Youssef Jedidi

Design and Implementation of a Vulnerability Operations Center (VOC) : - Built a fully automated VOC covering ~80% of the vulnerability management lifecycle, eliminating manual handoffs across pipeline stages. - Designed a custom risk scoring engine with exploitability-aware prioritization, cutting the critical vulnerability backlog by ~40%. - Automated multi-source CTI enrichment and AI-assisted host-level remediation planning, cutting analyst triage time from hours to minutes. - Delivered a role-based React dashboard with real-time posture visibility, scan control, and exportable reports for analysts and asset owners.

• Implemented a multi-server architecture with 2 Zimbra mail servers, a FortiMail gateway, a DNS server, and a dedicated application server. • Deployed and configured Wazuh SIEM with supporting integrations to centralize log analysis and improve threat visibility. • Automated email threat analysis by integrating anti-spam, antivirus, and auto-ban mechanisms through log-based detection.

• Implemented CI/CD with Jenkins on AWS using a 3-machine setup (EC2 Master, EC2 Agent) and a serverless alternative with Fargate. • Automated infrastructure provisioning with Terraform for scalable, efficient deployments using IaC, managing 15+ instances. • Leveraged AWS services to improve infrastructure and resource utilization, reducing costs by nearly 25% savings across environments.

• Managed databases (100+ users) and client-deployed HR applications to maintain operational continuity and meet client requirements.

• Integrated a 7-step OWASP methodology for IoT security , combining runtime and firmware analysis to identify weaknesses. • Performed IoT firmware penetration testing in IoT Goat with advanced analysis tools, correlating OWASP IoT Top 10 vulnerabilities with CVEs. • Enforced ANSSI recommendations to strengthen IoT equipment security and mitigate risks from emerging cyberattacks.

• Acquired hands-on experience with telecommunications concepts, strengthening proficiency on the Ericsson 5G Router 6675. • Conducted an in-depth exploration of telecommunication equipment integration techniques for reliable system deployment.

• Developed a B2B web application streamlining interactions and workflows with role-based interfaces for admin and employee management. • Built the admin interface with integrated historical summary views to facilitate daily supervision and coordination among employees. • Simulated and tested multiple network architectures in GNS3 to build hands-on experience with network simulation and configuration.

• Provided IT maintenance support, focusing on troubleshooting and configuring system setups as part of an initiation internship.