Open to opportunities

ahmed bouyahia

@ahmedbouyahia

Message

I build SOC detections and Zeek-based NDR pipelines for hybrid cloud environments.

Tunisia

Message

What I'm looking for

I'm looking to build and improve SOC detection, NDR, incident response, and security automation capabilities across hybrid or cloud environments.

I deployed a production Zeek-based NDR platform at Mantu across hybrid Azure and on-premises infrastructure, using production and test sensors to improve network visibility. I built TLS-secured Zeek-to-OpenSearch pipelines, Python sessionization, Isolation Forest anomaly scoring, and detections for SSH brute force, invalid TLS certificates, DNS tunneling, and Nmap reconnaissance.

I've also built AI adversarial testing labs, automated SOC workflows with Wazuh, TheHive, Cortex, MISP, and Velociraptor, and designed secure enterprise network labs with FortiGate, VLANs, DMZs, IPsec VPNs, and SD-WAN.

Experience

Work history, roles, and key accomplishments

Information System Security Associate Intern

Mantu

Jan 2026 - Jul 2026 (6 months)

Deployed a production NDR platform across hybrid Azure/on-prem infrastructure with 2 production sensors and 7 test sensors using Zeek to close network visibility gaps and enable traffic monitoring coverage. Built TLS-secured log pipelines using Zeek to Data Prepper to OpenSearch with Python sessionization and Isolation Forest anomaly scoring. Engineered and tuned detections for SSH brute force, in