Nabyl OUCHINE

-Exploring Offensive Security & Hands-on Learning: During my internship at 𝐆𝐒𝐍𝐀 𝐒𝐨𝐥𝐮𝐭𝐢𝐨𝐧𝐬, I was oriented toward 𝐝𝐞𝐟𝐞𝐧𝐬𝐢𝐯𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲, but to implement my project, I explored the 𝐨𝐟𝐟𝐞𝐧𝐬𝐢𝐯𝐞 𝐬𝐢𝐝𝐞 𝐨𝐟 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲, conducted research, worked on 𝐂𝐓𝐅𝐬, and gained hands-on experience to understand the 𝐩𝐞𝐧𝐞𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐭𝐞𝐬𝐭𝐢𝐧𝐠 𝐥𝐢𝐟𝐞𝐜𝐲𝐜𝐥𝐞. -𝐀𝐈-assisted Penetration Testing Project: Designed and developed a 𝐩𝐫𝐨𝐭𝐨𝐭𝐲𝐩𝐞 integrating 𝐀𝐈 modules (Gemini, DeepSeek) for vulnerability analysis; conducted 𝐫𝐞𝐬𝐞𝐚𝐫𝐜𝐡 & 𝐛𝐞𝐧𝐜𝐡𝐦𝐚𝐫𝐤 of pentesting tools and AI techniques; built 𝐚𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 and automated pipelines with 𝐏𝐲𝐭𝐡𝐨𝐧; tested in a 𝐥𝐚𝐛 environment using 𝐊𝐚𝐥𝐢 𝐋𝐢𝐧𝐮𝐱, 𝐌𝐞𝐭𝐚𝐬𝐩𝐥𝐨𝐢𝐭, 𝐍𝐦𝐚𝐩, 𝐍𝐢𝐤𝐭𝐨, 𝐆𝐨𝐛𝐮𝐬𝐭𝐞𝐫; developed an 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐞𝐝 𝐫𝐞𝐩𝐨𝐫𝐭𝐢𝐧𝐠 𝐬𝐲𝐬𝐭𝐞𝐦 (HTML/PDF) for technical and executive outputs. -𝐂𝐲𝐛𝐞𝐫 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 (𝐂𝐓𝐈): Performed 𝐂𝐓𝐈 analysis & reporting, including alert triage, risk assessment, and actionable recommendations. -𝐏𝐫𝐨𝐣𝐞𝐜𝐭 Leadership: Acted as 𝐩𝐫𝐨𝐣𝐞𝐜𝐭 𝐥𝐞𝐚𝐝 for two weeks, coordinating tasks, supervising deliverables, and managing sprint reviews; ensured smooth 𝐭𝐞𝐚𝐦 collaboration. -𝐃𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧 & Deliverables: Produced professional documentation including 𝐦𝐞𝐞𝐭𝐢𝐧𝐠 𝐦𝐢𝐧𝐮𝐭𝐞𝐬, 𝐭𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐫𝐞𝐩𝐨𝐫𝐭𝐬, 𝐜𝐥𝐢𝐞𝐧𝐭 𝐩𝐫𝐞𝐬𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧𝐬, and internal communications. -𝐂𝐥𝐢𝐞𝐧𝐭 Security Evaluation: Participated in a 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 evaluation session, assessing infrastructure conformity with security standards and providing recommendations. -𝐈𝐒𝐎 27001 Compliance Tasks: Contributed to 𝐈𝐒𝐎 27001 initiatives; developed 𝐩𝐫𝐚𝐜𝐭𝐢𝐜𝐚𝐥 security checklists; assisted in 𝐫𝐢𝐬𝐤 analysis & control assessment aligned with ISO 27001; supported internal audits and documentation.

- Collaborated with a team of interns to design and implement a 𝗪𝗼𝗿𝗸𝗳𝗹𝗼𝘄 𝗳𝗼𝗿 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗘𝗺𝗮𝗶𝗹 𝗙𝗼𝗿𝗲𝗻𝘀𝗶𝗰𝘀 𝗮𝗻𝗱 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀. - Developed modules to process 𝗘𝗠𝗟 𝗙𝗶𝗹𝗲𝘀, including parsing email headers (𝗦𝗣𝗙, 𝗗𝗞𝗜𝗠, 𝗗𝗠𝗔𝗥𝗖), extracting 𝗨𝗥𝗟𝘀 and 𝗔𝘁𝘁𝗮𝗰𝗵𝗺𝗲𝗻𝘁𝘀, and enriching 𝗜𝗢𝗖𝘀 with 𝗩𝗶𝗿𝘂𝘀𝗧𝗼𝘁𝗮𝗹, 𝗦𝗵𝗼𝗱𝗮𝗻, and 𝗔𝗯𝘂𝘀𝗲𝗜𝗣𝗗𝗕. - Applied detection techniques such as 𝗥𝗲𝗴𝗲𝘅, 𝗛𝗲𝘂𝗿𝗶𝘀𝘁𝗶𝗰𝘀, and 𝗟𝗮𝗿𝗴𝗲 𝗟𝗮𝗻𝗴𝘂𝗮𝗴𝗲 𝗠𝗼𝗱𝗲𝗹𝘀 (𝗟𝗟𝗠𝘀) to calculate a 𝗥𝗶𝘀𝗸 𝗦𝗰𝗼𝗿𝗲. - Built a reporting system that generates 𝗖𝗹𝗲𝗮𝗿, 𝗦𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲𝗱, and 𝗔𝗰𝘁𝗶𝗼𝗻𝗮𝗯𝗹𝗲 𝗥𝗲𝗽𝗼𝗿𝘁𝘀, helping security teams 𝗔𝗰𝗰𝗲𝗹𝗲𝗿𝗮𝘁𝗲 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀 and improve the 𝗗𝗲𝗽𝘁𝗵 𝗼𝗳 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀. - Strengthened skills in 𝗧𝗵𝗿𝗲𝗮𝘁 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲, 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻, and 𝗦𝗢𝗖 𝗪𝗼𝗿𝗸𝗳𝗹𝗼𝘄𝘀 while contributing to a 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻.

This internship provided hands-on experience in Security Operations Centre workflows, from threat detection to incident response. I gained skills in SIEM monitoring, log and network traffic analysis, threat intelligence, and digital forensics. The program also covered vulnerability management, compliance standards, and SOC efficiency. It concluded with a capstone project simulating real-world incidents, enhancing both technical and analytical capabilities.