MohamedAmir Trigui

Platform and security engineer with over 3 years designing, deploying, and operating enterprise infrastructure across bare-metal, virtualized, and containerized environments. Hands-on with Kubernetes and Red Hat OpenShift in production, infrastructure-as-code with Terraform, configuration management with Ansible, and CI/CD pipelines with integrated DevSecOps controls (SAST, DAST, container scanning). Strong security foundation across SOC operations, MITRE ATT&CK-based threat hunting on Microsoft Sentinel and Defender XDR, and authorized web, mobile, and Active Directory penetration testing for banking and corporate clients.

Certified OSCP, eMAPT, CRTP, SC-100, SC-200, and AZ-500.

Cybersecurity & Platform Engineer - Next Step - Charguia, Tunisia

(2023-11)

• Triage and investigate daily security alerts on an enterprise XDR platform across multiple client environments, escalating confirmed incidents and tuning detection rules to cut recurring false positives.
• Handle incident response for phishing, malware, and unauthorized-access cases end to end, from triage through containment, eradication, and recovery.
• Built an automated threat-hunting workflow mapped to MITRE ATT&CK, replacing repetitive manual checks with scheduled, repeatable hunts.
• Stood up and now run a full open-source SOC stack, bringing detection, enrichment, threat intelligence, and automated response into one pipeline.
• Wrote Python and Bash scripts to automate repetitive tasks.
• Integrated AI-driven automation into security workflows.
• Run regular vulnerability scans, then prioritize and push remediation of the critical and high-severity findings.
• Wrote and enforced the security policies and system-hardening baselines for our Windows and Linux systems.
• Carry out authorized web, internal-network, and mobile penetration tests for clients, then write up the findings with clear remediation steps.

SOC Analyst (Internship) - Centre de Calcul El Khawarizmi - Manouba, Tunisia

(2023-01 - 2023-07)

• Built a SOC and SOAR lab with Elastic SIEM, Wazuh, TheHive, Cortex, MISP, and Shuffle for orchestration.
• Handled digital forensics with Velociraptor and ran OSINT-based risk assessments.

Cybersecurity (Internship) - Digitalberry - Lac 2, Tunisia

(2022-07 - 2022-08)

• Tested web applications with Burp Suite, found SQL injection and XSS issues, and wrote up the audit reports.
• Ran network forensics with Wireshark, Sguil, and Snort, and set up a VPN with OpenVPN.

Computer Engineering Degree - Cybersecurity Specialization - ESPRIT – École Supérieure Privée d'Ingénierie et de Technologies (2020 - 2023)

Preparatory Cycle - Mathematics & Physics - ESPRIT – École Supérieure Privée d'Ingénierie et de Technologies (2018 - 2020)

Mathematics Baccalaureate (2018 - 2018)