À propos de Maha
Arabe
Bilingue ou natif
Français
Capacité professionnelle complète
Anglais
Capacité professionnelle complète
Accepte de travailler sur site
Paris (jusqu’à 50 km)
Expériences
- Sesame IT (Jizo AI NDR)Security Engineerfévrier 2026 - Aujourd'hui (6 mois)Paris, France
- Embedded security across the SDLC by designing and deploying a DevSecOps strategy for an AI-powered Network Detection & Response platform, securing the software supply chain from commit to client.
- Integrated security controls into GitHub Actions CI/CD pipelines (SAST, secret scanning, dependency auditing, image scanning with Trivy, SBOM generation, and keyless signing with Cosign), with a hardened container runtime and secure delivery.
- Performed application security assessments and secure code reviews against the OWASP Top 10 and OWASP ML & LLM Top 10, hardening the platform against training-data poisoning, model tampering, and prompt injection.
- Centralized vulnerability management and remediation tracking in DefectDojo, giving engineering teams a single prioritized view of findings across all pipelines.
- Aman Solutions for CybersecurityDevSecOps Engineer Internseptembre 2024 - janvier 2026 (1 an et 4 mois)Riyadh Saudi Arabia• • Integrated security tooling into developer workflows by re-architecting Jenkins pipelines to run SCA and DAST scans (Snyk, OWASP ZAP, SonarQube, Grype) as automated pre-merge checks, reducing fix time for critical findings.• • Built Docker image build pipelines with automated vulnerability scanning (Trivy) and signed artifacts to ensure trusted, tamper evident images in the cloud container registry.• • Advised developers on secure architecture and threat modelling while contributing to a secure-by-design microservices backend (NestJS, Redis) deployed to the cloud.
- The University of TulsaSOC Analyst Internfévrier 2024 - mai 2024 (3 mois)Oklahoma, USA• • Performed incident response with Microsoft Defender and Sentinel, mitigating over 50 security threats.• • Developed Python automation with Armis to update 500+ outdated devices, reducing manual remediation effort.• • Analyzed network traffic (TCP/UDP, DNS, HTTP/S) from 1,000+ nodes using Zeek, Elasticsearch, and Kibana, cutting detection time 40%.
Recommandations
Soyez le premier à recommander Maha
Contribuez à la réussite de ce freelance en partageant votre expérience de collaboration avec lui.
Ces profils de freelance correspondent également à vos critères
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Formations
- Bac+5, Master's-equivalentINSAT2025Bac+5, Master's-equivalent
- Cybersecurity (Exchange Year)The University of Tulsa2024Cybersecurity (Exchange Year)