# youssef ben chaouacha

youssef ben chaouacha is a remote worker on Himalayas, Intern, Security Platform Development at VadaSoft, based in Tunisia.

Source: https://himalayas.app/@youssefbenchaouacha

```text
Cybersecurity engineering student building phishing analysis for VadaSoft’s BaitWay SOC platform and an open-source web vulnerability scanner.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Tunisia |
| Authorized to work in | Tunisia |
| Salary expectations | 60k+ USD |
| Job categories | Application Security Engineer, DevSecOps Engineer |
| Skills | Application Security, Authentication and Authorization, Secure API Design, Threat Modeling, Phishing Analysis, Email Security, SPF, DKIM, DMARC, OWASP Top 10, JWT, Keycloak, OIDC, RBAC, Backend For Frontend (BFF) |
| Website | https://givemeboga.github.io/Portfolio |
| Portfolio | https://givemeboga.github.io/Portfolio |
| LinkedIn | https://linkedin.com/in/youssef-ben-chaouacha-646715270 |
| GitHub | https://github.com/Givemeboga |

## What I'm looking for

```text
I’m seeking a PFE internship in application security, security tooling, or DevSecOps.
```

## About

```text
At VadaSoft, I built Module A of BaitWay, a SOC triage platform that turns raw .eml emails into explainable risk scores, verdicts, and supporting signals. I implemented checks for email authentication, suspicious URLs and attachments, and social-engineering content.

I also built the module’s FastAPI and PostgreSQL API and React triage UI, then added a 55-test pytest suite and GitHub Actions workflow to the project repository after my internship.

For Fortify, my open-source web vulnerability scanner, I built passive security checks and opt-in active tests for SQL injection, reflected XSS, and path traversal. I designed the XSS check to flag only a unique per-scan token reflected without escaping, and kept scan data on the user’s machine by limiting the local LLM to explaining and prioritizing findings.

On BioScan, I built the JWT authentication and authorization core, role-management API, PDF medical-report generation, and sign-in security-event log. I’m now working on MedLink’s authentication and authorization layer, and I’m completing the INE eJPT learning path while seeking a PFE internship in application security, security tooling, or DevSecOps.
```

## Experience

### Intern, Security Platform Development

VadaSoft. Jul 2026 - Aug 2026

```text
Built Module A of BaitWay, a SOC triage platform, implementing phishing-analysis passes and a FastAPI + PostgreSQL API with React UI. Validated the engine with test emails and API security checks.
```

Skills: fastAPI, PostgreSQL, React, Alembic, Email-Authentication-(SPF-DKIM-DMARC), Heuristics, Hashing, Social-Engineering-Detection, Pytest, GitHub-Actions

### Web Development Intern

ST2I. Jul 2025 - Aug 2025

```text
Built a full-stack web application that generates user interfaces dynamically from reusable components. Gathered functional requirements and wrote technical documentation.
```

Skills: Fullstack-Development, Requirements-Gathering, Technical-Documentation

### Web Development Intern

Mazoon Design & Software. Jun 2023 - Aug 2023

```text
Delivered client-facing websites end to end using HTML, CSS, JavaScript, and Bootstrap, from requirements gathering to deployment.
```

Skills: HTML, CSS, JavaScript, Bootstrap

## Education

### ESPRIM – École Supérieure Privée d'Ingénieurs de Monastir (ESPRIT Group)

Engineering Degree, Cybersecurity & Cloud Computing. 2025 - Present. Grade: 14.32/20

```text
Final-year engineering student in Cybersecurity & Cloud Computing, with a 2025–2026 average of 14.32/20 and 60/60 ECTS.
```

### INE

eJPT (Junior Penetration Tester), Penetration Testing

```text
Currently completing the INE eJPT learning path in preparation for the certification exam.
```

### Cisco Networking Academy

Network Security, Network Security

```text
Completed the Network Security course in June 2026, including 70 hours and 45 hands-on labs.
```

### ESPRIT – École Supérieure Privée d'Ingénierie et de Technologies

Integrated Preparatory Cycle & 1st-Year Engineering Cycle, Engineering. 2022 - 2025

```text
Completed the Integrated Preparatory Cycle and first-year engineering cycle at ESPRIT.
```

### Lycée Zaouiet

Baccalauréat, Experimental Sciences. 2022 - 2022

```text
Earned the Baccalauréat in Experimental Sciences.
```

### INSAT

CyberCamp 6.0, Cybersecurity

```text
Participated in CyberCamp 6.0, a bootcamp covering intrusion testing, hardening, and attack and defense.
```

## Tech stack

- OpenAPI
- SonarQube
- Kubernetes
- Docker Compose
- GitHub Actions
- PostgreSQL
- SQLite
- BIND9
- Spring Boot
- React
- JavaScript
- Python
- Java
- C#
- Go
- FastAPI
- Wireshark
- Ubuntu
- Linux
- Windows
- Kali Linux
- TypeScript
- pytest
- Keycloak
- Git
- Vagrant
- Docker
- SQL
- Burp Suite
- sqlmap
- Nmap
- Metasploit
- Ollama
- Trivy
- CodeQL
- OWASP ZAP
- Bash
- Gitleaks
- pfSense

To contact youssef, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Tlili Wijden](https://himalayas.app/@tliliwijden): Graduation Intern, Defensy
- [Bouabidi Bilel](https://himalayas.app/@bouabidibilel): Full Stack Developer, Red Sys
- [Amel Ben Khalifa](https://himalayas.app/@amelbenkhalifa): Security & Backend Engineer, Sup'Com
- [Iheb Mabrouki](https://himalayas.app/@ihebmabrouki1): Security Engineer (Graduation Project), Attijari Bank
- [Khayem Zribi](https://himalayas.app/@khayemzribi): Software Engineering Intern, Digitalize
- [isra mabrouk](https://himalayas.app/@isramabrouk): Python Developer Intern, Gexpertise
- [Rayen Gader](https://himalayas.app/@rayengader): Cyber Security Engineer, Global IT Vision
- [Oussama Ncibi](https://himalayas.app/@oussamancibi): Fullstack Developer, Traveltodo
- [Eya Louhichi](https://himalayas.app/@eyalouhichi): Social Media & Design Lead, 360DMMC
- [Nourchene Tergui](https://himalayas.app/@nourchenetergui): Stage d'été, Cybersécurité Blue Team (DFIR), iTeam University