Timeline

The full graph: work, education, trainings, startups and speaking. Follow each branch from its first commit to where it merges, or filter by track.

work

Private Tutor, freelance

org: Morocco
start: 2020-08
end: 2022-01
topics: math, english, french
time: part-time

description: Tutored 10+ students (ages 4–18) in math, physics and English. Grounded each concept in its history and reasoning, prioritizing understanding over memorization and achieving a minimum 40% improvement in grades.

Cloud Security Engineer, internship

org: Haufe Group · Freiburg
start: 2023-03
end: 2023-08
topics: aws, lambda, terraform
time: full-time
link: https://www.haufegroup.com/en

description: Designed MalS3Scan, a serverless AWS malware-detection pipeline processing ~10k files/day across thousands of buckets, batch-dispatching to parallel Lambda scanners against a centralized YARA rule DB, with automated alerting for incident response.

System Engineer, POS systems

highlight: true
org: Schwarz Digits · Weinsberg
start: 2023-09
end: 2025-07
topics: rhel, OS, infra, pentest
time: full-time
link: https://schwarz-digits.de/en

description: Owned integration and security for 150,000+ point-of-sale systems with zero downtime.

Software Security Engineering tutor & speaker

org: 42 Heilbronn & Arkadia
start: 2023-11
end: 2025-11
topics: teaching, software, security, infrastructure
time: part-time
link: https://www.42heilbronn.de/en/

description: Taught thousands of students live advanced classes on C, data structures, reverse engineering and binary exploitation. Hosted Cybersecurity Day for 100+ people onsite.

Offensive Security Engineer

highlight: true
org: Schwarz Digits · Berlin, remote
start: 2025-07
end: now
topics: red team, infra, research
time: full-time
link: https://schwarz-digits.de/en

description:
Owned and Designed a dynamic zero-trust orchestration platform across STACKIT and GCP, via Kata microVMs and Cilium eBPF host rounting over WG transit mesh.
Owned and designed a GCP IAM red-teaming harness with a deterministic propose-then-verify architecture.
Conducted security reviews and code assessments across STACKIT’s global cloud infrastructure and applications serving millions of users.
Engineered EDR evasion techniques by reverse-engineering Windows kernel telemetry and building custom payload delivery tooling in C and assembly.

Software Security Engineer

highlight: true
org: Mingabyte · Munich, remote
start: 2025-12
end: now
topics: rust, threat modeling, TISAX
time: part-time
link: https://mingabyte.de/en/

description:
Designed a secure high-load AI inference system in Rust and Python.
Led the execution and delivery of the company's TISAX certification in less than 350 hours.

education

FSTT, MIP

org: Université Abdelmalek Essaâdi
start: 2020-09
end: 2022-02 (dropped)
topics: math, informatics, physics
link: https://fstt.uae.ac.ma/

description: First reality check.

Core curriculum, software engineering

highlight: true
org: 42 Heilbronn
start: 2022-03
end: 2023-03
topics: c, c++, systems
link: https://www.42heilbronn.de/en/

description: Intensive peer-to-peer program: C, C++, systems programming, networking, full-stack.

B.Sc. Computer Science, dual study

highlight: true
org: DHBW Mannheim
start: 2023-09
end: 2026-08
topics: math, software engineering, security, cryptography
link: https://www.mannheim.dhbw.de/

description: Software engineering, IT security, network security, cryptography, alongside full-time work, the whole way through.

trainings

COAE (Certified Offensive AI Expert)

org: HackTheBox
start: 2026-04
end: 2026-07
topics: ai, redteam

startups

Founder & captain, L3AK

highlight: true
org: Security research team · 50+ active members
start: 2023-03
end: 2025-10
topics: ctf, red team, community
link: https://ctftime.org/team/220336

description: Founded and led a team of 100+ security researchers across 20 countries, achieving a consistent top-10 worldwide CTFtime ranking, with results at DEF CON CTF and Google CTF.

CTO

org: xTID
start: 2024-04
end: 2025-11
topics: nestjs, nextjs, ipfs, solidity, infra
time: part-time
link: https://xtid.io/

description: Designed and built a secure decentralized document verification system handling 1k+ transactions a month.

CEO

org: lyraix
start: 2025-11
end: 2026-04
topics: ai-security, harness, fine-tuning, data-pipelines
time: part-time
link: https://lyraix.ai/blog/

description: Founded lyraix, an AI security lab, and designed LyraixGuard, a real-time AI guardrail system with 300+ downloads on Hugging Face.

speaking

HTB International Meetup

highlight: true
org: HackTheBox · EliteSec
date: 2025-06
topics: reversing, anti-debug, maldev
link: https://www.linkedin.com/posts/1337-coding-school_hackthebox-elitesec-42network-activity-7335361736692154370-JZ2i?utm_source=share&utm_medium=member_desktop&rcm=ACoAADhzXYcBfwkDrhdnjiwVFhzoKTLSlT3A7D8

description: Presented my research on advanced Linux anti-debugging mechanisms, titled "Hook Oriented Programming".

NULLHAT Morocco

org: HackerOne · EliteSec
date: 2025-10
topics: reversing, pwn
link: https://lnkd.in/p/edeUMhFC

description: Co-organized a HackerOne meetup in Morocco, delivering high-quality challenges and talks.

Cyber Odyssey

org: 1337 · AkaSec
date: 2025-12
topics: crypto, IoT, CSPRNG
link: https://www.linkedin.com/posts/akasec-1337_meet-our-speakers-first-we-have-mouad-abid-activity-7393334107402838016-SN4D?utm_source=social_share_send&utm_medium=member_desktop_web&rcm=ACoAADhzXYcBfwkDrhdnjiwVFhzoKTLSlT3A7D8

description: Presented my research on CSPRNG in embedded systems, titled "Robust Complete PRNG".

Milestones

Tags — point events on the trunk

l'Bac

date: 2020-07

Germany · Arc

highlight: true
date: 2022-02

Founded · L3AK

date: 2023-03

winner · ETHMunich Hackathon

highlight: true
date: 2023-08

finalist · ETHGlobal Brussels Hackathon

highlight: true
date: 2024-07

5 digits bounty · ETHGlobal Bangkok Hackathon

highlight: true
date: 2024-10

winner · UC Berkeley RDI · Security Research Competition

highlight: true
date: 2026-03