Open to opportunities

Youssef Chalghoumi

@youssefchalghoumi

Message

Cloud Security Engineer at Pwn & Patch building AI-powered AWS attack-path investigations.

Tunisia

Message

At Pwn & Patch, I architected a Terraform-based AWS Shield Advanced and WAF strategy that cut manual deployment time by 90%. I also built hardened GitLab CI/CD pipelines and contributed to the company's ISO/IEC 27001 certification.

I built Snock, an AI security agent running in production at Pwn & Patch, to investigate AWS attack paths using GraphRAG and VectorRAG. My client work has included Azure identity advisory, Kubernetes penetration testing for Orange, and cloud security assessments.

Experience

Work history, roles, and key accomplishments

Current

Cloud Security Engineer

Current

Pwn & Patch

Jul 2026 - Present (3 months)

Architected multi-account AWS Shield Advanced and WAF strategy using Terraform and Firewall Manager, cutting manual deployment time by 90%. Contributed to ISO/IEC 27001 certification and built hardened GitLab CI/CD pipelines.

AWS Terraform Firewall Management GitLab CI CD TFSEC Trivy Secret Detection SonarQube ISO 27001 Cloudwatch Lambda Site To Site VPNs CIS Benchmarks AWS Well Architected Framework

Cloud Security Consultant

Pwn & Patch

Feb 2024 - Jul 2026 (2 years 5 months)

Provided cloud security consulting for enterprise clients, including Azure identity advisory, Kubernetes penetration testing, and DevSecOps integration. Led security assessments and remediation for clients in banking, telecommunications, and manufacturing.

Microsoft Entra ID ADFS Password Hash Sync Pass Through Authentication Entra Application Proxy Entra Private Access SAST DAST Kubernetes Penetration Testing Trend Micro XDR FortiGate Cisco ASA Zabbix azure monitor

Network Security Intern

OneTech Business Solutions

Feb 2023 - Jun 2023 (4 months)

Deployed Fortinet SD-WAN infrastructure with IPS, high availability, and ADVPN for resilient inter-site connectivity. Configured FortiManager and FortiAnalyzer for centralized security policy management and monitoring.

Fortinet SD WAN IPS ADVPN Fortimanager FortiAnalyzer Cisco ASA

Cyber Security Intern

KEYSTONE Group

Dec 2022 - Jan 2023 (1 month)

Built a CTF-based training platform focused on penetration testing and vulnerability exploitation scenarios. Supported internal red-team simulations evaluating employee security awareness and SOC response effectiveness.

CTF Penetration Testing Red Team SOC