Bagy Oussama
Final-year engineering student in Cybersecurity & Telecommunication Systems at ENSA Marrakech, Cadi Ayyad University. Currently completing a Software Engineering Internship at Optipark. Focused on Cybersecurity, AI Security, Cloud Security, Offensive Security and Secure Software Engineering.
Projects
A selection of my most advanced cybersecurity, DevSecOps, cloud infrastructure, and security engineering projects.
Transforms natural-language infrastructure requirements into validated DevSecOps and Infrastructure-as-Code artifacts, then automates security checks, cloud provisioning, CI/CD execution and deployment monitoring. The repository, demo, report and presentation document the complete engineering workflow.
Project summary
An intelligent SOC and self-healing honeynet for detecting attacks, redirecting threats, and supporting controlled remediation. It combines traffic inspection, deception, centralized monitoring, and local AI-assisted analysis.
An open-source Android TLS auditing platform that finds insecure certificate validation, cleartext traffic, weak configurations, and missing pinning. It combines APK analysis, security-standard mapping, and AI-assisted remediation.
A hardened Wazuh SIEM platform for centralized log collection, integrity monitoring, event correlation, and threat detection. Its objective is to protect the monitoring pipeline while improving infrastructure-wide security visibility.
An enterprise virtualization environment built with VMware vSphere, two ESXi hosts, and centralized vCenter management. It demonstrates resilient workload operation through clustering, availability, balancing, and migration.
PacketFence NAC platform using IEEE 802.1X, RADIUS, and identity-based policies to secure enterprise network access.
Asterisk VoIP infrastructure with Zoiper endpoints, secure SIP communications, authentication, and system hardening.
Spring Boot inventory platform for authentication, product and supplier tracking, stock monitoring, and PDF documents.
Post-quantum IPC system using McEliece encryption to protect process communication against future quantum attacks.
Apache Spark engine for large-scale analytics workloads using distributed execution and parallel data processing.
Experience
Cybersecurity Intern (PFA)
Supporting the preparation of an internal Security Operations Center through authorized network discovery, asset mapping and vulnerability assessment across Windows, Active Directory, VMware ESXi and Linux environments.
Key achievements
DevSecOps Intern
Designed and deployed an AI-powered GitLab CI/CD security pipeline combining intelligent commit analysis, automated code inspection, SAST, vulnerability scanning and consolidated reporting to detect risky changes early and reduce security regressions.
Key achievements
Red Team Intern
Performed hands-on Red Team assessments across web applications and Linux environments, covering vulnerability discovery, exploitation, traffic analysis, privilege escalation, persistence and post-exploitation in controlled laboratories.
Key achievements
Cybersecurity & Telecommunication Systems Engineering Student
Pursuing a five-year engineering degree combining cybersecurity, telecommunications, cloud infrastructure, virtualization, cryptography and secure software engineering through intensive laboratories, technical projects and professional internships.
Key achievements
Skills
Security engineering, offensive security, infrastructure protection and enterprise defense technologies.
Secure delivery pipelines, cloud-native infrastructure, automated validation and production monitoring.
Software development, security automation, scripting and data-driven application engineering.
Enterprise infrastructure administration, virtualization platforms and resilient systems engineering.
Designing, configuring and troubleshooting enterprise network infrastructures using routing, switching, segmentation and core network services.
Applied language models, intelligent security analysis and scalable data-processing workflows.
Certifications
TryHackMe
Issued April 2026
Completed advanced hands-on training covering offensive security, penetration testing, privilege escalation, Active Directory, web exploitation and practical attack simulations.
TryHackMe
Developed practical cybersecurity fundamentals through hands-on labs covering Linux, Windows, networking, web security and common attack techniques.
Cisco
Issued January 2025
Built a strong foundation in cybersecurity principles, digital threats, network defense and secure online practices.
MLIA Edu
Issued June 2026
Explored Android application security, vulnerability assessment, secure mobile development and protection against common mobile threats.
ISC²
Developed foundational knowledge of secure network architecture, segmentation, communication protocols, access control and enterprise defense strategies.
ISC²
Studied incident handling, business continuity and disaster-recovery strategies for improving organizational cyber resilience.