Available now for an alternance · 6-month internship from March 2027 · mobile across France
I secure systems.
I ship them too.
Mouaad Sekkouri. M2 Cybersecurity at SUPINFO Lille, heading for Cloud Security and DevSecOps. Four years in IT, 19 projects with code or reports and 28 more labs, from Kubernetes admission control to a product live in production.
- name
- Mouaad Sekkouri
- role
- Cloud Security / DevSecOps
- base
- Lille, mobile across France
- langs
- FR, EN (C1), AR, DE (A2)
- stack
- K8s, Azure, GitLab CI, Next.js
- certs
- AZ-900
Break it. Harden it. Ship it.
Most security students only have labs. I also build and run real products, so I know what securing them costs the team that ships.
Selected work, written like incident reports.
Travistello
Travel gear research platform where every score shows its evidence. 28 products, 6 comparison sets, live in production.
Supply chain security on Kubernetes
A pipeline that blocks critical CVEs before push, and a cluster that refuses unapproved registries, latest tags and root pods.
JobPilot
A personal job search engine: collects offers from 8 source types, removes cross-source duplicates, scores them and tailors CVs.
L'Adress restaurant website
Website for a Lille bistro: menu, gallery, events, online reservations and quote requests, with a protected admin.
Canritco infrastructure audit
Asset inventory scored on CIA, exposure mapping, 621 CIS checks, top 10 risks and a 90-day remediation roadmap.
NetSecure Corp network audit
PCAP forensics, an 8-step attack chain mapped to MITRE ATT&CK, then a segmented redesign with 802.1X, nftables and Suricata.
Projects with proof
| ID | PROJECT | TRACK | STACK | PROOF |
|---|---|---|---|---|
| P-01 | TravistelloPersonal product, live in production | Products | Next.js 16, Payload, Postgres, Three.js | Live |
| P-02 | JobPilotPersonal product | Products | Python, FastAPI, SQLite, Playwright | Repo |
| P-03 | L'Adress restaurant websiteBuilt for a Lille bistro | Products | Next.js 15, Supabase, Resend | Repo |
| P-04 | Interview AssistPersonal tool, v1.1 desktop release | Products | Electron, Deepgram, OpenAI | Repo |
| P-05 | Loop & LinenPersonal product, MVP | Products | Next.js, Payload, Postgres | Repo |
| P-06 | Factur-X e-invoicing engineInternship, Baïfall Dream | Products | Python, FastAPI, PostgreSQL, Factur-X | Brief |
| P-07 | CV generation pipelinePersonal tool | Products | Python, Playwright, HTML | Repo |
| P-08 | SUPFile secure cloud storageSchool, team project | Products | Next.js 14, Express, mobile | Repo |
| P-09 | Supply chain security on KubernetesPersonal lab | DevSecOps | Trivy, Safety, OPA Gatekeeper | Repo |
| P-10 | DevSecOps Flask deliveryPersonal lab | DevSecOps | GitLab CI, Kaniko, Kubernetes | Repo |
| P-11 | Multi-environment CI/CD pipelineMini-project | DevSecOps | GitLab CI, Docker, SonarQube | Report |
| P-12 | Fleetman microservices on KubernetesSchool project | Cloud & SRE | Kubernetes, kind, MongoDB | Repo |
| P-13 | MySQL platform automationTechnical exercise, Worldline | Cloud & SRE | Ansible, Terraform, Azure | Repo |
| P-14 | Monitoring and alerting stackMini-project | Cloud & SRE | Prometheus, Grafana, ELK | Report |
| P-15 | Infrastructure as code provisioningMini-project | Cloud & SRE | Terraform, Ansible, Azure | Report |
| P-16 | Canritco infrastructure auditSchool project, team of 2 | Security audit | Nmap, HardeningKitty, Hayabusa | Repo |
| P-17 | NetSecure Corp network auditSchool project | Security audit | 802.1X, nftables, Suricata | Report |
| P-18 | Secuvia infrastructure hardeningSchool project | Security audit | Active Directory, BloodHound | Report |
| P-19 | Secure messaging with a private CASchool project | Security audit | OpenSSL, PKI, Bash | Report |
Live: public URL · Repo: code on GitHub (some private, shown on request) · Report: written deliverable · Brief: internship work, sanitized
All 47 projects on one network map
The 19 projects above, plus 28 labs and coursework, wired by the infrastructure they share: one Kubernetes cluster, one Azure tenant, one AD domain, one detection stack.
Open the lab mapWhat I work with
Solid: used in the projects above. Dashed: practiced in labs, school modules and mini-projects.
Skill graph: which tool powers which project
hover or pick a tool, click a project to open itCloud & containers
- Kubernetes
- Docker
- Azure
- Terraform
- Ansible
- kind
- Labs: Azure Sentinel
- Labs: KQL
- Labs: Defender for Cloud
- Labs: Entra ID
DevSecOps
- GitLab CI
- Trivy
- Safety
- OPA Gatekeeper
- Kaniko
- SonarQube
- Labs: Semgrep
- Labs: Bandit
- Labs: OWASP ZAP
Offensive & audit
- Nmap
- HardeningKitty
- Hayabusa
- Suricata
- Wireshark
- BloodHound
- Labs: Burp Suite
- Labs: PingCastle
- Labs: Metasploit
- Labs: Wazuh
- Labs: Sigma
GRC
- CIA asset inventory
- Risk register
- Remediation roadmap
- MITRE ATT&CK
- Labs: EBIOS RM
- Labs: ISO 27001
- Labs: NIS2
- Labs: CIS Benchmarks
Build
- Python
- TypeScript
- Next.js
- React
- PostgreSQL
- FastAPI
- Electron
- Playwright
- Labs: Flask
- Labs: Node.js
- Labs: Selenium
- Labs: Postman
Languages & certification
- FrenchBilingual
- EnglishC1
- ArabicNative
- GermanA2
- Microsoft AZ-900, Azure FundamentalsMarch 2026
From the support desk to the security stack.
I started in software QA, testing products before they reached users. Then two years on the front line at Concentrix, troubleshooting network security issues for Netgear customers at scale. Now a master's in cybersecurity, and an internship building an e-invoicing platform.
That path gave me something most juniors lack: I know how systems break in production, and how people actually use them. Trilingual, based in Lille and mobile across France, also open to Belgium.
SITE SECURITYThis site is hardened tooStrict CSP, 7 security headers, zero trackers, zero third-party requests, static output.See how it is built →- Jul 2026 · Sep 2026Baïfall DreamInternship, ParisWrote the spec for a B2B e-invoicing platform (95 requirements) and built its Factur-X engine: multi-tenant isolation with PostgreSQL RLS, Argon2id, 950+ tests, validated by FNFE with 0 errors.
- 2025 · nowSUPINFO LilleProgramme Grande École, M2 CybersecurityM1 completed 2025-2026. AZ-900 obtained March 2026.
- Jan 2024 · Dec 2025ConcentrixIT support technician, Netgear1500+ network and security incidents, 85% first contact resolution, 40+ procedures written, resolution time cut by 20%.
- May 2023 · Jan 2024LionbridgeSoftware QA tester200,000+ localized strings validated with an error rate under 0.5% over 8 months.
- Jan 2022 · May 2023TestronicSoftware QA tester1,500+ web and mobile test cases run, 90+ critical defects caught before production.
- 2021 · 2024Vistula UniversityBachelor in Computer EngineeringWarsaw, Poland.
Need it secured, or built?
Security audit
Workstation, network or web app review against CIS and OWASP, with every finding backed by evidence and a prioritized fix plan.
See an example audit →CI/CD and container hardening
Image and dependency scanning, secret hygiene and Kubernetes admission policies, added to your pipeline without slowing the team down.
See the pipeline →Websites and web apps
Fast, secure-by-default sites and internal tools for small businesses: reservations, forms, admin area, all with proper validation and access control.
See a client site →Let's open a ticket.
Hiring an alternant now, an intern for 6 months from March 2027, or need help on a project? I am mobile across France and reply within 24 hours.
Recruiter? Paste your job offer and see the fit in 5 seconds →