Mouaad Sekkouri
Cloud Security & DevSecOps · M2 Cybersecurity
Available now for an alternance, or a 6-month internship from March 2027 · Mobile across France
- Lille, mobile in France
- mouaadsekkourii@gmail.com
- mouaadsek.dev
- linkedin.com/in/sekkouri
- github.com/MouaadSek
Profile
Cybersecurity master’s student with four years in IT (QA, then network security support) and a rare mix: I audit and harden systems, and I also ship real products, one of them live in production. I care about security that teams can actually live with: gates in CI, policies in the cluster, evidence behind every finding.
Experience
- Wrote the specification of a B2B e-invoicing platform for the 2026 French reform: benchmark of 3 platforms, 95 requirements.
- Built the Factur-X / UBL engine and data model in Python, FastAPI and PostgreSQL, covered by 950+ automated tests.
- Security by design: multi-tenant isolation with PostgreSQL RLS, Argon2id, revocable server sessions, CSRF, deny-by-default roles.
- Compliance validated by an external body (FNFE): 0 errors on all 3 control levels, after reducing 7 anomalies to 0.
- Triaged and resolved 1,500+ network and security incidents, 85% first contact resolution, L2/L3 escalation under SLA.
- Log analysis and detection of security misconfigurations; wrote 40+ procedures, cut average resolution time by 20%.
- Validated 200,000+ localized strings with an error rate under 0.5% over 8 consecutive months.
- Ran 1,500+ web and mobile test cases in Agile teams, caught 90+ critical defects before production (Jira).
Selected projects case studies on mouaadsek.dev
Travel gear research platform in production: Next.js 16, Payload CMS, Postgres. Opaque redirects, privacy-minimal analytics, evidence-backed scores.
GitLab CI blocks critical CVEs (Trivy, Safety); OPA Gatekeeper denies unapproved registries, latest tags and root pods.
Job search engine in Python: 8 source connectors, cross-source deduplication, scoring, tailored CVs. 2,100+ tests.
CIA asset inventory, Nmap exposure, 621 CIS checks (HardeningKitty), Hayabusa logs, top 10 risks, 90-day plan.
PCAP forensics, 8-step attack chain mapped to MITRE ATT&CK, 12 findings; redesign with 5 VLANs, 802.1X, nftables, Suricata.
Next.js 15 and Supabase: reservations and quotes with Zod validation, rate limiting, 16 RLS policies, CSP.
+ 13 more: DevSecOps Flask delivery (Kaniko, K8s), Fleetman on Kubernetes, Terraform and Ansible on Azure, monitoring stack, AD hardening, private CA messaging, Interview Assist (Electron).