Open to opportunities

AFAF TIZAOUI

@afaftizaoui

Message

Cybersecurity engineer graduate seeking a first role to protect information systems.

Morocco

Message

What I'm looking for

I am seeking an entry-level cybersecurity role where I can apply hands-on skills in detection, pen-testing, and monitoring, learn from experienced teams, and contribute to ISO-aligned security improvements.

I am a cybersecurity engineering graduate with hands-on internship experience in firewall rule optimization, penetration testing, WAF deployment, and security monitoring aligned with ISO 27001.

During final-year and industry internships at Docaposte, AXA GO, and Attijariwafa Bank SecOps, I standardized multi-tool security indicators, improved network flow performance, and implemented automated monitoring and web-application defenses.

I bring practical skills in intrusion detection, incident analysis, secured CI/CD, and machine-learning anomaly detection, and I am eager to contribute to a security team where I can continue learning and strengthen organizational defenses.

Experience

Work history, roles, and key accomplishments

Current

Security Intern

Current

Docaposte

Apr 2025 - Present (6 months)

Standardized multi-tool security indicators and developed a monitoring model compliant with ISO 27001 and aligned with COSC to improve detection and reporting for security operations.

ISO 27001)Security Monitoring YAML Docker Splunk Zabbix AWS ISO 27001

Cybersecurity Intern

AXA GO

Mar 2025 - Apr 2025 (1 month)

Analyzed and optimized firewall rules to enhance network security and performance of network flows during a focused security internship.

Firewalls Cisco Network Analysis Wireshark Zeek Snort

SecOps Intern

Attijariwafa Bank

Jul 2024 - Sep 2024 (2 months)

Performed penetration testing, deployed a web application firewall and implemented automated monitoring via Zabbix to strengthen web application security.

Penetration Testing WAF Zabbix Monitoring Web Security Rapid7)Git Rapid7

IT Security Intern

University Hospital Center

Jul 2023 - Sep 2023 (2 months)

Conducted threat analysis, penetration testing, and reinforced security policies for medical IoT devices to improve device resilience and compliance.

Penetration Testing Policy Hardening Autopsy Volatility Forensics Wireshark

Education

Degrees, certifications, and relevant coursework

National School of Applied Sciences (ENSA) Oujda

Engineering Degree in Cybersecurity, Cybersecurity

2022 -

Activities and societies: Technical projects in secured CI/CD, data security with machine learning, DoS detection, static/dynamic mobile app analysis, and security audits.

Engineering Degree in Cybersecurity with coursework in cryptography, digital signature and security protocols, operating system hardening, virtualization, and programming.