Skip to content
Mael Belhacene
FR

Cybersecurity · GRC · Secure Development

Grenoble, France

Aligning security with reality.

Cybersecurity engineer at DOMPLUS Groupe — security project management, compliance, and operational defense, with a lead-developer background.

View my workGet in touch

Cybersecurity engineer (apprenticeship) · DOMPLUS Groupe

01About

Understanding both worlds.

I align security with reality: governance, compliance, and operational defense.

As an apprentice cybersecurity engineer in the Security unit of DOMPLUS Groupe in Grenoble, I run security projects end to end. My ground: governance, risk and compliance — ISSP, GDPR, ISO 27001, security committees, third-party risk — and their very concrete translation into infrastructure and tooling.

Before security, I was a lead developer: Sage X3 ERP, Laravel and Node.js applications, a ticketing platform built from scratch. That past gives me a rare angle — I know what a developer can break, and how a system is governed.

Next heading: a Master’s degree in IT Infrastructure & Cybersecurity Management, with a thesis already underway on deploying Sekoia XDR.

Key figures

  • 3

    years of IT experience at DOMPLUS

  • 120

    ECTS credits earned

  • 4

    areas of practice

02Services

Four areas of practice.

  1. 01

    Governance, risk & compliance

    ISSP, GDPR compliance built on CNIL and ANSSI frameworks, security committees, third-party risk management, internal and ISO 27001 audits — governance that holds up in the reality of teams.

  2. 02

    Operational security & defense

    EDR/XDR deployment and management, incident response with an outsourced SOC, system hardening, access management, BCP/DRP.

  3. 03

    Awareness & the human factor

    Awareness programs, measured phishing campaigns, a security culture built close to the business.

  4. 04

    Secure development

    Laravel and Node.js applications designed security-first, REST APIs, code reviews, GitLab — a developer’s eye in service of defense.

03Expertise

Three pillars, one standard.

Governance & compliance

  • ISSP
  • GDPR
  • ISO 27001
  • CNIL / ANSSI frameworks
  • Security committees
  • Third-party risk
  • Internal audit

Operational security

  • EDR / XDR
  • Incident & crisis management
  • Hardening
  • Access management
  • Active Directory / GPO
  • BCP / DRP
  • Awareness & phishing

Secure development

  • Laravel (PHP)
  • Node.js
  • MySQL
  • REST APIs
  • GitLab
  • Security by design
  • Agile / Scrum

Daily toolkit

Detection & response
Infrastructure & access
Project & compliance
Development

04Experience

From code to governance.

  1. Sept. 2026 — today

    Cybersecurity Engineer

    DOMPLUS Groupe — apprenticeship, Security unit, Grenoble

    Security project management: requirements gathering, specifications and technical architecture documents, coordination of internal teams and external partners. EDR/XDR operations, vulnerability watch, security and ISO 27001 audits, GPO and server administration. Member of the incident and crisis management cell, level 2/3 application support.

  2. Jan. — Aug. 2026

    IT Security Assistant · Security Project Lead

    DOMPLUS Groupe — apprenticeship, Grenoble

    GRC, ISSP and GDPR compliance (CNIL, ANSSI frameworks). Security committees, third-party risk management, awareness and phishing campaigns. Leading the EDR/XDR rollout and coordinating with the Orange Cyberdéfense SOC.

  3. Sept. 2025 — Jan. 2026

    IT Infrastructure & Security Administrator

    DOMPLUS Groupe — Grenoble

    Operational continuity, hardening, high availability, access management and attack-surface reduction.

  4. July 2023 — Aug. 2025

    Project & Application Manager

    DOMPLUS Groupe — Grenoble

    Sage X3 ERP rollout, security-by-design Laravel / Node.js web applications, a from-scratch ticketing platform integrated with EasyRedmine through its REST API.

  5. Jan. — Feb. 2023

    IT & Cloud Technician — internship

    PROWEBCE

    SSL certificates, asset inventory, AWS hosting.

05Education

Background & certification.

  1. 2026 — 2028

    Master’s degree, IT Infrastructure & Cybersecurity Management

    CESI

    In progress, apprenticeship at DOMPLUS Groupe.

  2. 2025 — 2026

    Bachelor’s degree, Systems & Network Administration

    CESI

    Thesis: selecting and deploying Sekoia XDR at DOMPLUS Groupe.

  3. 2023 — 2025

    Two-year degree, Software Development

    CESI

    120 ECTS credits — development foundations: PHP, JavaScript, SQL, project management.

Dec. 2025

Certification

Cybercrime — United Nations

ID 1774172153MB

06Projects

Three projects, three scales.

  1. 01

    Sekoia XDR deployment

    Context
    Thesis subject at DOMPLUS Groupe: giving the group a unified detection-and-response capability.
    Role
    Comparative study, solution selection, integration into the IS and day-to-day operation, in coordination with the SOC.
    Stack
    XDR · Sekoia · Detection & response

  2. 02

    NinjaOne rollout

    Context
    Fixing the estate’s known vulnerabilities before they can be exploited.
    Role
    Tool selection, agent rollout, patch policies and remediation follow-up.
    Stack
    NinjaOne · Patching · Vulnerabilities

  3. 03

    From-scratch ticketing platform

    Context
    Replacing scattered request tracking with a single tool, shaped around the group’s processes.
    Role
    Full design and development, EasyRedmine integration through its REST API, workflow automation.
    Stack
    Laravel · REST API · Automation

07Contact

Let’s talk security.

A governance question, a project to frame or just a conversation — I reply quickly.

Direct email

maelbelhacene38.pro@gmail.com

Elsewhere

Download CV