Skip to content
$

State engineering degree from ENSA Oujda, MSc in IT Security from Aix-Marseille. Based in France.

I work between blue team and binary analysis. GRC side: mapped NIST CSF v2 against ISO 27002 on critical infrastructure, wrote risk assessments, built audit-ready deliverables. Technical side: MITRE ATT&CK detection labs on Linux, Elastic SIEM with custom KQL rules, malware analysis from triage to full report, memory forensics with Volatility.

Engineering thesis (ENSAO) on LLVM-based obfuscation — compiler-level code protection passes, then reversing them to see what holds. M2 thesis on NIST CSF v2 vs ISO 27002.

> skills

// low-level & reverse engineering

LLVM x86 / ARM / RISC-V Ghidra Flare-VM Volatility Autopsy FTK Imager

// network security

SSL/TLS PKI VPN Wireshark PfSense OPNsense iptables

// systems & virtualization

Linux Windows Debian Docker ESXi QEMU VirtualBox

// code

Python C Bash Java SQL Git

// grc

ISO 27001/27002 NIST CSF v2 EBIOS RM OWASP SAMM

// languages

Arabic — native French — fluent English — fluent

> experience

Cybersecurity Governance & Compliance Engineer Apr 2025 - Sept 2025
Enedis — France
  • Performed a mapping between NIST CSF v2 and ISO 27002:2022
  • Developed a NIST maturity simulator from ISO assessments
  • Contributed to audits, monitoring, and regional cybersecurity management
NIST CSF v2 ISO 27002 EBIOS RM
Cybersecurity R&D Engineer Feb 2024 - Jul 2024
Secure-IC — Morocco
  • Studied code obfuscation techniques and their impact on performance (RISC-V, ARM)
  • Reviewed LLVM-based obfuscation tools and related academic literature
  • Integrated an obfuscation pass into the LLVM compilation chain
  • Implemented a PoC on embedded code and conducted FPGA testing
LLVM RISC-V ARM C FPGA
Malware Analyst Jul 2023 - Aug 2023
Techso Group — Morocco
  • Studied static and dynamic malware analysis methods
  • Performed in-depth analysis of Cerber ransomware using Flare-VM
  • Installed and configured Cuckoo Sandbox for automated malware analysis
Flare-VM Cuckoo Sandbox Ghidra Volatility

> certifications

Certified in Cybersecurity (CC) — ISC2 2024
Cybersecurity Essentials — Cisco 2023
NDG Linux Essentials — Cisco / NDG 2023

> contact