ZZZAK ZAINI

Curriculum vitae / 2026

Product security
with context.

I help product and engineering teams build secure, resilient systems. My experience spans security architecture, integration, cloud, development, and operational support — connecting the right technical decisions to real business outcomes.

01

Professional experience

01Mar 2022 — Present

Sr Product Security Architect

Thermo Fisher Scientific · United Kingdom

Partner with product teams to improve the security posture of products across web applications, thick clients, LIMS, middleware, edge capabilities, IoT devices, infrastructure, and AWS.

  • Run security architecture assessments and provide robust architectural solutions
  • Advise Product Managers and Engineering teams from feature initiation through implementation
  • Advocate for and help teams adopt the software security toolchain
  • Integrate security activities into SDLC processes and prioritise vulnerabilities
  • Coordinate penetration testing and act as a security liaison for audits, customers, and regulatory bodies
02Jun 2016 — Feb 2022

Sr Integration Architect and Developer

Thermo Fisher Scientific · Loughborough, United Kingdom

Worked in a global, geographically distributed team using webMethods 9.5 as an EAI / ESB solution providing B2B, B2C, and A2A integration.

  • Designed and reviewed architecture, moving the environment from a single node to a resilient cluster
  • Designed and developed new integration interfaces and onboarded business partners
  • Reviewed applications to incorporate SSL, certificate, port ACL, and service ACL controls
  • Managed priorities with the business, supported audits, and maintained the platform and infrastructure
  • Supported Finance, Supply Chain, Customer Service, Sales, Operations, and Distribution partners

Stack WebMethods · SAP · IBS / Iptor · VANs · cXML · EDI X12 · EDIFACT · AS2 · SOAP · REST · FTP / SFTP

03Jul 2015 — Jun 2016

Integration Technical Lead

Capgemini · Toulouse, France

Led the technical team in responding to customer requirements and delivering integration solutions to expectation.

  • Requirement gathering, analysis, costing, and capacity planning
  • Architecture design and validation
  • Performance and resilience testing
  • Maintenance in operational conditions

Stack webMethods Integration Server · CAF · BPM · XML · XSD · SOAP · REST · Java · Unix scripting · BIRT

04Feb 2011 — Jun 2015

Integration Developer

AtoS · Toulouse, France

Delivered multiple integration projects across requirements analysis, solution design, development, testing, administration, and maintenance.

Stack webMethods · XML · XSD · SOAP · REST · Informatica · BIRT · Oracle · MySQL · Java · Unix scripting

02

Skills & capabilities

Security architecture

Architecture assessments, security advice, SAST, DAST, dependency analysis, vulnerability management, infrastructure scanning, PKI, SSL, ACLs, encryption, and hashing.

Advanced

SOA & integration

WebMethods Integration Server, CAF, BPM; extensive experience implementing and supporting ESB and integration environments.

Expert

AWS

EC2, S3, RDS, KMS, Lambda, IAM, Kinesis, ECS, EKS, and AppStream.

Good

Design & methodologies

C4, UML, design patterns, and software development life cycle practices.

Good

Web & Java / JEE

HTML, CSS, JavaScript, Ajax, PHP, Apache, AWT / Swing, JDBC, JSP, Servlets, JPA, web services, XML, and JXL.

Good

Databases & scripting

Oracle, SQL Server, MySQL, KSH, and BSH.

Good

ERP & reporting

IBS, SAP MM, Odoo, Informatica, BIRT, and AbInitio.

Intermediate / Notions

Collaboration & tools

Service Desk, Aldon, SharePoint, Archiving, SoftwareAG Designer, Eclipse, XML Spy, Structurizr, and Visual Studio.

Advanced / Good
03

Education

2013 — 2014

MBA in Supply Chain Management

Toulouse Business School
Toulouse, France

Logistics and purchasing strategy · Purchasing management · International logistics · Information systems for logistics
2010 — 2011

MSc in IT
Diplôme d’ingénieur

INSA — National Institute of Applied Sciences
Toulouse, France

Architecture · SOA · Web development · JEE · Web services · SDLC · Model-driven engineering
04

Outside work

Travel

Morocco, Spain, Belgium, France, UAE, Tunisia, and Turkey.

Sports

Regularly play football, squash, and tennis.

Reading

Enjoy reading, even if time does not always allow as much as I would like.

Let’s connect

Have a role or challenge
in mind?

Get in touch to discuss how my product security and architecture experience could help your team.

Contact details available on request