Work
  • Jul 2026 - Aug 2026
    ANCS - tunCERT
    Web Penetration Tester Intern
    • Gouvernorat Tunis, Tunisie ยท Hybrid
    • Black-box penetration testing on target web application.
    • Deployed and isolated the target VM in Host-Only networking.
    • Worked with tools such as Kali Linux, Nmap, Nikto, OWASP ZAP, Burp Suite and SQLmap.
    • Applied PTES and OWASP methodologies in an isolated lab environment.
    • Identified and analyzed the target application vulnerabilities, then documented findings with CVSS scoring.
    • Discovered and exploited critical security flaws including SQL injection in database-driven applications and local privilege escalation on Linux systems.
    • Learned to transition from technical exploitation to formal, professional security documentation and risk communication.
    • Wrote a technical audit report with risk classification and remediation recommendations.
  • Sep 2025 - Current
    Junior Entreprise
    Full Stack Developer & Client Relations
    • Designed and developed a web application for booking motorcycle circuit trips.
    • Gathered client requirements, wrote specifications, and tracked deliverables.
    • Collaborated within a technical team using Agile methodologies.