Initializing Security Systems...

eCPPTv3 Certified eWPTX Certified eCIR Certified Purple Team Operations CTF Competitor

Cybersecurity & Embedded Systems Student | Purple Team Operations

Cybersecurity Engineering student at ENSA Tetouan specialized in Purple Team operations, bridging offensive penetration testing (Network/Web/Active Directory) with certified incident detection, threat intelligence, and response.

View Projects Download CV
m-arjaz@kali:~

└─$ whoami

m-arjaz

└─$ cat about.txt

Cybersecurity & Embedded Systems Engineering Student @ ENSA Tetouan

└─$ cat certifications.txt

eCPPTv3 | eWPTX | eCIR | Google Cybersecurity | AD Enumeration & Attacks

└─$ ls projects/

API-Security-Testing/ Smart-Parking-IoT/ UART-FPGA/ LetsShare/

└─$ cat current_role.txt

Offensive Security Engineering Intern @ Atlas Defenders (Jan 2026 - May 2026)

└─$ _

About Me

Cybersecurity & Embedded Systems Engineering Student

Cybersecurity Engineering student at ENSA Tetouan specialized in Purple Team operations, bridging rigorous offensive penetration testing (Network/Web/Active Directory) with certified incident detection, threat intelligence, and response.

eCPPTv3, eWPTX, and eCIR certified, with proven expertise in advanced web application exploitation, WAF evasion, and simulating adversarial behavior while performing deep-dive forensic investigations inside enterprise-tier architectures.

I work with industry-standard tools including Burp Suite Professional, Splunk SIEM, ELK Stack, BloodHound, Impacket, Metasploit, Nmap, Wireshark, Ghidra, and leverage frameworks like OWASP and MITRE ATT&CK for comprehensive security assessments.

0

Certifications & Training

0

CTF Competitions

0

Technical Projects

Academic Projects

Hands-on work in security, IoT, embedded systems, and networking

API Security Testing Project

Black-box security assessment of REST API endpoints to audit input validation. Exploited BOLA vulnerabilities and bypassed Rate Limiting via Cross-API attack chaining.

API Security BOLA REST API Black-box Testing Rate Limiting Bypass
Jan 2026

Smart Parking – IoT & Full Stack Platform

Architected an end-to-end IoT parking system integrating embedded hardware, real-time networking, and a web dashboard. Physical access control via RFID cards and vehicle detection. Real-time communication (HTTP/WiFi) between microcontrollers and a centralized supervision dashboard.

ESP32/C++ PHP/MySQL JavaScript RFID IoT Networking
View on GitHub

UART Controller for FPGA

Design of a synthesizable UART transceiver for FPGAs. Fully functional transmitter/receiver with configurable baud rate and stop bits, verified through simulation.

VHDL ModelSim FPGA UART Digital Design
View on GitHub

LetsShare – P2P File Transfer

Desktop application for secure file transfer over a local area network (LAN). Features include progress tracking, IP validation, transfer history logging, and optimized streaming.

Java TCP Sockets Swing Networking File I/O
View on GitHub

Certifications & Training

Formal validation of cybersecurity and programming skills

eCPPTv3

Certified Professional Penetration Tester — INE Security

Completed - Oct 2025 View Certificate

eWPTX

Web App Penetration Tester eXtreme — INE Security

Completed - Sept 2026 View Certificate

eCIR

Certified Incident Responder — INE Security

Completed - June 2026 View Certificate

AD Enumeration & Attacks

Active Directory — HackTheBox Academy

Completed - 2025

Google Cybersecurity

Professional Certificate — Coursera

Completed - March 2025 View Certificate

Java Fundamentals

DataCamp (3 Courses)

Completed - Jan 2025 View Certificate

Python for Everybody

Coursera (5 Courses)

Completed - April 2024 View Certificate

Professional Experience

Real-world applications of offensive security and teamwork

Offensive Security Engineering Intern

Atlas Defenders

Jan 2026 – May 2026

  • Executed full-scope internal and external penetration testing methodologies against Active Directory environments, leveraging tools like BloodHound and Impacket to map network-wide privilege escalation pathways.
  • Authored technical remediation reports and Proof-of-Concepts (PoCs) detailing critical web and host-level system misconfigurations for infrastructure stakeholders.

Cybersecurity Intern

Deltaware Solutions

Nov 2025 – Jan 2026 | Remote

  • Performed automated and manual web application security assessments, leveraging OSINT techniques and mapping attack surfaces.
  • Conducted managed phishing simulations to evaluate corporate social engineering vulnerability baselines.

Team Member - Basmat Al-Khair Group

Amsa Charity Project

April 2024

  • Participated in infrastructure renovation project as part of charity initiative.
  • Collaborated with a team of 10+ volunteers to achieve project objectives.
  • Managed logistics and coordinated tasks across multiple workstreams.

CTFs & Activities

Competitive cybersecurity and community involvement

May 2026

CTF Organizer & Cryptography Author — Eclipse CTF

Academic Community

Designed and deployed original vulnerable cryptography challenges centered around custom padding oracle attacks and algorithmic flaws for the academic community.

Cryptography Challenge Design Padding Oracle
Apr 2026

Security Eagles — Co-author & Community Contributor

Cybersecurity Community

Collaborated with a team of researchers to compile and publish an open-source technical handbook covering eJPTv2 examination vectors, downloaded widely across local cybersecurity groups.

eJPTv2 Guide Knowledge Sharing
Apr 2026

DGSSI MAC 2026 CTF

National Representative — ENSA Tetouan

National-level CTF organized by DGSSI and SecDojo. Secured Rank 32 nationally with 1235 points, completing 8/9 machines and capturing 1/3 flags on the Advanced Active Directory box (AD105).

Web Exploitation Active Directory Network
Jan 2026

AUSIM CyberDrill Morocco (Finals)

SecDojo

Intensive 18-hour competition against 28 teams. Advanced assessment covering: Web Exploitation, multi-forest Active Directory attacks, DFIR (Splunk log analysis), Cloud security, and AI agent hacking.

DFIR Cloud Security Active Directory AI Hacking
Feb 2025

North Hacking Day

ENSA Tetouan

Solved challenges in web exploitation, cryptography, and forensics in a competitive CTF organized by ENSA Tetouan.

Web Exploitation Cryptography Forensics

Technical Skills

Offensive security, programming, and embedded expertise

Security Disciplines

Advanced Web App Pentesting WAF Evasion Deserialization SSRF Active Directory Domain Pivoting Threat Hunting Incident Detection & Triage Log Correlation Threat Intelligence (MITRE ATT&CK) Network Traffic Analysis Memory & Disk Forensics

Programming Languages

Python C/C++ Java VHDL Assembly (AVR) PHP SQL JavaScript

Security Tooling

Burp Suite Professional Splunk SIEM ELK Stack BloodHound Impacket Metasploit Nmap Wireshark Ghidra Sysinternals

Embedded Systems

ESP32 Development IoT Security VHDL Verilog FPGA Programming AVR Assembly DSP Assembly

Soft Skills

Problem-Solving Critical Thinking Leadership Team Management Adaptability Communication

Education

Academic background in cybersecurity and engineering

State Engineering Degree: Cybersecurity & Embedded Systems

ENSA Tetouan, Morocco

Expected 2027

Baccalaureate in Physical Sciences

Highest Honors

2019 – 2022

Languages

Communication skills in multilingual environments

Arabic

Native

French

Fluent

English

Fluent

Get In Touch

Open to cybersecurity internships and collaborations

I'm currently seeking internship opportunities in cybersecurity and penetration testing. Feel free to reach out for collaborations or just to connect!

Location

Fnideq, Morocco

Status

Open to Internship Opportunities