Omar Babba

Amendis (Veolia group), Tangier – Cybersecurity Department

• Designed and deployed an end-to-end SOC pipeline: Wazuh alert, Shuffle orchestration, local LLM triage, TheHive case creation, Cortex and MISP enrichment.
• Raised MITRE ATT&CK mapping completeness from 40% to 100% on a set of 25 alerts, using a prompt that enforces a strict JSON format.
• Validated 6 controlled attack scenarios (SSH brute force, encoded PowerShell, lateral movement, C2 beaconing…) and routed alerts deterministically by severity, with the AI kept advisory.
• Ensured traceability (RUN_ID, SHA-256) and quality: 75 automated tests with CI.

Amendis (Veolia group), Tangier – Cybersecurity Department

• Analysed the exposure of SCADA systems in the water and electricity networks; observed a real phishing simulation campaign (click rate down from 25% to 5% after awareness training).
• Mapped the main attacks (phishing, malware, DoS/DDoS, SQL injection) and studied information security fundamentals (confidentiality, integrity, availability, ISO 27001).
• Explored the Riot awareness platform used by Amendis and Veolia (training, phishing simulations, email reporting, data leak analysis).

ISO 27001, ISO 27005, NIS2, DORA

• Designed a governance tool (TypeScript) linking obligation, control, evidence, risk and signed decision; tested it on a complete fictional ISMS: scope, policy, internal audit, management review (20 of 21 clauses met).
• Assessed risks per ISO 27005: 8 valued assets, 15 scenarios, 11 above risk appetite with a treatment plan; segregation of duties enforced by the tool (a risk owner cannot accept their own risk).
• Wrote catalogues of Laws 05-20 and 09-08 article by article; mapped 13 frameworks (ISO 27001, NIS2, DORA, AI Act, GDPR…) through 56 controls; wrote a threat model (27 threats). Limitations documented. Public code: github.com/omarbabba779xx/kontrol.

ISO 27001, Law 09-08, DNSSI, EBIOS RM

• Designed a web application (Node.js, SQLite) linking ISO 27001:2022, Law 09-08 (CNDP), DNSSI / Law 05-20, NIST CSF 2.0 and COBIT 2019 through 66 unified controls (100% of requirements covered); 12 policy templates, versioned and accepted by each employee.
• Automated 23 compliance tests: Windows agent (encryption, antivirus, firewall, updates…), Microsoft 365 MFA read through Microsoft Graph, access reviews whose closure files the evidence on the related control.
• Built EBIOS RM risk analysis (5 workshops), an incident register with a DGSSI reporting deadline, the Law 09-08 register and a public Trust Center; tamper-evident log (HMAC-SHA256), 81 end-to-end tests, CI. Code: github.com/omarbabba779xx/amane-grc.

NIST, ISO 27001, GDPR

• 5 playbooks (phishing, malware, compromised account, data breach, DDoS) with severity matrix, decision trees, notification templates and tracking metrics (MTTD, MTTA, MTTC, MTTR); 5 tabletop exercise scenarios written.
• Risk: NIST SP 800-30 and ISO 27005 method (5 × 5 matrix, risk appetite, register, 5 scored scenarios); compliance: GDPR procedure (Art. 33 and 34, 72 h, breach register) and mapping to ISO 27001, NIST CSF, CIS, NIS2 and DORA.

Wazuh, OPNsense, Shuffle, TheHive

• Built a SOC of 12 virtual machines, wrote 29 detection rules, documented 16 scenarios and automated the response: in the lab, attacker blocked 24 s after the alert.

Nmap, Nikto, Nessus

• Assessed a deliberately vulnerable machine (Metasploitable2): 29 open ports, Nessus 69 findings unauthenticated vs. 91 authenticated (10 → 28 critical), proof of concept and prioritised remediation plan.

Engineering degree (5-year programme) – Computer Science and Networks Engineering (IIR), final year

• Final-year courses: cybersecurity audit, cybersecurity risk management (in progress); ethical hacking, digital forensics, cloud security.
• Certifications: Security Monitoring and SIEM Fundamentals – LinkedIn / Hack The Box (2026); Fundamentals of Blockchain Architecture – LearnQuest (2026); Object-Oriented Programming in C++ – EPFL (2025).
• Competition: Holmes CTF 2026 (Hack The Box, Blue Team), as a team: 66th of 5,637 teams, 111/111 challenges, top 1.2% worldwide.