Portfolio ↗ / LinkedIn ↗ / Email ↗
I'm a final-year Computer Science & Networks engineering student at EMSI Tanger, moving toward security governance and risk with a SOC background. I have built detection pipelines and investigated endpoint and network telemetry; I now use that ground-level view to write risk scenarios that match how attacks actually unfold, to judge whether a control really works, and to ask for evidence a SOC can produce. My governance work so far is project work, not yet professional experience.
On the governance side I worked a complete ISMS dossier of a fictional water utility: context, scope, risk assessment, statement of applicability, internal audit programme and management review, with catalogues I wrote for Moroccan Law 05-20 and Law 09-08. The limits of the exercise are stated on the page.
I publish monthly threat intelligence reports covering incidents, detection implications, and ATT&CK techniques, with cited sources and evidence grading.
Governance & risk ISO/IEC 27001 · ISO/IEC 27005 · NIST SP 800-30 · GDPR · Moroccan Law 05-20 and 09-08
Detection Wazuh · Splunk · Sigma · Sysmon · MITRE ATT&CK
Investigation Wireshark · Zeek · REMnux · NetworkMiner
Engineering Python · Linux · Docker · n8n · Git
Background, experience & languages
Computer Science & Networks Engineering · EMSI Tanger · 2022–present
Final-year student. Started in defensive security, network monitoring and incident response; now oriented toward security governance, risk and compliance.
SOC Analyst Intern — AI-Augmented Security Pipeline (PFA) · Amendis Tanger, Groupe Veolia · July–August 2026
Designed and deployed an end-to-end SOC pipeline — Wazuh → Shuffle → local Gemma2 (Ollama) → TheHive → Cortex → MISP — in an isolated lab. Raised MITRE ATT&CK mapping completeness from 40% to 100% on a 25-alert evaluation set, validated six controlled attack scenarios, and kept routing deterministic with AI output advisory only. Case study ↗
Cybersecurity Awareness Intern · Amendis Tanger, Groupe Veolia · July–August 2025
First hands-on exposure to enterprise security within the cybersecurity department: analysed SCADA exposure in water and electricity networks, explored the Riot awareness platform, took part in a phishing simulation (click-through fell from 25% to 5% after training), and studied GLPI in an OT context.
Languages: Arabic — native · French — advanced · English — advanced.
Looking for a final-year internship (PFE) from February 2027 in security governance, risk and compliance, in Morocco or remotely. A role that keeps a link with SOC operations suits me well.
omarbabba27@gmail.com · LinkedIn · omarbabba.co