Yassine EL JAKANI

• Contributed to the development of a secure mobile application with a scalable architecture and strong authentication mechanisms. • Designed and implemented backend services exposing secure REST APIs with strict input validation and access-control principles. • Applied DevSecOps practices across the development lifecycle, including security-by-design, secure coding, API hardening, and deployment considerations. • Collaborated on technical choices related to scalability, reliability, and protection of sensitive data.

During my time at Oracle R&D, I got to work alongside talented engineers from different countries and backgrounds, which really shaped how I approach problems. My main focus was making our cloud infrastructure faster, cheaper, and more secure. I rewrote our OCI cleanup scripts in Go, which ended up cutting execution time by 66% and saving the team around $3,600 a month. I also rolled out Prometheus monitoring across 50+ servers, we went from about 40% observability to 95%, which was a game-changer for catching issues early. I also handled some security improvements like integrating SSO for centralized access control.

Designed, deployed, and maintained full-stack decentralized applications (dApps), bridging Web2 and Web3 layers into cohesive, production-ready products. Built and integrated smart contracts with React.js frontends, ensuring security was embedded across the entire development lifecycle through code reviews, testing, and internal audits. Owned the security of critical Web2/Web3 integration points including wallet authentication, key management, and on-chain transaction validation. Actively maintained and iterated on live platforms, ensuring reliability, performance, and continued security posture in production environments.

During my intensive year-end project at Sekera Group, where I led the initiative titled "Red Team Ops Automation: Caldera and Invoke-AtomicRedTeam," we delved into innovative automation techniques within the realm of cybersecurity. Our project focused on the seamless integration of Caldera and its practical application in Red Team Operations. The project successfully demonstrated how automation can significantly improve efficiency and effectiveness in security assessments. This undertaking holds promising implications for the field of cybersecurity, underscoring the transformative potential of automation in enhancing security operations.