Skip to content
View anaselkarkouri's full-sized avatar
4 followers · 3 following

Block or report anaselkarkouri

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
anaselkarkouri/README.md

Anas El Karkouri

Fifth-year Cybersecurity Engineering Student · EMSI Tanger

I am interested in Governance, Risk & Compliance (GRC), Cyber Risk and Information Security Audit, alongside SOC/SIEM and threat detection.

At Tanger Med, I contributed to a collective malware-analysis and SIEM prototype in a virtualized lab. At Amendis, I worked on cybersecurity awareness.

I am seeking a final-year internship (PFE) starting 1 February 2027, for 4–6 months, preferably six, with an EMSI internship agreement.

Mobility: Tanger, Tétouan, Al Hoceïma, Casablanca, Rabat and surrounding areas. For international opportunities: fully remote from Morocco.

LinkedIn · All repositories

Main cybersecurity projects

  • Cyber Risk & Security Control Assessment — Simulated SME case: 12 risks, a treatment plan, security policies, a Statement of Applicability excerpt and NIST CSF 2.0 current/target profiles. Includes separate lab checks of Keycloak/MFA, Windows/Wazuh, file restoration and Git history.

  • Mini-SOC Web — Collective web security lab connecting HTTP logs, Python detection, alert triage and Wazuh. SQLi/XSS and failed-login scenarios, two documented investigations, targeted fixes and OWASP ZAP retests.

  • SaaS Vendor Cyber Risk Assessment (TPRM) — Simulated supplier assessment: 20 questionnaire responses, nine supporting documents, eight risks, remediation actions and a reasoned recommendation with conditions for production use.

  • Malware Analysis — SIEM & Sandbox — Collective Tanger Med internship lab: Python, ClamAV, YARA, CAPEv2 and Wazuh for static/dynamic file analysis and SHA-256 traceability, with a separate Sysmon telemetry flow.

Each repository includes its deliverables, documented evidence and validation scope.

Standards & frameworks I am studying: ISO/IEC 27001, 27002 and 27005 (2022), and NIST CSF 2.0. My knowledge is foundational and continues to develop through these case studies.

Other academic projects

  • MediChainPlus — Collective digital health project: React, Express, blockchain and encrypted documents.
  • SmartHiring — Collective Android project: Java, Firebase and a CV analysis API.
  • GreenThumb — Gardening website built with HTML, CSS and JavaScript.
Présentation en français / French overview

Étudiant ingénieur en 5e année à l’EMSI Tanger, spécialisé en cybersécurité, je m’intéresse à la GRC, à l’Audit SSI et au Cyber Risk, ainsi qu’au SOC/SIEM et à la détection de menaces.

Mes stages à Tanger Med et Amendis et mes projets associent analyse de risques, évaluation de contrôles, analyse de malwares, surveillance des logs et sensibilisation SSI. Les quatre dépôts cyber ci-dessus présentent deux études de cas GRC simulées et deux projets techniques collectifs réalisés en laboratoire.

Je recherche un stage PFE dès le 1er février 2027, de 4 à 6 mois, idéalement six, avec convention EMSI. Mobilité : Tanger, Tétouan, Al Hoceïma, Casablanca, Rabat et leurs alentours ; à l’international, entièrement à distance depuis le Maroc.

Mes bases ISO/IEC 27001, 27002 et 27005 (2022), et NIST CSF 2.0 sont en approfondissement.

Pinned Loading

  1. grc-cyber-risk-assessment grc-cyber-risk-assessment Public

    GRC cyber case study: 12 risks, security controls, treatment plan, SoA excerpt and NIST CSF 2.0 profiles, with separate lab evidence.

    Python

  2. Mini-SOC-Web Mini-SOC-Web Public

    Collective SOC lab: HTTP logs, Python SQLi/XSS and failed-login detection, alert triage, Wazuh integration and targeted ZAP retests.

    PHP

  3. grc-saas-vendor-risk-assessment grc-saas-vendor-risk-assessment Public

    Simulated SaaS cyber risk assessment: 20 responses, 9 provider documents, 8 risks, remediation and a reasoned decision recommendation.

    Python

  4. malware-analysis-siem-sandbox malware-analysis-siem-sandbox Public

    Collective internship lab: suspicious-file analysis with Python, ClamAV, YARA, CAPEv2, Sysmon and Wazuh; controlled evidence and SHA-256 traceability.

    Python

  5. MediChainPlus MediChainPlus Public

    Collective academic digital health project: React, Express, Hyperledger Fabric, Solidity/EVM and encrypted document storage on IPFS.

    TypeScript

  6. SmartHiring SmartHiring Public

    Collective academic Android recruitment app: Java, Firebase, PDF applications and a FastAPI service for semantic CV analysis.

    Java