Smail H.

Founder of ASFELIAS, a micro-enterprise dedicated to offensive security and DevSecOps. I help companies identify the vulnerabilities that truly matter and concretely reduce their risk exposure.

Services provided:

— Web & API Penetration Tests (OWASP, authentication, business logic)

— Network and Active Directory Penetration Tests

— OSINT Exposure Audits (attack surface, data leaks, public footprint)

— Linux / Nginx Server Hardening

— Implementation of secure CI/CD pipelines (Jenkins)

— Infrastructure automation with Ansible

Each mission includes a report prioritized by business impact, controlled exploitation proofs (PoC), an actionable remediation plan, and a validation re-test.

Methodologies: PTES, OWASP, CVSS, MITRE ATT&CK.

Definition and implementation of information security policies within a digital health company. Administration and supervision of systems and network infrastructures. Contribution to data protection and cyber threat prevention (monitoring, hardening, incident management). User support on cybersecurity best practices and internal awareness training. Participation in ISO 27001 compliance audits.

Two years of apprenticeship within the IT department, in direct support of the security officer. Participation in the implementation and monitoring of IS security policies. Administration of systems and network infrastructures. Performance of internal security audits and monitoring of remediation plans. Monitoring of vulnerabilities and threats. Writing security procedures and documentation. This apprenticeship was completed in parallel with my Master's degree in Network & Security at ESME.