Open to opportunities

Asma Neji

@asmaneji

Message

Cybersecurity engineer focused on threat intelligence and security automation.

Tunisia

Message

What I'm looking for

I’m looking for an entry role in cybersecurity where I can drive threat intelligence, automate detections, and build secure pipelines—using tools like Wazuh, MITRE ATT&CK mapping, and CTI/graph workflows—while learning from a strong security team.

I’m a cybersecurity engineer building practical threat intelligence solutions that turn raw signals into actionable detection. During my Cyber Threat Intelligence internships, I designed a CTI system with a Neo4j knowledge graph, applied ML and graph algorithms for anomaly detection and threat trend analysis, and mapped threats using MITRE ATT&CK enrichment for clearer context.

I also strengthen defenses end to end through DevSecOps and security automation. I implemented a DevSecOps pipeline with Jenkins, SonarQube, OWASP ZAP, and n8n, deployed Wazuh for log management, and supported XDR workflows using TheHive, Cortex, and OpenCTI; earlier, I configured Wazuh SIEM monitoring and alert automation, worked with CIS benchmark-based hardening, and built Ansible scripts to improve authentication security.

Experience

Work history, roles, and key accomplishments

Cyber Threat Intelligence Intern

TudigiSec by Nomios

Feb 2025 - Jun 2025 (4 months)

Designed a CTI system using a Neo4j knowledge graph integrating social media, OSINT, honeypots, and dark web sources. Built a Flask/Dash visualization and STIX export pipeline, including ML/graph-based anomaly detection and MITRE ATT&CK threat mapping.

Neo4j Graph Analytics Threat Intelligence OSINT Flask API Docker

DevSecOps Intern

Arribatt FZCO

Jul 2024 - Aug 2024 (1 month)

Created a DevSecOps pipeline automating security checks with Jenkins, SonarQube, OWASP ZAP, and n8n. Deployed Wazuh for log management and implemented XDR with TheHive, Cortex, and OpenCTI, including pen testing with OWASP ZAP and Nmap.

Jenkins SonarQube OWASP ZAP Wazuh Cortex N8n XDR Nmap

Cyber Security Intern

Riadvice

Jan 2022 - May 2022 (4 months)

Configured Wazuh SIEM for server monitoring and alert automation via webhooks, and implemented CIS-benchmark-based security solutions with IDS rule management. Integrated ModSecurity, ClamAV, AIDE, Tiger, and Fail2ban, and performed vulnerability assessments and penetration testing while developing Ansible scripts for server management and authentication security.

Wazuh IDS MODSecurity ClamAV Fail2Ban Penetration Testing Ansible

Cyber Threat Intelligence Intern

Sama Partners Business Solutions SARL

Aug 2023 - Present (2 years 10 months)

Studied cyber threat intelligence concepts, use cases, and classifications, including dark web structure, protocols, and communication methods. Researched dark web data extraction techniques and tested an open-source AIL tool for CTI data collection and classification.

Cyber Threat Intelligence CTI Data Extraction Tool Evaluation (AIL)