Zakaria Amazzal

Cybersecurity and DevSecOps engineer with over 4 years of experience protecting cloud, application and containerized production environments across the energy, industrial and consulting sectors. Embeds security into CI/CD pipelines, runs enterprise-wide vulnerability management, and deploys SIEM platforms that give operations teams real detection and response capability. Delivered a 70% reduction in vulnerabilities, assessments across 50+ applications, and identification of 30+ critical CVEs.

Senior Cybersecurity Engineer - Leyton

(2024-08)

International consulting group — corporate security team

• Lead vulnerability assessments across 50+ business applications using SonarQube and GitHub Advanced Security, triaging findings so engineering teams remediate the highest risks first.
• Run dynamic application security testing with Burp Suite Pro and OWASP ZAP to confirm which weaknesses are genuinely exploitable, eliminating false positives before they reach developers.
• Deployed and administer the company's Wazuh + ELK SIEM platform, including custom detection rules and dashboards that give security and IT operations shared incident visibility.
• Handle security incidents end to end — detection, investigation, containment and reporting — and deliver phishing simulation and awareness programs reaching 200+ employees.

Cybersecurity / DevSecOps Engineer - OHM Énergie

(2023-09 - 2024-05)

• Audited production cloud environments across Docker, Kubernetes, AWS and GCP, identifying 30+ critical CVEs and driving them to remediation with platform teams.
• Embedded automated SAST and DAST gates into GitLab CI and Jenkins pipelines, contributing to a 70% reduction in vulnerabilities reaching production.
• Centralized security monitoring on Prometheus, Grafana and Elasticsearch, giving the team unified alerting across previously siloed services.
• Secured a microservices architecture including Knative and Kafka workloads, and eliminated hard-coded credentials by migrating secrets to HashiCorp Vault.

Security Engineer - RIBATIS

(2023-02 - 2023-09)

• Designed and implemented a secure CI/CD architecture with automated security testing built into every build, and containerized legacy applications following Docker security best practices.
• Conducted web application penetration tests using OWASP methodology and delivered prioritized remediation reports.

R&D Cybersecurity Engineer - Secure-IC

(2022-02 - 2023-01)

Embedded systems security — hardware and industrial devices

• Researched vulnerabilities in embedded Linux systems and industrial device firmware, feeding findings into internal security improvement work.
• Built Python and Bash tooling for network traffic analysis and automated security testing, and ran internal penetration tests to support remediation planning.

Master's Degree - Telecommunications and Networks - École Nationale des Sciences Appliquées (ENSA) (2019 - 2021)