Fares Moalla

I worked on the development of a Risk Assessment and and Third-Party Risk Management application to enhance Governance, Risk, and Compliance (GRC) capabilities - Backend Development: Built RESTful APIs with Spring Boot for user and project management, risk assessments, and PostgreSQL integration - Frontend Development: Designed a modular Angular application with dynamic forms and user-friendly components - Security Implementation: Implemented JWT-based authentication and role-based access control with Spring Security to ensure secure access - Access Management and User Security: Designed and implemented a robust RoleBased Access Control (RBAC) system with dynamic sidebar visibility based on user roles, and strengthened account security by integrating Multi-Factor Authentication (MFA) using email verification and time-based tokens (TOTP) - CI/CD and DevSecOps: Automated testing and deployment with GitHub Actions, Docker, and Docker Compose, ensuring alignment with DevSecOps principles - Monitoring and Logging: Integrated SonarQube for code quality monitoring and configured Google Cloud monitoring tools to track application performance - Reporting: Integrated iTextPDF for generating customizable risk assessment reports and a comprehensive risk registry - Functional Analysis: Conducted detailed requirements gathering through stakeholder interviews and analysis of compliance standards. Created and maintained functional documentation using UML diagrams and Mermaid for visualizing workflows, processes, and data flows. Defined user journeys, wrote detailed user stories - Application Security & Vulnerability Management: Conducted vulnerability scanning and monitoring using ZAP (OWASP), Nessus, SonarQube, and SAST/DAST tools. Analyzed and qualified scan results, coordinated with technical teams for patching

Horizon 42 - Full-stack Developer I worked on the migration of a Vulnerability Management and Dashboarding solution to improve performance and maintainability - Backend Migration: Led the migration from Java 11 to Java 21, refactoring and modernizing legacy code to leverage new language features and improve system performance - Frontend Update: Migrated the frontend from Angular 8 to Angular 19, ensuring compatibility with updated technologies and improving overall user experience, resolved compatibility issues and optimized component performance - Role-Based Access Control: Implemented a flexible Role-Based Access Control (RBAC) system to manage user permissions and dynamically control access to application features and sidebar components based on assigned roles - Dashboard Optimization: Maintained and optimized dynamic dashboards for visualizing key vulnerability metrics, enhancing users ability to monitor and address security risks effectively - Compliance & Standards Alignment: Ensured alignment with internal security policies and working closely with the team to improve procedures (vulnerability management) - CI/CD Implementation: Designed and maintained CI/CD pipelines using Docker and GitHub Actions to automate build, testing, and deployment processes, ensuring rapid and reliable delivery of updates - Monitoring Setup: Configured monitoring tools to track application performance and detect potential issues proactively in production environments

Ubidata sa/nv - Full-stack Developer Development and modernization of the Ubidocs platform, including the implementation of a monorepository architecture and the establishment of a CI/CD pipeline to enhance digital waste traceability and document management