Amal Sayari

• Designed AI-driven cybersecurity solutions focused on cyber risk assessment, predictive analytics, and threat intelligence automation. • Built predictive models to identify vulnerability co-exploitation scenarios and support remediation prioritization using graph analytics, machine learning, and Neo4j knowledge graphs. • Designed and implemented multi-source web scraping pipelines to automatically collect CTI reports, cybersecurity news, and threat data from heterogeneous online sources using Requests, BeautifulSoup, Playwright, and automation frameworks. • Engineered Cyber Threat Intelligence (CTI) automation pipelines for data collection, processing, and enrichment from multiple open sources. • Developed cybersecurity NLP solutions using SecBERT, BiLSTM-CRF, and NER models to extract threat actors, malware, CVEs, IOCs, and mitigation data. • Built MITRE ATT&CK classification engines to automatically map CTI reports to tactics and techniques. • Led technical architecture documentation, model optimization, and data quality improvements. • Tech stack: Python, Neo4j, Machine Learning, Deep Learning, NLP, SecBERT, STIX 2.1, MITRE ATT&CK, Git, SonarQube, Scaleway.

• Provided strategic and technical supervision for final-year engineering projects in Cybersecurity and Artificial Intelligence. • Defined project scopes, guided implementation phases, reviewed deliverables, and ensured alignment with industry standards. • Supported the industrialization and integration of project outcomes into real-world application environments. • Supervised AI-driven CTI projects focused on automated mapping of threat intelligence reports to MITRE ATT&CK techniques using DistilBERT multi-label classification models. • Mentored cybersecurity deception projects involving personalized honeytoken recommendations based on attacker profiles using MITRE Engage and D3FEND. • Guided advanced research projects on adaptive cyber deception using Multi-Agent Reinforcement Learning (MARL), game theory, and Proximal Policy Optimization for attack-defense optimization. • Promoted best practices in AI model evaluation, and technical documentation.

- Supervision of tutored projects for both Professional Master's and Engineering students (135h). - Projects: - Cyber-attack scenario generation for critical infrastructures using CICAT and MITRE ATT&CK-aligned simulations. - Deep Packet Inspection (DPI) and Network Traffic Analysis (NTA) using IDS/IPS solutions and signature automation. - Vulnerability Management & Remediation integrating Vulcan, Qualys, Action1, and REST APIs. - Security Audit & Certification of SOAR platforms including static/dynamic testing and ISO 27001 alignment. - IOC Management with attack classification, TTP enrichment, and OpenCTI / IntelOwl integration. - Attack pattern extraction from CTI reports using NLP, NER, STIX conversion, and knowledge graphs. - User Behavior Analytics (UBA) and SIEM integration using machine learning models and ELK stack. - Active Directory threat monitoring using Splunk, Sysmon, dashboards, and detection of Pass-the-Hash / privilege escalation attacks. - Real-time SOC threat detection and response automation using Wazuh, TheHive, and Cortex.

- Teaching course and labs on Security Certification CyberOps for both Professional Master's and Engineering students in English and French (105h) at SUP'COM. - Teaching course and labs on Intrusion Detection and Alert Correlation for Engineering students in English and French (21h) at TEK-UP.