Purple Team
Adversary emulation, attack simulation, detection validation, MITRE ATT&CK mapping and security automation.
CalderaWazuhATT&CK
Open to cybersecurity opportunities
CYBERSECURITY ENGINEER // TUNISIA
Security engineering across attack, detection & defense.
I build and operate security solutions across Purple Team operations, SOC & detection, penetration testing, information security and automation — turning technical findings into measurable defensive outcomes.
Cybersecurity Engineer
Purple Team
SOC & Detection
Penetration Testing
Information Security
40%faster detection validation
60%faster security assessment
10K+profiles analyzed in ML project
~/v3nzo/security
$ whoami
yosri@cybersecurity
$ cat focus.txt
purple-team
soc-detection
penetration-testing
information-security
security-automation
$ ./build-security.sh
[OK] simulate → detect → validate → improve
[INFO] engineering mindset, offensive depth, defensive context
$_
01 / ABOUT
More than one security lane.
I’m an Informatics Engineer specialized in Cybersecurity with hands-on experience spanning offensive security, defensive monitoring, security engineering and automation.
My strongest advantage is the ability to understand both sides of the security problem: how an attack is executed, how it should be detected, and how to turn that gap into an actionable engineering problem.
EducationNational Engineering Degree in Computer ScienceTEK-UP University · Cybersecurity specialization
ApproachBuild · Attack · Detect · ValidateSecurity engineering with measurable outcomes
02 / CAPABILITIES
Where I can contribute.
Designed to map directly to the roles I target — without boxing me into a single security specialty.
SOC & Detection
SIEM workflows, alert analysis, IOC investigation, log analysis, threat detection and incident-response thinking.
SIEMOpenSearchSplunk
Penetration Testing
Reconnaissance, vulnerability assessment and offensive testing across web, network and infrastructure environments.
NmapMetasploitBurp Suite
Information Security
Security monitoring, hardening, risk-oriented thinking, secure deployments and practical security controls.
HardeningRiskControls
DevSecOps & Automation
Container security, CI/CD controls, IaC and security workflows that replace repetitive manual work with repeatable pipelines.
DockerTerraformJenkins
AI for Security
LLM-assisted orchestration, response parsing, rule generation and decision support applied to real security workflows.
LLMFastAPIPython
03 / SELECTED WORK
Projects that show how I think.
FLAGSHIP PROJECT2026
PurpleOrchestra
AI-orchestrated Purple Team platform
Built a unified security platform connecting Wazuh SIEM, MITRE Caldera and Kali Linux to automate attack campaigns, detection validation and security reporting.
40%reduction in detection-validation time through campaign orchestration, ATT&CK mapping, rule validation and KPI reporting.
Source code is private. A demo can be requested for a technical walkthrough.
SECURITY WORKFLOWLIVE MODEL
AttackCaldera / Kali
→
DetectWazuh / OpenSearch
→
ValidateATT&CK / Rules
SECURITY APPLICATION2025
Automated Docker Security Analysis
Built a platform that scans container images, generates CycloneDX SBOMs and automates security checks across registries.
60%faster security assessment
Designed during my TWEEDO application-security internship.
MACHINE LEARNING2025
Twitter Bot Guardian
Machine-learning pipeline for identifying automated and suspicious account behavior, backed by a Streamlit analysis dashboard.
85%+accuracy on 10K+ profiles
Built to explore behavioral detection, classification and security analytics.
04 / JOURNEY
Engineering background.
Security specialization.
2026
Engineering Degree in Computer Science
TEK-UP University · Cybersecurity specialization
National Engineering Degree2025–2026
Purple Team Engineering
Eyacom · Built PurpleOrchestra during the final-year project.
2025
Application Security & DevSecOps
TWEEDO · Automated Docker security analysis and CI/CD security workflows.
2025
eLearnSecurity Junior Penetration Tester
INE / eLearnSecurity · Certified
2019–2021
Integrated Preparatory Cycle in Computer Science
ESPRIT University
05 / CONTACT
Let's solve a security problem.
Hiring for a cybersecurity engineering, SOC, penetration testing or information-security role? I’d be glad to talk about the problems your team is trying to solve.