حسن بوخمسين

• Configured Palo Alto and Juniper SRX firewall policies, creating, modifying, and removing security rules to maintain compliance and security standards.


• Conducted monthly vulnerability assessments across enterprise security infrastructure such as Palo Alto, Juniper, ClearPass, and IPS; achieved 95% remediation of identified vulnerabilities through hands-on action, SME collaboration, and false positive analysis based on CVE research.


• Executed system upgrades for critical security infrastructure including Juniper and Palo Alto firewalls across multiple locations; coordinated testing and deployment to minimize downtime.


• Developed and implemented Operational Design Parameters (ODPs) for NAC deployments, including custom profile creation, asset classification, and access policy updates to maintain segmentation and compliance.


• Delivered Tier-2 technical support for complex network security and connectivity incidents, performing root cause analysis and collaborating cross-functionally to deliver timely resolutions and recommend corrective actions that strengthen security posture.


• Performed advanced log analysis using Splunk to identify anomalies, support incident investigations, and provide actionable intelligence for incident response teams.


• Administered end-to-end change and incident workflows using BMC SmartIT Remedy, ensuring CRQs and operational changes were documented, approved, and executed without service disruption.


• Managed incident intake and dispatch via email and service tickets, routing firewall, VPN, NAC, proxy, and email security issues to team members, achieving 97% SLA compliance.


• Onboarded and mentored new team members, delivering structured training on Splunk, Aruba ClearPass NAC, and Palo Alto and Juniper SRX firewall administration.

• Conducted thorough investigations of malicious phishing emails, domains, and IPs leveraging open-source tools to enhance threat intelligence.

• Developed and implemented IPS/IDS rules using Snort to effectively detect and mitigate malicious traffic, improving network security posture.

• Engaged in continuous monitoring and analysis of security events using Splunk (SIEM), facilitating timely identification of suspicious activities.

• Identified and reported potential threats, contributing to proactive cybersecurity measures.

• Gained hands-on experience in analyzing live and captured traffic with Wireshark, honing skills in detecting anomalies and cyber threats.