23-year-old engineering student from Burkina Faso, based in Morocco, currently working as a QA & application security engineer at EBHI (L3M Holding group). I combine cybersecurity, test automation and embedded systems: security audits, Playwright suites in CI/CD, SOC infrastructures and IoT solutions that are resilient by design.
// PORTRAIT.IMG · TS
Three-year engineering programme in cybersecurity and embedded systems.
More information on the official ENSATE website.
Two-year integrated preparatory cycle leading to the engineering cycle.
More information on the official ENSATE website.
Scientific baccalaureate (series C) obtained in Burkina Faso with honours (mention Bien).
More information on the official LSNO website.
Sep. 2026 – Present Following my internship, I work on La Bonne Allure (online driving school, web and mobile) on two fronts. Application security: I audit the platform, identify vulnerabilities and give the team reports with reproduction steps. Test automation: I maintain the Playwright end-to-end suite that runs daily in a GitLab CI pipeline, with JUnit reports, Slack alerts and a dashboard.
Jun. – Sep. 2026 Functional, regression, API and mobile testing on La Bonne Allure: 20+ test reports with SQL root-cause analyses, notably on payment and financing flows, test plans of up to 35 cases and a 23-case test repository in Notion. I wrote the comparative study of Playwright, Cypress and Selenium and the QA roadmap, both approved by management. I also ran the QA follow-up of 9 other group websites through a tracking dashboard I designed and led (developed with AI assistance).
I lead the development of the alumni network platform of the Lycée Scientifique National de Ouagadougou, in production since July 2026 with 220+ members in 18 countries: directory with controlled visibility, networking requests, opportunities board, installable app with push notifications. Security is built in from the start: row-level security, two-factor authentication for sensitive roles, captcha, audit log and a dependency audit in CI. I design and lead the project; the code is developed with AI assistance.
Managing administrative operations, communication and logistics for major events of the international student association at ENSA Tétouan.
Feb. – Jul. 2025 AIESEC is a global youth-led organisation that develops leadership through international exchanges. As EP Manager for Outgoing Global Talent, I managed and coordinated international internship programmes and helped students find internships abroad.
Apr. – May 2025 Built a Phishing URL Scanner (Python, Flask, Scikit-learn) classifying URLs in real time, and a Password Strength Checker (Python, Streamlit) with visual feedback and improvement suggestions.
Jan. – May 2025 CoderSphere is a technology club focused on robotics, embedded systems and cybersecurity. I worked in teams on hands-on electronics and hardware design projects and took part in its coding marathons (1st and 3rd place).
Oct. 2023 – Oct. 2024 The AEBM supports Burkinabè students in Morocco with their integration and guidance. As Deputy Secretary General, I handled administrative matters and coordinated community projects.
Realistic attack simulation on your systems to find vulnerabilities before they are exploited.
Full SOC infrastructure deployment (SIEM, SOAR, incident management) to detect and respond to threats in real time.
End-to-end test automation (Playwright) integrated into CI/CD, regression campaigns and application security audits, with clear and prioritised reports.
Modern, responsive and animated web interfaces, from mockup to deployment, with a strong focus on UX quality.
Full-featured desktop applications for client management, reservations or business workflows, connected to a database.
Design of intelligent embedded systems: data acquisition, automation and IoT/cloud connectivity.
Deployment and hardening of cloud infrastructures with active intrusion detection and prevention systems.
ML models for classification, anomaly detection and predictive analytics, applied to real-world problems.
Full SOC infrastructure (Wazuh, TheHive 5, Shuffle SOAR) on OCI monitoring a simulated IT/OT industrial environment. 15 detection rules, automated SOAR workflow (detect → block IP → TheHive incident).
Alumni network platform of my high school, in production since July 2026 (220+ members, 18 countries): directory with controlled visibility, networking, opportunities board, push notifications and two-factor authentication. As volunteer lead developer, I design and lead the project; the code is developed with AI assistance.
First national student cybersecurity competition in Morocco, organised by the DGSSI (3,000+ students, 194 institutions). I took part with an ENSA Tétouan team in the CTF, Cyber Drill and Capture-The-Evidence challenges.
Suricata 8.0.4 deployment on Azure with custom VNet segmentation and NSG rules. 50,000+ active signatures and 4 custom detection rules for intrusion prevention.
End-to-end IoT solution combining ESP32 sensors, Random Forest ML, and a real-time web dashboard for early forest fire detection.
Embedded system with ESP32 and AI algorithms that automatically adjusts solar panel orientation to maximize energy production.
Database management app for medical practices: patient records, appointments, billing, role-based access control and SHA-256 password hashing.
FPGA-based parking management with automated barrier control, real-time occupancy display, and FSM logic written in VHDL.
React app to track job applications, with an analytics dashboard, advanced search and filters, and JSON import/export.
Two security tools built during internship: a Phishing URL Scanner with ML classification and a Password Strength Checker following OWASP standards.
Desktop app for managing clients, reservations, itineraries, and payments, with admin dashboard and WhatsApp integration.
Built from scratch in vanilla HTML, CSS and JavaScript, with no framework: dark and light themes, canvas animations and a fully responsive layout.
Hands-on Arduino and electronics projects in the O'dace club: components, circuits, and applied embedded systems theory.
Two timed front-end coding challenges. Won Marathon 1 by delivering a complete website in 5 hours. Placed 3rd in Marathon 2.
Academic projects from the engineering cycle at ENSA Tétouan combining cybersecurity and embedded systems across various modules.
Team social project: renovated an orphanage study room, organized tutoring sessions, and raised 6,500 MAD in community funding.
Full-stack industrial cybersecurity simulation: a Red Team executes multi-phase attacks on a multi-VM environment simulating an industrial plant (IT + OT), while a Blue Team SOC built on Oracle Cloud Infrastructure (Wazuh, TheHive 5, Shuffle SOAR) monitors, detects and auto-responds in real time.
Simulation complète de cybersécurité industrielle : une Red Team mène des attaques en plusieurs phases sur un environnement multi-VM simulant une usine (IT + OT), tandis qu’un SOC Blue Team déployé sur Oracle Cloud Infrastructure (Wazuh, TheHive 5, Shuffle SOAR) surveille, détecte et répond automatiquement en temps réel.
Alumni network platform of the Lycée Scientifique National de Ouagadougou (Burkina Faso), my high school. In production since July 2026, it is used by 220+ alumni across 18 countries and 9 graduating classes, mostly on mobile. I am its lead developer, on a volunteer basis, within the IT committee of my class: I design the product, lead every technical decision and test it on real devices. The code is developed with AI assistance.
Plateforme du réseau des anciens élèves du Lycée Scientifique National de Ouagadougou (Burkina Faso), mon lycée. En production depuis juillet 2026, elle est utilisée par plus de 220 anciens élèves répartis dans 18 pays et issus de 9 promotions, principalement sur mobile. J’en suis le développeur principal, à titre bénévole, au sein du comité informatique de ma promotion : je conçois le produit, je pilote toutes les décisions techniques et je teste l’application sur des appareils réels. Le code est développé avec l’assistance de l’IA.
First edition of Morocco's national student cybersecurity competition, organised by the DGSSI (Directorate-General for Information Systems Security) with SecDojo, from February to April 2026. It brought together 3,018 students from 194 institutions across the 12 regions of the country. I took part with a team from ENSA Tétouan.
Première édition de la compétition nationale de cybersécurité des étudiants au Maroc, organisée par la DGSSI (Direction générale de la sécurité des systèmes d’information) avec SecDojo, de février à avril 2026. Elle a réuni 3 018 étudiants issus de 194 établissements répartis dans les 12 régions du pays. J’y ai participé avec une équipe de l’ENSA Tétouan.
Cloud-native intrusion detection and prevention system deployed on Microsoft Azure. Suricata 8.0.4 runs as an inline IPS engine within a custom VNet architecture, combining 50,000+ community signatures with 4 purpose-built detection rules for targeted threat coverage.
Système de détection et de prévention d’intrusions cloud-native déployé sur Microsoft Azure. Suricata 8.0.4 fonctionne comme moteur IPS en ligne au sein d’une architecture VNet personnalisée, en combinant plus de 50 000 signatures communautaires et 4 règles de détection conçues sur mesure pour couvrir des menaces ciblées.
End-to-end IoT solution for early forest fire detection. ESP32 sensor nodes collect environmental data and publish via MQTT to a Python backend running a Random Forest classifier, with a real-time Flask web dashboard for monitoring and alerts.
Solution IoT de bout en bout pour la détection précoce des feux de forêt. Des nœuds capteurs ESP32 collectent les données environnementales et les publient via MQTT vers un backend Python qui exécute un classifieur Random Forest, avec un tableau de bord web Flask en temps réel pour la surveillance et les alertes.
Intelligent embedded system that automatically adjusts solar panel orientation using AI inference on an ESP32. A Flutter mobile app provides remote monitoring via Firebase, with live performance graphs and power analytics.
Système embarqué intelligent qui ajuste automatiquement l’orientation d’un panneau solaire grâce à une inférence IA sur ESP32. Une application mobile Flutter assure la supervision à distance via Firebase, avec des graphiques de performance en direct et des analyses de puissance.
Multi-role desktop application for healthcare facilities. Manages patient records, appointments, prescriptions, and billing with SHA-256 authentication and role-based access control for admins, doctors, and receptionists.
Application de bureau multi-rôles pour les établissements de santé. Elle gère les dossiers patients, les rendez-vous, les ordonnances et la facturation, avec une authentification SHA-256 et un contrôle d’accès basé sur les rôles pour les administrateurs, les médecins et les réceptionnistes.
FPGA-based parking management system implementing a hierarchical Finite State Machine in VHDL at 50 MHz. Controls entry/exit barriers, tracks real-time slot availability across multiple zones, and drives a 7-segment display panel for live occupancy readout.
Système de gestion de parking sur FPGA, fondé sur une machine à états finis hiérarchique en VHDL à 50 MHz. Il commande les barrières d’entrée et de sortie, suit en temps réel la disponibilité des places dans plusieurs zones et pilote un afficheur 7 segments indiquant l’occupation en direct.
Single-page React application for managing job applications through their full lifecycle, from application sent to offer received or rejected, with an integrated analytics dashboard and data persistence via local storage.
Application React monopage pour gérer les candidatures tout au long de leur cycle de vie (de l’envoi de la candidature jusqu’à l’offre reçue ou au refus), avec un tableau de bord analytique intégré et une persistance des données via le stockage local.
Two cybersecurity tools developed during a Brainwave Matrix internship. A Phishing URL Scanner using a Scikit-learn ML classifier exposed as a Flask API, and a Password Strength Checker with real-time OWASP feedback built with Streamlit.
Deux outils de cybersécurité développés lors d’un stage chez Brainwave Matrix. Un scanner d’URL de phishing reposant sur un classifieur ML Scikit-learn exposé via une API Flask, et un vérificateur de robustesse des mots de passe avec retour OWASP en temps réel, développé avec Streamlit.
Feature-rich JavaFX desktop application for travel agency operations. Manages clients, reservations, itineraries, and payments, with an admin statistics dashboard, printable invoices, and WhatsApp integration for automated booking confirmations.
Application de bureau JavaFX complète pour la gestion d’une agence de voyages. Elle gère les clients, les réservations, les itinéraires et les paiements, avec un tableau de bord statistique pour l’administrateur, des factures imprimables et une intégration WhatsApp pour l’envoi automatique des confirmations de réservation.
Built from scratch without any framework, this portfolio features a time-based dark/light theme, matrix canvas background animation, scroll-progress bar, fixed side navigation, and a Formspree-powered contact form.
Développé de zéro sans aucun framework, ce portfolio propose un thème sombre/clair selon l’heure, une animation Matrix en arrière-plan sur canvas, une barre de progression du défilement, une navigation latérale fixe et un formulaire de contact propulsé par Formspree.
Hands-on electronics and embedded programming projects in the O'dace engineering club at ENSA Tétouan. Applied theoretical knowledge to real hardware: oscillators, sensor interfaces, motor drivers, and IoT prototype boards.
Projets pratiques d’électronique et de programmation embarquée au sein du club d’ingénierie O'dace de l’ENSA Tétouan. Mise en application des connaissances théoriques sur du matériel réel : oscillateurs, interfaces de capteurs, commandes de moteurs et cartes prototypes IoT.
Two competitive front-end coding challenges organized by the CoderSphere club at ENSA Tétouan. Marathon 1: delivered a complete website from a Canva design in under 5 hours and won the challenge. Marathon 2: coded a personal portfolio from scratch and placed 3rd.
Deux défis de programmation front-end en compétition, organisés par le club CoderSphere de l’ENSA Tétouan. Marathon 1 : réalisation d’un site web complet à partir d’une maquette Canva en moins de 5 heures (défi remporté). Marathon 2 : développement d’un portfolio personnel de zéro (3e place).
Academic projects from the engineering cycle at ENSA Tétouan, spanning cybersecurity and embedded systems. The practical backbone of the engineering curriculum: network analysis, microcontroller programming, RTOS experiments, and hardware-software co-design.
Projets académiques du cycle ingénieur à l’ENSA Tétouan, couvrant la cybersécurité et les systèmes embarqués. Ils constituent le socle pratique de la formation d’ingénieur : analyse réseau, programmation de microcontrôleurs, expérimentations RTOS et co-conception matériel-logiciel.
Community social project completed during the preparatory cycle at ENSA Tétouan. In a team of five, we renovated an orphanage study room, organized regular tutoring and meal-sharing events, and raised approximately 6,500 MAD through local fundraising and business partnerships.
Projet social et communautaire réalisé pendant le cycle préparatoire à l’ENSA Tétouan. En équipe de cinq, nous avons rénové la salle d’étude d’un orphelinat, organisé régulièrement des séances de soutien scolaire et des repas partagés, et collecté environ 6 500 MAD grâce à des collectes de fonds locales et à des partenariats avec des entreprises.
