# Mehdi Haidi

Mehdi Haidi is a remote worker on Himalayas, Ingénieur logiciel (PFE) at VoieInfo, based in Morocco.

Source: https://himalayas.app/@mehdihaidi

```text
Software engineer at VOIEINFO who developed SmartCaisse with SSDLC, STRIDE threat modeling, and OWASP Top 10 protections.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Morocco |
| Authorized to work in | Morocco |
| Salary expectations | 24k+ EUR |
| Job categories | Software Engineer, Application Security Engineer, DevSecOps Engineer, Backend Engineer, Penetration Tester |
| Skills | Application Security, DevSecOps, SSDLC, Threat Modeling, OWASP Top 10, SAST, DAST, CI CD, Penetration Testing, Backend Development, Microservices, Spring Boot, .NET, JWT, Spring Security |
| Website | https://haidimehdi.me |
| Portfolio | https://haidimehdi.me |
| LinkedIn | https://linkedin.com/in/mehdi-haidi-63a56022 |
| GitHub | https://github.com/777iiddi |

## About

```text
At VOIEINFO, I designed and developed SmartCaisse, a .NET POS application, applying the SSDLC. I used STRIDE threat modeling, RBAC, and OWASP Top 10 protections, and added binary obfuscation and SAST to the pipeline.

At Comsys, I secured six Spring Boot microservices with JWT and Spring Security, and set up a GitHub Actions CI/CD pipeline with a SonarQube quality gate for high- and critical-severity vulnerabilities. My projects and CVE exploitation write-ups are available on GitHub and my portfolio.
```

## Experience

### Ingénieur logiciel (PFE)

VoieInfo. Apr 2026 - Jul 2026

```text
Conceived and developed SmartCaisse (POS .NET) from scratch with SSDLC application. Applied threat modeling STRIDE, RBAC, and OWASP Top 10 protections, plus binary obfuscation and SAST in pipeline.
```

Skills: .NET, SSDLC, Threat-Modeling, STRIDE-Model, RBAC, OWASP-Top-10, SAST, Obfuscation

### Développeur Backend & AppSec

Comsys. Jul 2025 - Sep 2025

```text
Developed 6 secure Spring Boot microservices with JWT and Spring Security. Implemented CI/CD pipeline with GitHub Actions and SonarQube quality gate blocking high/critical vulnerabilities.
```

Skills: Spring-Boot, Java, JWT, Spring-Security, Microservices, CI-CD, GitHub-Actions, SonarQube

### Réseaux, Systèmes & Sécurité

MarsaMaroc. Jul 2024 - Aug 2024

```text
Supervised network with Nagios and audited Cisco configurations including VLAN, ACL, and NAT.
```

Skills: Nagios, Cisco, VLAN, ACLs, NAT, Network-Security

### Administration Systèmes

PCARD. Apr 2023 - Jun 2023

```text
Administered Windows Server and Active Directory with GPO and privilege management, and automated tasks using PowerShell.
```

Skills: Windows-Server, Active-Directory, GPO, PowerShell, Automation

## Education

### EMSI, École Marocaine des Sciences de l’Ingénieur

Diplôme d'Ingénieur en Informatique, Informatique. 2021 - Present

```text
Pursuing a Diplôme d'Ingénieur en Informatique with a focus on MIAGE, expected to complete in 2026.
```

### IBM

Containers (Docker, Kubernetes), Containers

```text
Earned the Containers (Docker, Kubernetes) certification from IBM.
```

### Google

Foundations of Cybersecurity, Cybersecurity

```text
Earned the Foundations of Cybersecurity certification from Google.
```

### Oracle University

Oracle Cloud Infrastructure 2025 DevOps Professional, Cloud Infrastructure

```text
Earned the Oracle Cloud Infrastructure 2025 DevOps Professional certification.
```

### TryHackMe

Security Engineer, Security

```text
Earned the Security Engineer certification from TryHackMe.
```

## Tech stack

- SonarQube
- Kubernetes
- GitHub Actions
- Spring Boot
- .NET
- PowerShell
- Nagios
- Windows Server
- Spring Security
- Docker
- Burp Suite
- Metasploit
- OWASP ZAP

To contact Mehdi, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Yassine Ait Elasri](https://himalayas.app/@yassineaitelasri): Final Year Project Threat Hunting, DatProtect
- [ikram lablaida](https://himalayas.app/@ikramlablaida): Ingénieur Logiciel, Adria Business & Technology
- [sara bensarghin](https://himalayas.app/@sarabensarghin): Web Developer Engineer, Tanger Med Special Agency (Cires Technologies)
- [Yassir Khaddir](https://himalayas.app/@yassirkhaddir): DevSecOps & AppSec Lead, CPL Network
- [Mathieu Atsou](https://himalayas.app/@mathieuatsou): Full Stack Engineer, GROUPE AGENCE PREMIUM
- [IKRAM RKIBI](https://himalayas.app/@ikramrkibi): Freelance Full Stack Developer, Self Employed
- [Ayoub Es sarghini](https://himalayas.app/@ayoubessarghini): Backend Engineer, Vast Security
- [Ayoub Haddaoui](https://himalayas.app/@ayoubhaddaoui): Offensive Security Intern, NearSecure
- [Mohamed Agdid](https://himalayas.app/@mohamedagdid): Software Engineer, Vigiplus
- [elkadiri saad](https://himalayas.app/@elkadirisaad): Fullstack Developer, Martech Conseils