Mohamed Ali Dziri

I’m a junior cybersecurity engineer candidate in my final engineering year, with hands-on experience in intrusion detection (IDS/IPS), network security analysis, and machine learning for threat detection. I’m certified as a Google Cybersecurity Professional and CCNA, and I enjoy turning raw telemetry into actionable security decisions.

My day-to-day strengths include SIEM & monitoring with Wazuh and ELK, and practical security testing using Metasploit and OWASP ZAP. On the detection side, I work with Suricata, CrowdSec, and nftables, and I analyze network traffic using TLS/SSH and TCP/IP context to reduce noise and focus on real risk.

In my final project, I built a hybrid HIDS that combines Suricata signatures with XGBoost behavioral modeling and automated response through CrowdSec/nftables. The system uses a SIEM-like logging pipeline and traffic-flow analysis (CICFlowMeter) without DPI, achieving strong results (F1-Score 97.16%, AUC-ROC 0.9897) and demonstrating fast brute-force detection and blocking. I’m passionate about security event supervision, incident response, and vulnerability management.