~$ ayoub.malki

Cybersecurity · SOC · Threat Detection

Ayoub Malki

Master's student in Cybersecurity at South Mediterranean University (MEDTECH), Tunis. I work on SIEM monitoring, threat detection, hybrid cloud security and machine learning for cyber threat intelligence.

Open to an end-of-studies internship from January 2027: remote, Tunisia, or research stays abroad.

Download CV Get in touch

01. About

I'm a detail-oriented cybersecurity student with hands-on experience in SIEM monitoring, hybrid cloud security and threat detection. During my internship at RFC I helped secure a hybrid Active Directory and Azure identity infrastructure, monitored it with Microsoft Defender for Identity and Microsoft Sentinel, wrote KQL detection alerts, and built a Power BI SOC dashboard.

On the research side, I built a dark web cyber threat classification pipeline with DarkBERT and transfer learning. The work was accepted at the WETICE 2026 conference in Paris.

I enjoy building tools that make defenders faster, from firewall configuration auditing to detection dashboards, and I'm looking for a team where I can keep doing that on real systems.

  • Based inTunis, Tunisia
  • StudyingMaster in Cybersecurity, MEDTECH
  • AvailableJanuary 2027
  • LanguagesArabic (native), English (fluent), French (basic)

02. Experience

Professional

  1. Dec 2025

    Member · Student Life Department, South Mediterranean University

    Tunis, Tunisia

    • Planned and managed event logistics and activities for the university community.
  2. Feb 2025 – May 2025

    IT Intern (capstone) · RFC

    Tunis, Tunisia

    • Implemented a hybrid on-premises Active Directory and Azure identity infrastructure.
    • Monitored it with Microsoft Defender for Identity and Microsoft Sentinel.
    • Wrote KQL alert rules and built a Power BI SOC dashboard to speed up incident response.

    SentinelDefender for IdentityEntra IDKQLPower BI

  3. Jul 2023 – Aug 2023

    Intern · Admission Department, South Mediterranean University

    Tunis, Tunisia

    • Supported administrative operations and student admissions processes.

Volunteer

  1. Dec 2025 – Dec 2026

    Member · IEEE Computer Society Chapter

    IEEE Student Branch, South Mediterranean University, Tunis

  2. Oct 2024 – Sep 2026

    Member · IEEE Engineering in Medicine and Biology Society (EMBS) Chapter

    IEEE Student Branch, South Mediterranean University, Tunis

  3. 2023 – Dec 2026

    Member · IEEE

    IEEE Student Branch, South Mediterranean University, Tunis

    • Member of IEEE, taking part in student branch activities and competitions such as IEEEXtreme 19.0 and Crackout 2.0.
  4. Dec 2023 – Present

    Member · Securinets SMU

    Cybersecurity club, South Mediterranean University, Tunis

  5. Dec 2023 – Present

    Member · GDG on Campus SMU

    Google Developer Group, South Mediterranean University, Tunis

  6. Dec 2023 – Present

    Member · IEEE Robotics and Automation Society (RAS) Chapter

    IEEE Student Branch, South Mediterranean University, Tunis

  7. Dec 2022 – May 2024

    President · Tuniversal Club

    Arts and culture club, South Mediterranean University, Tunis

03. Projects & Research

Research · Accepted at WETICE 2026, Paris

DarkBERT Cyber Threat Classification

A dark web threat classification pipeline using transfer learning with DarkBERT, covering secure data collection, preprocessing, labelling and model fine-tuning.

NLPDarkBERTTransfer learningThreat intelligence

Tool · Python

FortiGate Security Toolkit

A security toolkit for FortiGate firewalls built on a single config parser: an offline static audit across 11 rule categories with CLI remediation, an authorization-gated active scan, and branch-aware FortiOS CVE correlation with optional NVD confirmation. Includes a six-tab Streamlit dashboard and JSON/CSV export.

PythonFirewall auditingCVE matchingStreamlit

View on GitHub →

Capstone · Bachelor's degree

Securing a Hybrid Cloud & SOC Dashboard

Bachelor's capstone, defended in 2025: securing a hybrid cloud environment and building a monitoring dashboard, based on my work at RFC with Sentinel, Defender for Identity and KQL.

AzureSIEMKQLPower BI

Networking · Python

QuizNet

A terminal quiz game on networking fundamentals, implemented twice, over TCP and over UDP sockets, with separate client and server programs.

PythonSocketsTCP/UDP

View on GitHub →

04. Events & Activities

Hackathons, competitions and cybersecurity events I've taken part in.

05. Skills

Cybersecurity

SIEM monitoring (Microsoft Sentinel) · Threat detection & incident analysis · Network traffic analysis · Vulnerability assessment

Security tools

Wireshark · Snort IDS · Nessus · Elasticsearch · Splunk

Cloud security

Azure AD / Entra ID · Microsoft Defender for Identity · Azure Log Analytics · Hybrid identity

Programming

Python · C · Java · KQL

Data & ML

Pandas · PySpark · Transfer learning (DarkBERT) · Power BI · Tableau

Systems

Linux · Docker · Kubernetes · Git

06. Education

  • 2025 – 2027

    Master in Cybersecurity

    South Mediterranean University (MEDTECH), Tunis

  • 2022 – 2025

    Bachelor's Degree in Computer Science

    South Mediterranean University (MEDTECH), Tunis

07. Contact

I'm looking for an end-of-studies internship starting January 2027, in SOC, threat detection, cloud security or security research. The fastest way to reach me is email.

itisayoubmalki@gmail.com LinkedIn GitHub Download CV