soufiane el habti

At Poneglyph, I lead cloud security research and advisory work across AWS, GCP, and Azure, covering IAM authorization, supply-chain security, encryption, multi-tenant isolation, and cross-account attack paths.

I'm an all-time top-10 AWS security researcher and have worked alongside AWS engineers at exclusive live hacking events to harden cloud architectures using secure-by-design patterns. I've responsibly disclosed validated findings to Microsoft, Meta, Stripe, Uber, Swisscom, DJI, Fiverr, and Ubisoft, and I'm approved for Anthropic's Claude Vulnerability Program.

At Concentrix, I delivered 90+ web and mobile penetration-test reports with proof-of-concept exploits and remediation guidance, contributing to a 20% reduction in vulnerabilities. At Stellantis, I validated penetration-test findings, drove remediation with technical teams, and standardized security validation, audit, and remediation workflows.

I've also integrated OWASP ZAP into DevSecOps pipelines, built API intrusion-testing methodology aligned to the OWASP API Top 10, and led architecture, firewall, network security, and incident-response work. My work is grounded in OSWE, ISO 27001, PCI-DSS, and practical research into cloud and AI attack surfaces.