youssef ben chaouacha

At VadaSoft, I built Module A of BaitWay, a SOC triage platform that turns raw .eml emails into explainable risk scores, verdicts, and supporting signals. I implemented checks for email authentication, suspicious URLs and attachments, and social-engineering content.

I also built the module’s FastAPI and PostgreSQL API and React triage UI, then added a 55-test pytest suite and GitHub Actions workflow to the project repository after my internship.

For Fortify, my open-source web vulnerability scanner, I built passive security checks and opt-in active tests for SQL injection, reflected XSS, and path traversal. I designed the XSS check to flag only a unique per-scan token reflected without escaping, and kept scan data on the user’s machine by limiting the local LLM to explaining and prioritizing findings.

On BioScan, I built the JWT authentication and authorization core, role-management API, PDF medical-report generation, and sign-in security-event log. I’m now working on MedLink’s authentication and authorization layer, and I’m completing the INE eJPT learning path while seeking a PFE internship in application security, security tooling, or DevSecOps.