Feb 2025 – Jul 2025 · 5 mos · Tunis · Hybrid

• Specialized in integrating security throughout the software development lifecycle by designing secure CI/CD pipelines with comprehensive DevSecOps practices, infrastructure automation, and ISO 27001 compliance.
• Infrastructure & Orchestration: Architected containerized environments using Docker and Kubernetes with GitOps workflows via ArgoCD for declarative infrastructure management. Leveraged Ansible for configuration automation and Vagrant for reproducible development environments, ensuring consistency across staging and production.
• Security Implementation: Established a multi-layered security framework with defense-in-depth principles:
• Application Security: Integrated SAST tools including SonarQube, Snyk, and Gitleaks for code quality analysis and vulnerability detection in source code and dependencies. Implemented DAST with OWASP ZAP for runtime security testing
• Container Security: Deployed Trivy for automated image scanning to identify and remediate CVEs pre-deployment
• Secrets Management: Implemented HashiCorp Vault for encrypted credential storage and dynamic secrets rotation
• Infrastructure Hardening: Configured Hadolint for Dockerfile linting, enforcing container security best practices
• Network Security: Deployed Knockd and Fail2Ban for intrusion prevention and brute-force mitigation
• Identity Management: Implemented Keycloak with MFA, RBAC, and IAM policies for granular access control
• Observability & Reliability: Deployed Prometheus for real-time metrics collection and Grafana for visualization dashboards, enabling proactive incident response. Implemented Longhorn for distributed storage with automated backups, ensuring high availability and disaster recovery.
• Impact: Delivered scalable, secure systems while fostering a security-first culture through collaborative workflows and continuous security integration.

Jun 2024 – Aug 2024 · 2 mos · Rue De Khartoum, Tunis · Hybrid

• Developed an intelligent medical application leveraging machine learning and deep learning models to predict clinical outcomes, with emphasis on data security and privacy protection for sensitive healthcare information.
• AI & Machine Learning:
• Designed and trained predictive models using XGBoost, SVM, Random Forest, and TensorFlow to analyze medical data and detect disease patterns
• Implemented data preprocessing pipelines and feature engineering techniques to optimize model accuracy and performance
• Developed a Flask-based web application with MongoDB backend for secure data storage and real-time predictions
• Conducted model evaluation and validation to ensure clinical reliability and minimize false predictions
• Security & Privacy Implementation:
• Applied healthcare data protection standards to safeguard patient information and ensure regulatory compliance
• Implemented encryption mechanisms for data at rest and in transit, protecting sensitive medical records
• Enforced role-based access control (RBAC) to restrict unauthorized access to patient data and prediction results
• Conducted security assessments using OWASP ZAP, addressing vulnerabilities aligned with OWASP Top 10 and healthcare security best practices
• Designed secure API endpoints with input validation and authentication mechanisms to prevent injection attacks and unauthorized data access
• Impact:
• Delivered a secure, AI-powered healthcare solution that balances predictive accuracy with robust data protection, demonstrating the critical intersection of artificial intelligence and cybersecurity in digital health applications.
• Technologies: Python, Flask, MongoDB, XGBoost, SVM, Random Forest, TensorFlow, Encryption (AES/TLS), Access Control, RBAC, OWASP ZAP, OWASP Best Practices

Jul 2023 – Aug 2023 · 1 mo

• Contributed to the bank's digital transformation initiative by developing a secure web application ( MyBiat ) with emphasis on cybersecurity risk management and regulatory compliance for financial services.
• Security & Risk Management:
• Conducted comprehensive cyber risk analysis aligned with banking sector security standards, identifying vulnerabilities in digital transformation workflows
• Performed application security assessments using Nikto for vulnerability scanning and threat identification
• Executed SWOT analysis to evaluate cybersecurity posture and assess risks associated with digitalization initiatives
• Application Security Implementation:
• Designed and implemented secure database architecture with PostgreSQL, incorporating encryption at rest and in transit
• Enforced role-based access control (RBAC) mechanisms to ensure least-privilege access principles
• Applied secure coding practices and input validation to mitigate OWASP Top 10 vulnerabilities including SQL injection and XSS attacks
• Implemented data encryption protocols to protect sensitive financial information and ensure confidentiality
• Technologies: HTML, CSS, JavaScript, PostgreSQL, Nikto, Encryption (AES/TLS), Access Control, RBAC, SWOT Analysis, Vulnerability Assessment