Experience

German cybersecurity and GRC company delivering application security, penetration testing, managed services, and regulatory compliance.

• Continued developing and refining VamiAppSec, improving its existing application-security workflows, dashboard experience, reliability, and reporting.
• Added a Mobile AppSec capability focused on APK static analysis and dynamic runtime analysis.
• Implemented Android manifest and component checks, Frida-based instrumentation, compatibility and error handling, and reliable app-restart flows.

German AI workflow-automation company for construction and real estate, connecting plans, contracts, invoices, and reports through traceable workflows.

• Reviewed source code, API endpoints, authentication flows, and AWS deployment settings for AppSec and cloud security weaknesses.
• Improved pre-deployment checks covering dependencies, secrets, code quality, and infrastructure configuration.
• Translated findings into clear risk context, technical impact, and practical remediation guidance.

Established Tunisian commercial bank serving individuals, professionals, and businesses through digital and branch-based financial services.

• Supported SOC Level 1 alert review, log analysis, and basic investigation in a banking environment.
• Enriched SIEM alerts with firewall logs, authentication records, network events, and VirusTotal checks.
• Documented investigation evidence and escalation criteria for repeatable SOC workflows.