and strengthened security monitoring with Alert Logic, Symantec, and Splunk.

Tenable Acunetix AWS Inspector Lambda Systems Manager AWS Config AWS WAF KMS CloudTrail S3 VPC Flow Logs Cloudwatch Splunk SSH Alert Logic Symantec Nmap Zenmap

Security Engineer

Fusion PPT

Aug 2017 - Nov 2018 (1 year 3 months)

Led a cross-functional Security Scrum and cut critical and high-risk vulnerabilities by 70% across 4,000+ desktops and 500+ servers. Managed enterprise vulnerability scanning with Tenable Nessus and IBM AppScan, and implemented NIST RMF and STIG compliance.

Tenable Nessus IBM AppScan NIST RMF POA&M DISA STIGs Chef Forescout BigFix Splunk Windows Linux MacOS

Security Engineer / Linux System Administrator / Software Test Engineer

ITC Management Group

Oct 2012 - Jul 2017 (4 years 9 months)

Cut vulnerabilities by ~80% across 100+ Linux servers by leading Tenable vulnerability scanning and remediation. Performed malware analysis and administered hardened Red Hat Linux servers with SELinux, firewalls, and package management.