Hamza Alaoui Ismaili
@hamzaalaouiismaili
Cybersecurity Engineer specializing in threat detection and identity/password security with automation.
MoroccoWhat I'm looking for
I’m a cybersecurity engineer who moves comfortably across the security spectrum—from breaking systems to defending them and automating the work in between. I started on the offensive side with penetration testing and custom vulnerability-scanning tools in Python, then moved into defensive operations with Cybereason EDR, threat hunting, and incident response across enterprise estates.
Today I specialize in password and identity security at global scale, auditing credential robustness across 200+ Active Directory domains and thousands of Windows, Linux, SQL, Oracle, and legacy systems for 30+ entities worldwide. My differentiator is automation: I turned a manual month-end audit-reporting workflow into a real-time PowerShell and Power Automate pipeline delivering 500+ reports per month at generation time, cutting effort by up to 80% while adding self-monitoring for appliance health and scan failures.
Experience
Work history, roles, and key accomplishments
Password Analyst
AXA Global Business Services
Sep 2024 - Present (1 year 11 months)
Enterprise-scale password and credential security auditing across the AXA group, with a strong focus on automation. Built a PowerShell + Task Scheduler and Power Automate + SharePoint pipeline to deliver real-time audit reports and monitoring for scan and appliance health failures.
Enterprise-scale password and credential security auditing across the global AXA group, with a strong focus on automation.
- Audit password robustness across 200+ Active Directory domains and thousands of Windows, Linux, SQL, Oracle, AS400, and AIX systems, delivering results to 30+ AXA entities worldwide.
- Engineered a PowerShell + Task Scheduler automation pipeline that delivers audit reports i
Blue-team EDR analyst responsible for endpoint detection coverage and compliance across a large enterprise estate. (Offered a full-time position on completion.)
- Audited 1,000+ servers and workstations as a Cybereason EDR analyst, verifying agent deployment, health, and successful reporting to the EDR master.
- Raised and tracked up to 20 ServiceNow tickets per week to remediate non-compliant ass
Automated certificate and PKI management in a containerized environment.
- Automated digital-certificate deployment within a Kubernetes environment, streamlining SSL issuance for web applications.
- Built a public key infrastructure (PKI) using Active Directory Certificate Services (AD CS) and integrated it with Kubernetes via cert-manager for automated certificate lifecycle management.
- Configur
Offensive security internship focused on automating web-application vulnerability assessment.
- Developed a Python GUI vulnerability scanner that automates web-app reconnaissance - crawling pages, testing for Cross-Site Scripting (XSS), running directory enumeration (Gobuster), and brute-forcing login forms (Hydra).
- Automated evidence collection by extracting source code, capturing interface scr
Education
Degrees, certifications, and relevant coursework
Ecole Nationale Supérieure d'Informatique et d'Analyse des Systèmes - ENSIAS
Diplôme d'ingénieur d'état, Cyber Security
2021 - 2024
Centre Omar ibn al khattab CPGE
Classes préparatoires aux grandes écoles (CPGE), Maths - Physique (MP)
2019 - 2021
Tech stack
Software and tools used professionally
Availability
Location
MoroccoAuthorized to work in
Job categories
Skills
Interested in hiring Hamza?
You can contact Hamza and 90k+ other talented remote workers on Himalayas.
Message HamzaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
