— Study and implement SSDLC and DevSecOps methodologies.— Develop security checklists based on NIST guidelines for each phase of the SSDLC.— Configure and deploy a DevSecOps pipeline using Jenkins, GitLab CI/CD, integrating security tools such as SAST/DAST, SCA, and DefectDojo for vulnerability management.— Conduct automated and manual Pentesting , analyze results, and implement corrective measures .

Helping and realizing Cybersecurity and Network projects .

During my internship at Cyberforces , we developed an automation tool for penetration testing. The tool encompassed functionalities such as :-Technologies Detection and WordPress Scan -Google Dorking, Subdomain Enumeration -Endpoints Enumeration -SQL Injection (SQLi) Testing-Security Headers Analysis-DNS Enumeration and Open Ports Scan, and Service Scan (FTP, SMB, Telnet). This experience enabled me to enhance my skills in penetration testing and cybersecurity automation.

the implementation of openvpn on the network of the national school of applied sciences Fez.A virtual private network (Virtual Private Network) VPN is one of the terms related to security because of its work as a service allows information to be exchanged in a secure and anonymous way.In this work we tried to define the VPN, to present its logic, and its application , on the other hand we have configured an OpenVPN server in a linux machine ,We also configured client machines for test purpose with different operating systems.