# Timeline The full graph: work, education, trainings, startups and speaking. Follow each branch from its first commit to where it merges, or filter by track. ## work ## Private Tutor, freelance - org: Morocco - start: 2020-08 - end: 2022-01 - topics: math, english, french - time: part-time - description: Tutored 10+ students (ages 4–18) in math, physics and English. Grounded each concept in its history and reasoning, prioritizing understanding over memorization and achieving a minimum 40% improvement in grades. ## Cloud Security Engineer, internship - org: Haufe Group · Freiburg - start: 2023-03 - end: 2023-08 - topics: aws, lambda, terraform - time: full-time - link: https://www.haufegroup.com/en - description: Designed MalS3Scan, a serverless AWS malware-detection pipeline processing ~10k files/day across thousands of buckets, batch-dispatching to parallel Lambda scanners against a centralized YARA rule DB, with automated alerting for incident response. ## System Engineer, POS systems - highlight: true - org: Schwarz Digits · Weinsberg - start: 2023-09 - end: 2025-07 - topics: rhel, OS, infra, pentest - time: full-time - link: https://schwarz-digits.de/en - description: Owned integration and security for 150,000+ point-of-sale systems with zero downtime. ## Software Security Engineering tutor & speaker - org: 42 Heilbronn & Arkadia - start: 2023-11 - end: 2025-11 - topics: teaching, software, security, infrastructure - time: part-time - link: https://www.42heilbronn.de/en/ - description: Taught thousands of students live advanced classes on C, data structures, reverse engineering and binary exploitation. Hosted Cybersecurity Day for 100+ people onsite. ## Offensive Security Engineer - highlight: true - org: Schwarz Digits · Berlin, remote - start: 2025-07 - end: now - topics: red team, infra, research - time: full-time - link: https://schwarz-digits.de/en - description: - Owned and Designed a dynamic zero-trust orchestration platform across STACKIT and GCP, via Kata microVMs and Cilium eBPF host rounting over WG transit mesh. - Owned and designed a GCP IAM red-teaming harness with a deterministic propose-then-verify architecture. - Conducted security reviews and code assessments across STACKIT’s global cloud infrastructure and applications serving millions of users. - Engineered EDR evasion techniques by reverse-engineering Windows kernel telemetry and building custom payload delivery tooling in C and assembly. ## Software Security Engineer - highlight: true - org: Mingabyte · Munich, remote - start: 2025-12 - end: now - topics: rust, threat modeling, TISAX - time: part-time - link: https://mingabyte.de/en/ - description: - Designed a secure high-load AI inference system in Rust and Python. - Led the execution and delivery of the company's TISAX certification in less than 350 hours. ## education ## FSTT, MIP - org: Université Abdelmalek Essaâdi - start: 2020-09 - end: 2022-02 (dropped) - topics: math, informatics, physics - link: https://fstt.uae.ac.ma/ - description: First reality check. ## Core curriculum, software engineering - highlight: true - org: 42 Heilbronn - start: 2022-03 - end: 2023-03 - topics: c, c++, systems - link: https://www.42heilbronn.de/en/ - description: Intensive peer-to-peer program: C, C++, systems programming, networking, full-stack. ## B.Sc. Computer Science, dual study - highlight: true - org: DHBW Mannheim - start: 2023-09 - end: 2026-08 - topics: math, software engineering, security, cryptography - link: https://www.mannheim.dhbw.de/ - description: Software engineering, IT security, network security, cryptography, alongside full-time work, the whole way through. ## trainings ## COAE (Certified Offensive AI Expert) - org: HackTheBox - start: 2026-04 - end: 2026-07 - topics: ai, redteam ## startups ## Founder & captain, L3AK - highlight: true - org: Security research team · 50+ active members - start: 2023-03 - end: 2025-10 - topics: ctf, red team, community - link: https://ctftime.org/team/220336 - description: Founded and led a team of 100+ security researchers across 20 countries, achieving a consistent top-10 worldwide CTFtime ranking, with results at DEF CON CTF and Google CTF. ## CTO - org: xTID - start: 2024-04 - end: 2025-11 - topics: nestjs, nextjs, ipfs, solidity, infra - time: part-time - link: https://xtid.io/ - description: Designed and built a secure decentralized document verification system handling 1k+ transactions a month. ## CEO - org: lyraix - start: 2025-11 - end: 2026-04 - topics: ai-security, harness, fine-tuning, data-pipelines - time: part-time - link: https://lyraix.ai/blog/ - description: Founded lyraix, an AI security lab, and designed LyraixGuard, a real-time AI guardrail system with 300+ downloads on Hugging Face. ## speaking ## HTB International Meetup - highlight: true - org: HackTheBox · EliteSec - date: 2025-06 - topics: reversing, anti-debug, maldev - link: https://www.linkedin.com/posts/1337-coding-school_hackthebox-elitesec-42network-activity-7335361736692154370-JZ2i?utm_source=share&utm_medium=member_desktop&rcm=ACoAADhzXYcBfwkDrhdnjiwVFhzoKTLSlT3A7D8 - description: Presented my research on advanced Linux anti-debugging mechanisms, titled "Hook Oriented Programming". ## NULLHAT Morocco - org: HackerOne · EliteSec - date: 2025-10 - topics: reversing, pwn - link: https://lnkd.in/p/edeUMhFC - description: Co-organized a HackerOne meetup in Morocco, delivering high-quality challenges and talks. ## Cyber Odyssey - org: 1337 · AkaSec - date: 2025-12 - topics: crypto, IoT, CSPRNG - link: https://www.linkedin.com/posts/akasec-1337_meet-our-speakers-first-we-have-mouad-abid-activity-7393334107402838016-SN4D?utm_source=social_share_send&utm_medium=member_desktop_web&rcm=ACoAADhzXYcBfwkDrhdnjiwVFhzoKTLSlT3A7D8 - description: Presented my research on CSPRNG in embedded systems, titled "Robust Complete PRNG". ## Milestones # Tags — point events on the trunk ## l'Bac - date: 2020-07 ## Germany · Arc - highlight: true - date: 2022-02 ## Founded · L3AK - date: 2023-03 ## winner · ETHMunich Hackathon - highlight: true - date: 2023-08 ## finalist · ETHGlobal Brussels Hackathon - highlight: true - date: 2024-07 ## 5 digits bounty · ETHGlobal Bangkok Hackathon - highlight: true - date: 2024-10 ## winner · UC Berkeley RDI · Security Research Competition - highlight: true - date: 2026-03