Looking for a job

Mouhab El Farra

@mouhabelfarra

Cybersecurity engineer at Cour des Comptes de Tunisie who deployed Wazuh SIEM/XDR and documented incident response processes.

Tunisia

Message

What I'm looking for

I'm seeking a junior cybersecurity consulting role focused on governance, risk, and compliance, where I can contribute to risk analysis, compliance work, incident response planning, and recommendations for IT departments. I'm available from December 2026.

At Cour des Comptes de Tunisie, I deployed an open-source Wazuh SIEM/XDR on dedicated Ubuntu Server infrastructure, integrated log feeds, and configured MITRE ATT&CK correlation rules, alerts, and dashboards. I also compared supplier offers using ISO/IEC 27005 and documented the architecture, operations guide, and incident response playbook for the DSI team.

At ANCS (Agence Nationale de la Cybersécurité), tunCERT, I analyzed security events in the SIEM and used custom filters and Python scripts to reduce triage time by 30%. I documented confirmed indicators of compromise, tracked vulnerabilities using CVSS scores, and contributed to incident containment and eradication.

Experience

Work history, roles, and key accomplishments

Stagiaire Cybersécurité

Cour des Comptes de Tunisie

Jul 2026 - Nov 2026 (4 months)

Conducted technical comparisons of vendor offers for three lots (including EDR and SIEM) per ISO/IEC 27005 and provided recommendations to the IT department. Deployed an open-source SIEM/XDR solution (Wazuh) on Ubuntu Server, configured correlation rules, alerts, and dashboards.

ISO 27005 SIEM Wazuh EDR XDR MITRE ATT&CK Ubuntu Server Incident Response Documentation

Ingénieur Cybersécurité

ANCS (Agence Nationale de la Cybersécurité)

Apr 2024 - Sep 2024 (5 months)

Analyzed 500+ daily security events in the SIEM, reducing triage time by 30% through custom filters and Python automation. Detected and documented 3 confirmed IOCs in 5 months, wrote analysis reports, and contributed to incident response phases.

SIEM Python Incident Response Vulnerability Management CVSS Threat Intelligence SOC

Développeur Full-Stack

TANITWEB

Jul 2023 - Sep 2023 (2 months)

Developed a secure web application with authentication and access management, and fixed 3 OWASP Top 10 vulnerabilities.

Web Development Authentication Access Control OWASP Top 10 Security

Education

Degrees, certifications, and relevant coursework

ECE Paris, OMNES Education

MSc, Cybersecurity Management

2025 -

Pursuing an MSc in Cybersecurity Management, certified SecNumEdu by ANSSI, with research on multi-modal ensemble frameworks for deepfake liveness detection in biometric systems.