Open to opportunities

Brahim Bellamech

@brahimbellamech

Message

I secure Linux infrastructure, test web applications, and build resilient competition platforms.

Mauritania

Message

What I'm looking for

I'm looking for remote cybersecurity, security engineering, or Linux infrastructure work where I can secure systems, investigate incidents, test web applications, and contribute to collaborative technical environments.

At 0xMR, I secure and operate a competition platform serving 150+ users, implementing authentication, administrative authorisation, rate limiting, CAPTCHA bot mitigation, and segmented APIs.

I harden production infrastructure with Nginx, TLS, DigitalOcean, systemd, and health-checked deployment pipelines that roll back failed releases. I also author CTF challenges across web, cryptography, forensics, and reverse engineering.

Through bug bounty research and personal labs, I test web applications for OWASP Top 10 flaws, document reproducible findings, and verify remediation. I administer Linux systems, investigate incidents through logs and packet capture, and automate operations with Bash, cron, and Docker.

Experience

Work history, roles, and key accomplishments

Current

Security & Infrastructure Engineer

Current

0xMR

Jan 2026 - Present (8 months)

Secure and operate a competition platform serving 150+ users, implementing authentication, rate limiting, and API segmentation. Harden production infrastructure with Nginx, TLS, and systemd, and author CTF challenges.

Authentication Authorization Rate Limits Nginx TLS DigitalOcean Systemd CI CD CTF Web Security Cryptography Forensics Reverse Engineering

Current

Security Researcher - Bug Bounty

Current

Independent

Jan 2025 - Present (1 year 8 months)

Test live web applications for OWASP Top 10 vulnerabilities through manual analysis and tools like Burp Suite and SQLMap. Validate findings, document evidence, and disclose responsibly.

OWASP Top 10 Burp suite Sqlmap Vulnerability Assessment Responsible Disclosure

Current

Linux Systems Administrator & IT Support

Current

Self-Directed Practice & Personal Labs

Jan 2024 - Present (2 years 8 months)

Administer Arch and Ubuntu systems, manage users, groups, permissions, and services, and harden Nginx servers. Diagnose incidents from logs and packet captures, and automate operations with Bash and Docker.