Emir Fattoum

Built and launched a production cybersecurity platform that analyses encrypted network traffic without decrypting payloads, detecting potentially malicious communications and providing threat-category and malware-family context. Led research, application development, production deployment, security operations and governance.

Worked in a multi-client SOC supporting enterprise customers across finance, healthcare, energy, logistics and other sectors. Validated and prioritised SIEM/SOAR alerts and investigated endpoint, network, WAF, IDS and firewall telemetry to establish context, severity and potential impact.

Used CrowdStrike Falcon and security telemetry for financial-sector customers to validate endpoint alerts and investigate suspicious activity. Documented findings, escalated cases and supported containment coordination and operational handovers.

Researched malware detection in encrypted SSL/TLS traffic using machine learning and semi-supervised generative adversarial networks. Automated PCAP analysis and dataset generation, compared Random Forest, SVM and XGBoost baselines, and implemented a TensorFlow-based semi-supervised GAN classifier.

Bac+5 engineering curriculum with a specialisation in network, infrastructure and data security.

Preparatory curriculum in physics and mathematics.