ALMANANI
SAID
ABOUT ME
4th-year engineering student specializing in IT Security & Digital Trust at the École Nationale Supérieure d'Intelligence Artificielle et Sciences des Données de Taroudant. Passionate about the full spectrum of cybersecurity — from breaking to building.
My work spans offensive security research, compliance auditing under ISO 27001, and integrating security into modern DevOps pipelines. I build tools that bridge the gap between theory and real-world threat detection.
MY PROJECTS
I review the public SPF and DMARC settings for an authorized company domain, plus DKIM selectors its administrator supplies. You get a readable report showing what was found, what needs attention, and what remains uncertain. The paid pilot includes one follow-up check.
A production-style Security Operations Center combining Wazuh SIEM detection with Shuffle SOAR playbooks for automated incident response, enriched with AbuseIPDB and VirusTotal threat intelligence. Covers 6 real-world use cases end-to-end across Linux and Windows hosts, with graduated severity, hash/IP/host whitelisting, dry-run mode, and rollback workflows.
An immersive 2D gamified ISO 27001/27002 audit simulator where players navigate a virtual organization, complete real audit missions, collect evidence, evaluate compliance controls, and generate professional audit reports. Designed to make security auditing engaging and educational for professionals and students alike.
ML-powered system detecting anomalies in distributed system logs. Trained Isolation Forest and One-Class SVM on 5M+ HDFS logs, integrated into a full SOC pipeline with SIEM alert forwarding.
Third-party vendor security compliance evaluation portal. Automates security posture assessment of suppliers, flags non-conformities, and generates risk reports aligned with EBIOS and ISO 27001.
Full Active Directory enumeration and attack path visualization using BloodHound and PowerView. Identified privilege escalation vectors and documented remediation steps.
Integrated automated SAST and DAST testing into Jenkins/GitLab CI pipelines targeting the OWASP Top 10. Used SonarQube and OWASP ZAP to catch vulnerabilities before production.
TECHNICAL SKILLS
EXPERIENCE & EDUCATION
Designed and deployed a full Security Operations Center built around Wazuh (SIEM) with automated incident response orchestrated through Shuffle (SOAR), enriched with AbuseIPDB and VirusTotal threat intelligence. Delivered 6 end-to-end use cases — SSH/RDP brute-force, file integrity monitoring & malware detection, malicious IP/domain blocking, privilege escalation, web attacks, and ransomware containment — across both Linux and Windows agents, with dry-run, whitelist, and rollback safety controls.
Final year of engineering specializing in cybersecurity. Focus on offensive/defensive security, AI applied to cybersecurity, governance frameworks, and advanced threat detection systems. Projects include ML-based log anomaly detection and the Game of Auditors ISO 27001 simulator.
Designed and integrated secure web/mobile application features using Firebase, Firestore, and Agile/Scrum methodology. Implemented hardened authentication with strict password policies, Bcrypt hashing, JWT session management, and secure HTTP header configuration.
Professional university diploma in computer engineering, building foundational expertise in software development, networks, databases, and system administration.
GET IN TOUCH
Looking for a cybersecurity intern who can operate across the full stack — from pentesting to governance to ML-based threat detection. Let's connect.