SOC JUNIOR — DETECTION ENGINEERING — TANGIER, MOROCCO

DEFEND
THE
NETWORK.

4th-year cybersecurity engineering student at EMSI Tanger. I build the detection tooling I want to use on a real SOC floor — Sigma rules, MITRE ATT&CK coverage, incident response.

See the projects →
01
Open to SOC Internships
Sigma
MITRE ATT&CK
SIEM / SOAR
Solidity
01

About

I'm a 4th-year Computer Science & Networks engineering student at EMSI Tanger, oriented toward defensive security and SOC operations.

I'd rather build a working detection pipeline than just read about one — most of what I know comes from personal projects I designed, broke, and fixed myself, plus a side interest in blockchain security audits.

Currently looking for a SOC analyst internship where I can put that hands-on habit to use on real alerts.

  • FrançaisAdvanced
  • EnglishAdvanced
  • ArabicNative
02

Experience

August 2025

Cybersecurity Awareness Internship

Amendis Tanger — Groupe Veolia
  • Delivered fundamentals training: CIA triad, user-side risk, phishing, best practices
  • Exposure to SCADA environments, the Riot platform, and GLPI
  • Ran a phishing simulation — measurable drop in click-through rate after training
2022 — Present

Cycle Ingénieur, Informatique et Réseaux

EMSI, Tanger
  • Web/mobile: OWASP Top 10, SQLi/XSS, APK analysis, root detection
  • VPN & monitoring: IPsec/IKE, OpenVPN, WireGuard, Wireshark, Zabbix
  • Incident & intrusion: SIEM/SOC, Sigma, MITRE ATT&CK, SEC555 methodology
03

Selected Projects

01
SOC Platform

CyberTwin-SOC

  • Full-stack SOC digital twin with OCSF ingestion
  • 4,000+ Sigma/MITRE/Elastic rules with ATT&CK coverage mapping
  • Analyst workflows, coverage scoring, rule validation
PythonFastAPISigmaDocker
View repository →
02
Purple Team

APT-Simulator

  • Lab-safe framework covering 22 MITRE ATT&CK TTPs
  • APT29 / FIN7 / Lazarus / APT41 emulation profiles
  • Reproducible JSONL SIEM traces for coverage testing
PythonATT&CKDocker
View repository →
03
Blockchain Audit

MediChain-plus

  • Fabric + Polygon: private prescriptions, Node.js bridge
  • 19 findings remediated, reentrancy guard added
  • CI security via Slither / Semgrep / Gitleaks
SoliditySlitherGitleaks
View repository →
04

Skills

SOC & Detection

SIEM/SOARSigmaMITRE ATT&CKOCSF

Incident Response

TriageContainmentEVTXZeek

Network & VPN

IPsec/IKEOpenVPNWireGuardWireshark

App Security

OWASP Top 10SQLi/XSSAPK Analysis

Blockchain

SoliditySlitherSemgrepGitleaks

Let's talk security.

Open to SOC analyst and detection engineering internships in Morocco or remote. I respond fast.

Send an email →