Hamza Ben El Hadi

DevSecOps Engineer and Cybersecurity Consultant (+5 years), I secure products and systems from the design phase (secure by design) to production. My unique selling proposition: I am both a full-stack developer and a security expert, so I don't just point out risks, I also know how to build and fix.

Some concrete achievements:

VTC Platform (Movaisy): designed and delivered end-to-end — 3 applications (passenger app, driver app on iOS & Android, and admin panel), deployed via Docker, CI/CD, and an OVH VPS. From architecture to production.

Pentest (Effyis, payment): complete audit of a payment application, ~250 findings analyzed and qualified (manual filtering of false positives / investigation of false negatives), 5 reports written and remediation supported.

Industrial IoT Mission: supported 4 factories over 1 year, achieving up to 60% energy savings through IoT supervision, while securing the chain (encryption, equipment authentication, network segmentation).

Payriscope (payroll & compliance): managed a team of 6 people for 1 year, application security (OAuth/OTP, GDPR) and acceptance testing management.

Training (Ynov): 8 modules designed, 14 students trained in cyber, network, and secure development fundamentals.

I intervene throughout the entire chain.

What I can do for you:

Web application / infrastructure audits & pentests, with supported remediation.

Securing an existing product: authentication (OAuth/OTP), hardening, GDPR compliance.

DevSecOps: architecture, CI/CD, containerization (Docker), security integrated into delivery.

Secure full-stack development (TypeScript, Next.js, NestJS, Flutter) from scoping to production.

Training & coaching teams on security best practices.