Open to opportunities

ibtissame hsini

@ibtissamehsini

Message

Cybersecurity analyst specializing in SOC operations, VAPT, and threat detection engineering.

Morocco

Message

What I'm looking for

I’m looking for an entry-level cybersecurity role where I can support SOC operations, improve SIEM/IDS detections, and perform VAPT on web applications. I want a team that values detection engineering, clear security reporting, and continuous learning.

I’m a cybersecurity analyst focused on SOC operations and VAPT, with hands-on experience deploying a complete open-source SOC aligned with ISO27001. I configured SIEM, IDS/IPS, and log collection pipelines, built custom detections for brute-force and network scans, and delivered an end-to-end implementation roadmap from planning to production rollout.

In web application pentesting work, I executed 115 security test cases across 14 OWASP attack categories, assessed authentication mechanisms (JWT, OAuth2, MFA), and identified issues like SSRF, directory traversal, race conditions, and API security flaws. I also developed a machine learning-based DDoS detection system and build security-focused projects with Python, Flask, and the ELK stack.

Experience

Work history, roles, and key accomplishments

SOC Analyst & Pentesting Intern

Inovadex Consulting

Dec 2025 - Jun 2026 (6 months)

Deployed a SOC for an HR SaaS platform using open-source technologies and aligned it with ISO 27001. Conducted web application penetration testing, assessed authentication mechanisms (JWT, OAuth2, MFA), and identified/reporting 40+ web application vulnerabilities across OWASP categories.