Christine Srour

Devsecops Engineer @AXA XL

Paris, FR

Within AXA XL’s Information Security Assurance team, conducted a large-scale AWS cloud security and governance assessment of AXA\'s Digital Commercial Platform (DCP) spanning multi-account and multi-region environments:• Review of identity and access controls (IAM, MFA, SCPs, multi-account governance).• Automated discovery and mapping of global network topology (VPCs, Subnets, ENIs, TGWs, VPC Peering, NACLs, Security Groups, Network Firewall).• Analysis of network flows (prod vs non-prod, egress, Internet exposure) and AWS Network Firewall rules (East-West segmentation, FQDN whitelisting, logging and rule granularity).• Benchmarking of backup policies against AWS Backup standards and internal AXA XL requirements.• Compliance assessment leveraging AWS Config, Security Hub, GuardDuty, Trusted Advisor, and the AWS Well-Architected Framework.• Evaluation of DevSecOps practices (SLAs/KPIs for patching, drift detection, incident response documentation/testing).• Delivery of structured outputs (risk reports, remediation plans, criticality scoring matrices) and facilitation of stakeholder alignment (CISO, platform, security, architects and observability teams).

Saint Joseph University of Beirut

Bachelor of Engineering - BE, Computer and Communication Engineering