Looking for a job

M'hirsi Hamza

@mhirsihamza

Message

Senior Cyber Security Engineer with expertise in Zero Trust architecture.

Germany

Message

What I'm looking for

I am looking for a role that challenges my skills in cybersecurity and offers opportunities for professional growth in a collaborative environment.

I design and build security ecosystems that don’t just defend, but thrive under pressure. At Taxfix, I lead Zero Trust initiatives that cut identity-based risk by 60% through tightly scoped IAM roles and re-architected network segmentation. I conducted a full audit of IAM roles against CIS benchmarks, explained the gaps to engineering and leadership teams, and drove remediation that hardened access across critical infrastructure.

Before that, at Rakuten Symphony, I architected secure 5G environments and rolled out Zero Trust frameworks that shrank internal attack surfaces. One of my proudest chapters? Leading a small but mighty Vault and PKI team (just 3 of us) for a year was one of the most rewarding experiences of my career. We’re still close friends today, bonded over crypto (the keys, not the coins) and clean cert chains.

I also embedded security-by-design into 10+ product features, helping dev teams move fast without creating risk. Whether it’s aligning with ISO 27001, GDPR, or designing secure architectures from scratch, I bring exactly what security engineering roles need: strong fundamentals, hands-on architecture experience, and the ability to work cross-functionally with devs, product, and compliance.

On the soft side: I lead with clarity, speak both code and business, and have a sharp eye for detail, probably why I always end up finding a vulnerability somewhere in every company I work at. Let’s see what I’ll find in yours😏

Experience

Work history, roles, and key accomplishments

Current

Senior Cyber Security Engineer

Current

Taxfix

Jul 2024 - Present (1 year 11 months)

Led Zero Trust Security Architecture on Google Cloud Platform, designing and deploying a new IAM and network model that reduced identity-based risk exposure by 60%. Integrated Security into SDLC, embedding secure-by-design principles into over 30+ product features across cross-functional engineering squads.

Google Cloud Platform IAM SDLC Cloudflare Terraform ISO 27001

Cyber Security Architect

Rakuten Symphony Deutschland

Apr 2022 - Jun 2024 (2 years 2 months)

Architected Secure 5G Environments across RAN, core network, and self-hosted cloud infrastructure, embedding secure-by-design principles into 10+ telecom projects. Led Zero Trust Implementations, designing identity-centric architectures with strict segmentation and access control, reducing internal threat exposure by 65%.

5G Security DevSecOps IaC Terraform Network Security GDPR ISO 27001

Cyber Security Freelancer

Neat Consulting

Nov 2021 - Mar 2022 (4 months)

Performed 20+ end-to-end penetration tests on web applications across fintech, SaaS, and e-commerce platforms, identifying an average of 6 critical and high-risk vulnerabilities per engagement. Utilized industry-standard tools including Burp Suite, OWASP ZAP, and custom Python scripts to uncover complex flaws in authentication, access control, and session management.

Penetration Testing Burp suite OWASP Python Vulnerability Assessment

Cyber Security Engineer

Venari Security

Jan 2019 - Oct 2021 (2 years 9 months)

Led development of an alpha-stage malware detection system capable of analyzing encrypted traffic without decryption, reducing reliance on traditional deep packet inspection by 80%. Designed and deployed data collection tools across 5+ client networks, ensuring seamless integration with centralized threat analysis and visualization platforms.

Encrypted Traffic Analysis Data Collection Threat Intelligence

Education

Degrees, certifications, and relevant coursework

TEK-UP

Engineering, IT in cybersecurity

2016 - 2019

Activities and societies: Computer and Information Systems Security/Information Assurance

Conducted applied research on enhancing encrypted traffic analysis by integrating threat intelligence techniques into AI-driven malware detection systems.