Security Engineer

Security that holds up in real systems.

I'm Younes — a security engineer who also builds, integrates and deploys the applications I protect. I help teams ship software that is dependable, observable and secure by design.

Explore my work Discuss a project

Primary focus

Bringing security into development, deployment and day-to-day operations.

Application Security
SIEM Integration
Full-Stack Development
Secure Deployment

Selected Work

Projects & Engineering Work.

Illustrative mockup of a security operations dashboard with alert queues and response workflows

Security Engineering

01 / Multi-client SOC · DXC Technology Morocco

AI-Assisted SOAR Platform

A security orchestration, automation and response platform that validates, enriches and correlates alerts, then opens cases and runs response playbooks automatically.

PythonDjangoTheHive

Watch demo

Illustrative mockup of a university lab platform on a laptop and tablet

Full-Stack Development

02 / Al Akhawayn University in Ifrane

Digital Innovation Lab Platform

The institutional platform of the Digital Innovation Lab at Al Akhawayn University, supporting innovation, research visibility, student engagement and academic collaboration.

Full-stackIntegrationUX design

Visit website

Illustrative mockup of an academic writing editor with a feedback panel

Full-Stack Development

03 / Al Akhawayn University · AI-assisted writing

Praxis

An AI-assisted academic writing platform for Al Akhawayn University, built to support students’ thinking without replacing their voice — planning, drafting, reflection and instructor feedback in one place.

AI integrationFull-stackEdTech

Visit website

Illustrative mockup of a digital oral history archive website

Systems Integration

04 / Open-access oral history archive · Ifrane region

Atlas Voices

A digital archive preserving oral histories and cultural heritage from Morocco’s Ifrane region, open for anyone to explore.

DjangoPythonHosting

Visit website

Photo related to WYF Morocco and Morocco-Russia participation

Full-Stack Development

05 / World Youth Festival · Morocco National Committee

WYF Morocco

The official website of Morocco’s National Committee for the World Youth Festival (WYF), the international gathering of young leaders and changemakers. It presents the committee, its programs, youth opportunities, news and announcements.

Full-stackCMSMobile-first

Visit website

Professional Collaborations

Organizations I've Worked With.

Contributing technology and engineering expertise to meaningful initiatives.

Al Akhawayn University

Ifrane, Morocco

Contributed to university digital platforms supporting education, innovation, and research.

WYF Morocco

Morocco National Committee

Designed and developed a digital platform supporting youth engagement, programs, and international opportunities.

Solutions & Services

Engineering that solves real problems.

From detecting threats to delivering secure applications, each engagement starts with a problem and ends with concrete deliverables.

Security operations

Security monitoring & SIEM integration

Connect sources, normalise events and tune detections to your environment.

Typical deliverables

Log source onboarding
Detection rules
Alert runbook

Security assurance

Application security

Review, reproduce and fix issues in authentication, input handling and configuration.

Typical deliverables

Findings report
Prioritised fixes
Retest notes

Data protection

Applied cryptography & data protection

Review and implement encryption in transit and at rest, password hashing, signing and key handling.

Typical deliverables

Crypto review
TLS & key setup
Data protection notes

Software engineering

Full-stack web development

Design and build the frontend, API and data layer with security from the start.

Typical deliverables

Working application
Source repository
Setup guide

Infrastructure delivery

Secure deployment & integration

Configure environments, secrets, access and service-to-service connections.

Typical deliverables

Deployment config
Integration map
Access review

Data reliability

Database migration & reliability

Plan migrations, verify integrity and remove recurring failure points.

Typical deliverables

Migration plan
Validation checks
Rollback steps

Knowledge transfer

Documentation & handover

Write clear operational documentation so your team can run what was built.

Typical deliverables

Architecture notes
Runbooks
Handover session

Let's collaborate

Have a project or a security challenge?

Describe your goals and we'll identify a practical way forward.

Start a conversation

Technical Expertise

Technologies I work with.

A multidisciplinary toolkit spanning cybersecurity, software engineering, cloud infrastructure, automation and systems integration.

Cybersecurity & SIEM

Security operations, monitoring and detection.

LogRhythm SIEMELK StackWazuhSIEM DeploymentSIEM MonitoringDetection EngineeringSOARThreat IntelligenceIncident ResponseTheHiveCortexMISP

Programming & Scripting

Automation, software engineering and scripting.

PythonCJavaScriptTypeScriptBashPowerShellREST APIsAutomation Scripts

Full-Stack Development

Frontend and backend application development.

ReactNext.jsNode.jsExpress.jsDjangoHTML5CSS3Tailwind CSSAPI DevelopmentAuthentication

Databases

Data storage, management and integration.

PostgreSQLSQLMongoDBDatabase DesignSchema DesignDatabase MigrationQuery Optimization

Cloud & Infrastructure

Cloud deployment, hosting and infrastructure.

AWSOracle CloudCloud ManagementCloud DeploymentLinuxUbuntuDockerNginxServer AdministrationCloud Security

DevOps & Integration

Application delivery and system integration.

GitGitHubCI/CDDocker ComposeREST IntegrationDeployment AutomationReverse ProxyTroubleshootingProduction Deployment

Achievements

Recognition earned, work delivered.

Distinctions, invitations and certifications alongside results from delivered projects.

Best Project

ID4Africa AGM 2025 · Upanzi Network

Best Project — Incubator

Recognised by the Upanzi Network for the best project in the incubator track at the ID4Africa Annual General Meeting.

Finalist

ID4Africa AGM 2025 · Addis Ababa

Digital ID Finalist

Selected as a finalist in the digital identity track at the ID4Africa 2025 Annual General Meeting in Ethiopia.

Upanzi Network

Invited to MOSIP Connect 2026

Invited by the Upanzi Network to take part in MOSIP Connect 2026, the global gathering on open-source digital identity.

Fully funded

Nizhny Novgorod · Representing Morocco

Fully Funded Delegate, World Youth Festival

Selected with full funding to represent Morocco at the World Youth Festival in Nizhny Novgorod, Russia.

Embassy of Russia in Morocco

Official Reception

Received officially by the Ambassador of Russia in Morocco.

Top 5%

Hands-on security practice

Top 5% on TryHackMe

Ranked in the top 5% of users on TryHackMe through continuous offensive and defensive security labs.

55%

MTTR reduction

Contributed through the AI-assisted SOAR platform at DXC Technology Morocco

60%

Fewer false positives

Through automated alert validation, enrichment and correlation

Platforms in production

Across security operations, education, heritage and youth engagement

University platforms

Digital Innovation Lab, Praxis and Atlas Voices at Al Akhawayn University

Certifications & training

Industry credentials across security fundamentals, network security and privileged access management.

Events participation

2026
MOSIP Connect 2026
Invited by the Upanzi Network
2025
ID4Africa 2025 Annual General Meeting
Addis Ababa, Ethiopia · Digital ID finalist
2025
World Youth Festival 2025
Nizhny Novgorod · Fully funded, representing Morocco

CompTIA Security+ ce

CompTIA · Certification

Valid until Jun 2029

BeyondTrust Certified Administrator — Password Safe

BeyondTrust · Certification

Valid until Sep 2028

FortiGate 7.4 Operator

Fortinet · Certification

Issued May 2024

Fortinet Certified Associate in Cybersecurity

Fortinet · Certification

Earned 2024 · expired May 2026

Fortinet Certified Fundamentals in Cybersecurity

Fortinet · Certification

Earned 2024 · expired May 2026

Technical Introduction to Cybersecurity 1.0

Fortinet · Training

Completed Apr 2024

Introduction to the Threat Landscape 2.0

Fortinet · Training

Completed Apr 2024

Approach

Security as part of the work, not an afterthought.

Understand the system

Map how data, users and services actually move before changing anything.

Build with security in place

Treat access control, secrets and input handling as part of the design, not a final check.

Deploy deliberately

Repeatable environments, least-privilege access and monitoring from day one.

Hand over clearly

Documentation and runbooks so the work remains maintainable after I step away.

About

An engineer who protects what he builds.

My primary discipline is security engineering. What sets my work apart is that I can also build, integrate and deploy the applications themselves — so security decisions are made with a clear view of how the system really works.

I bring security into each stage: access and data handling during development, configuration and secrets during deployment, and monitoring once a system is in operation.

Security

Application security
SIEM & log analysis
Access control
Secure configuration

Development

Full-stack web apps
REST APIs
Relational databases
AI integration

Operations

Deployment
Systems integration
Database migration
Technical documentation

GET IN TOUCH

Let's build something meaningful.

Have a project in mind, a cybersecurity challenge, or an opportunity to collaborate? Feel free to contact me directly by email or connect with me on LinkedIn.

Send me an email

For projects, professional opportunities and collaborations.

[email protected]

Connect on LinkedIn

Let's connect and discuss ideas, opportunities, and professional collaborations.

View my LinkedIn profile