Security Engineer

Security that holds up in real systems.

I'm Younes — a security engineer who also builds, integrates and deploys the applications I protect. I help teams ship software that is dependable, observable and secure by design.

Explore my work Discuss a project

Primary focus

Bringing security into development, deployment and day-to-day operations.

Application Security
SIEM Integration
Full-Stack Development
Secure Deployment

Selected work

Projects where security met real delivery.

Five platforms across security operations, education, heritage and youth engagement. Images are illustrative until approved screenshots are added.

Illustrative mockup of a security operations dashboard with alert queues and response workflows

Security Engineering

55%reduction in MTTR

60%fewer false positives

Featured · Multi-client SOC · DXC Technology Morocco

AI-Assisted SOAR Platform

A security orchestration, automation and response platform that validates, enriches and correlates alerts, then opens cases and runs response playbooks automatically.

My role

Designer and developer — full-stack architecture, integrations and AWS deployment

Full-stack architecture, dashboards, APIs and automated playbooks in Python and Django
Integrated TheHive, Cortex, MISP, Wazuh and AI services into one workflow
Automated alert validation, enrichment, correlation, case creation and response
Deployed the platform on AWS

Python
Django
TheHive
Cortex
MISP
Wazuh
AWS

Illustrative mockup of a university lab platform on a laptop and tablet

Full-Stack Development

Al Akhawayn University in Ifrane

Digital Innovation Lab Platform

The institutional platform of the Digital Innovation Lab at Al Akhawayn University, supporting innovation, research visibility, student engagement and academic collaboration.

My role

Led full-stack development, integration, UX and security-conscious engineering

Designed and developed the platform end to end
Integrated supporting solutions into a single, centralised experience
Shaped the user experience and applied security-conscious engineering throughout

Full-stack
Integration
UX design

dil.aui.ma

Illustrative mockup of an academic writing editor with a feedback panel

Full-Stack Development

Al Akhawayn University · AI-assisted writing

Praxis

An AI-assisted academic writing platform for Al Akhawayn University, built to support students’ thinking without replacing their voice — planning, drafting, reflection and instructor feedback in one place.

My role

Engineering contributor

AI coaching that encourages students to develop their own ideas
Writing-process insights that show instructors how work evolves
Planning, drafting, reflection and feedback in a single workflow

AI integration
Full-stack
EdTech

praxis.aui.ma

Illustrative mockup of a digital oral history archive website

Systems Integration

Open-access oral history archive · Ifrane region

Atlas Voices

A digital archive preserving oral histories and cultural heritage from Morocco’s Ifrane region, open for anyone to explore.

My role

Backend developer and deployment lead

Developed the Django backend for organising and presenting archive records
Connected backend services with the website interface
Supported regional content exploration

Django
Python
Hosting

atlasvoices.org

Illustrative mockup of a youth organisation website on phone and tablet

Full-Stack Development

World Youth Festival · Morocco National Committee

WYF Morocco

The official website of Morocco’s National Committee for the World Youth Festival (WYF), the international gathering of young leaders and changemakers. It presents the committee, its programs, youth opportunities, news and announcements.

My role

Designer and developer — full development lifecycle

Architecture, frontend and backend implementation
Dynamic content management for programs, news and announcements
Testing, hosting, domain configuration and production deployment

Full-stack
CMS
Mobile-first

wyfmorocco.com

Services

How I can help your team.

Focused engagements with clear deliverables. Scope is agreed up front, and results are reported as they are — no inflated promises.

Monitor showing a calm, well-organised security monitoring dashboard

Security monitoring & SIEM integration

Logs exist, but nobody sees the events that matter.

Connect sources, normalise events and tune detections to your environment.

Log source onboarding
Detection rules
Alert runbook

Application security

Known weaknesses or unexplained auth and access issues.

Review, reproduce and fix issues in authentication, input handling and configuration.

Findings report
Prioritised fixes
Retest notes

Applied cryptography & data protection

Sensitive data, passwords or keys handled without a clear protection model.

Review and implement encryption in transit and at rest, password hashing, signing and key handling.

Crypto review
TLS & key setup
Data protection notes

Full-stack web development

You need a dependable web application built properly.

Design and build the frontend, API and data layer with security from the start.

Working application
Source repository
Setup guide

Secure deployment & integration

Getting from a working build to a safe, connected production system.

Configure environments, secrets, access and service-to-service connections.

Deployment config
Integration map
Access review

Database migration & reliability

Moving data or stabilising an application that fails under real use.

Plan migrations, verify integrity and remove recurring failure points.

Migration plan
Validation checks
Rollback steps

Documentation & handover

Systems that only one person understands.

Write clear operational documentation so your team can run what was built.

Architecture notes
Runbooks
Handover session

Not sure which fits?

Describe the problem and we will scope the right engagement together.

Discuss a project

Achievements

Recognition earned, work delivered.

Distinctions, invitations and certifications alongside results from delivered projects.

Best Project

ID4Africa AGM 2025 · Upanzi Network

Best Project — Incubator

Recognised by the Upanzi Network for the best project in the incubator track at the ID4Africa Annual General Meeting.

Finalist

ID4Africa AGM 2025 · Addis Ababa

Digital ID Finalist

Selected as a finalist in the digital identity track at the ID4Africa 2025 Annual General Meeting in Ethiopia.

Upanzi Network

Invited to MOSIP Connect 2026

Invited by the Upanzi Network to take part in MOSIP Connect 2026, the global gathering on open-source digital identity.

Fully funded

Nizhny Novgorod · Representing Morocco

Fully Funded Delegate, World Youth Festival

Selected with full funding to represent Morocco at the World Youth Festival in Nizhny Novgorod, Russia.

Embassy of Russia in Morocco

Official Reception

Received officially by the Ambassador of Russia in Morocco.

Photo to be added

Top 5%

Hands-on security practice

Top 5% on TryHackMe

Ranked in the top 5% of users on TryHackMe through continuous offensive and defensive security labs.

55%

MTTR reduction

Contributed through the AI-assisted SOAR platform at DXC Technology Morocco

60%

Fewer false positives

Through automated alert validation, enrichment and correlation

Platforms in production

Across security operations, education, heritage and youth engagement

University platforms

Digital Innovation Lab, Praxis and Atlas Voices at Al Akhawayn University

Certifications & training

Industry credentials across security fundamentals, network security and privileged access management.

Events participation

2026
MOSIP Connect 2026
Invited by the Upanzi Network
2025
ID4Africa 2025 Annual General Meeting
Addis Ababa, Ethiopia · Digital ID finalist
2025
World Youth Festival 2025
Nizhny Novgorod · Fully funded, representing Morocco

CompTIA Security+ ce

CompTIA · Certification

Valid until Jun 2029

BeyondTrust Certified Administrator — Password Safe

BeyondTrust · Certification

Valid until Sep 2028

FortiGate 7.4 Operator

Fortinet · Certification

Issued May 2024

Fortinet Certified Associate in Cybersecurity

Fortinet · Certification

Earned 2024 · expired May 2026

Fortinet Certified Fundamentals in Cybersecurity

Fortinet · Certification

Earned 2024 · expired May 2026

Technical Introduction to Cybersecurity 1.0

Fortinet · Training

Completed Apr 2024

Introduction to the Threat Landscape 2.0

Fortinet · Training

Completed Apr 2024

Approach

Security as part of the work, not an afterthought.

Understand the system

Map how data, users and services actually move before changing anything.

Build with security in place

Treat access control, secrets and input handling as part of the design, not a final check.

Deploy deliberately

Repeatable environments, least-privilege access and monitoring from day one.

Hand over clearly

Documentation and runbooks so the work remains maintainable after I step away.

About

An engineer who protects what he builds.

My primary discipline is security engineering. What sets my work apart is that I can also build, integrate and deploy the applications themselves — so security decisions are made with a clear view of how the system really works.

I bring security into each stage: access and data handling during development, configuration and secrets during deployment, and monitoring once a system is in operation.

Security

Application security
SIEM & log analysis
Access control
Secure configuration

Development

Full-stack web apps
REST APIs
Relational databases
AI integration

Operations

Deployment
Systems integration
Database migration
Technical documentation

Contact

Have a system that needs to be built or secured?

Tell me briefly what you're working on. I'll reply with whether I'm a good fit and how I would approach it.