Security Audits:

• Performed more than 25 web application security audits and code reviews, including vulnerability exploitation (XSS, CSRF, SQLi, file injection, etc.) and the evaluation of authentication modules (SAML, OAuth 2.0, OIDC).
• Conducted more than 5 network configuration reviews (SMTP, FTP, DNS) to identify configuration weaknesses and strengthen system resilience.
• Performed over 5 architectural and organizational security reviews aimed at assessing compliance and maturity of security controls.
• Conducted system and network configuration reviews:
  • Around 5 configuration reviews for Linux, Windows, and VMware NSX.
  • Around 15 configuration reviews for Cisco and Fortinet.
  • 3 SAP configuration reviews.
  • 1 Azure configuration review.
• Conducted an OSINT mission on 8 different targets (Maltego, SpiderFoot, Shodan, theHarvester).

Research & Development:

• Designed a firewall review automation tool (rule classification and analysis).
• Developed a Python/Terraform framework for password cracking and analysis (NTDS, AWS, Hashcat).
• Authored multi-technology audit guides and training materials on secure development.
• Designed an internal staffing optimization tool for mission resource management.
• Developed a CTF and cybersecurity challenges platform – Internship Topic:
  • Created a Terraform script for automated deployment of the CTF platform and selected challenges.
  • Designed and developed custom CTF challenges.

• Part of Rakuten Buyers Team. We work on optimizing the buyer experience throughout our website. Our perimeter includes every process starting from the cart until payment and the Rakuten Club project
• For myself, i worked on rebuilding the cart on Rakuten E-commerce website which was my first project along side the team.
• After that, i was handed the project of redisigning the Club R and Sponsorship pages which was done using NextJS, and i adapted the existing webservice created using java and added it to be called from the Gateway and not directly from the frontEnd service layer

Front-End

  • Worked on creating essential reusable components (in NextJS) for the plateform.

  • Used multiple NextJS functionalities like Server side rendering, static site props, ISR ...

  • Other multiple tools used alongside NextJS like Mockoon, Redux, GraphQL.

Back-End

  • Learned about Java Springboot framework and Java Spring cloud Gateway

  • Used Presentation - Business - Data Access Layers Architecture