YOUSSEF ABID
Security Engineer - Cloud & Application Security
Tunisia
linkedin.com/in/youssef-abid-55a250295/
https://github.com/abid-youssef
Summary
Security engineer and software engineering student with experience in cybersecurity and AI. Competed and led teams in national and international cybersecurity competitions. Experienced in security automation, compliance processes, evidence collection, and building security tools.
Experience
Caelor
Croatia - Tunisia
Jul 2025 – Present
Security Engineer (Security & DevSecOps)
Feb 2026 – Present
•
Engineered automated vulnerability-management pipelines and an AI-powered triage system, reducing false positives by 80%+, cutting the backlog from 1,000+ to tens of findings, and eliminating SLA breaches.
•
Led vulnerability management across 12+ web applications, APIs, cloud environments, and infrastructure, including remediation workflows and management of the Bugcrowd bug bounty programme.
•
Owned SOC 2 Type II compliance and contributed to ISO 27001 and GDPR initiatives, including security controls, risk registers, audit evidence, and compliance activities in coordination with 40+ EU Customers.
•
Conducted penetration testing across web, API, cloud, and infrastructure environments, identifying vulnerabilities and driving remediation.
•
Reported security posture and risks to executive and management stakeholders, delivered security awareness training, and handled customer security questionnaires
DevSecOps Engineer
Sep 2025 – Feb 2026
•
CI/CD pipelines, integrating security processes into engineering workflows.
•
Developed vulnerability-management and security automation processes to improve detection, triage, and remediation efficiency.
Penetration Tester - Intern
Jul 2025 – Sep 2025
•
Conducted penetration testing and vulnerability assessments across web applications, APIs, infrastructure, and cloud environments.
•
Identified, validated, and documented security vulnerabilities, supporting remediation and security improvements.
•
Université du Québec à Chicoutimi
Canada - Remote
Researcher
Jun 2026 – Present
•
Conducting research to develop a data quality assessment framework for Network Intrusion Detection Systems (NIDS), focusing on evaluating and improving the quality, reliability, and suitability of intrusion-detection datasets.
International Cybersecurity Olympiad
Singapore
International Scientific Committee member & Mentor for the Tunisian National team and
Feb 2024 – Present
•
Member of the International Scientific Committee, contributing to competition development and preparation for ICO 2026 and ICO 2027.
•
Mentored the Tunisian national team, leading them to Silver medals at ICO 2025.
Securinets INSAT, The first CyberSecurity Association in Tunisia
Tunis, Tunisia
Technical Director
Sep 2024 – Present
•
Led technical initiatives within the biggest national cybersecurity association, organizing 20+ workshops and 40+ technical challenges.
Regular CTF Player
Tunis, Tunisia
specialized in Web Exploitation.
Sep 2022 – Present
•
CTF Team achieving consistent top placements.
IEEE INSAT Computer Society
Tunis, Tunisia
Technical Team Member & Project Manager
Jan 2025 – Present
•
Played a major role in the conception and development of internal projects.
Pwn & Patch
Tunis, Tunisia
Cybersecurity-Development Intern
Jun 2024 – Aug 2024
•
Constructed a component for phishing domain detection (for blue teaming) with an accuracy of 95%. Also enabling phishing domain creation (for red teaming)
Education
National Institute of Applied Sciences and Technology INSAT
Sep 2022 – Expected 2027
Engineering Cycle in Software Engineering
Projects
Intelligent Context Compression Middleware
Designed a strategy-agnostic context-compression middleware for a popular open-source text-to-SQL agent (Guepard) to address context degradation in long-running LLM sessions, achieving an optimal strategy that losslessly optimizes ~15-30% of the context window.
SMARTSHIELD, AI-Driven EDR Platform
Co-developed an AI-driven cybersecurity platform designed to enhance automatic threat detection, classification, and response.
X2X Plugin for Hexabot, Winner at Orange AI Hackathon
Implemented a set of plugins and helpers that enable conversion between different modalities, such as speech, text, and vision.
Intelligent Network Security Analysis Toolkit
Directed the development of a comprehensive web application security scanning platform that provides both external (black-box) and internal (white-box) security assessments.
Klippy, Personal Ai Assistant
Created a fully local Ai assistant with protected file system access to aid with secure data manipulation and automation of critical tasks involving compliance and sensitive data. Accelerated workflow by more than 30%.
Skills
Languages
Python, Typescript, Java, C/C++, Ruby, PHP, Bash, SQL/NOSQL, Terraform
Tools
Github, Gitlab, Docker, Docker Swarm, Burpsuite, AWS, Google Cloud, Ansible
Competitions
CTFs
•
Top 3 at Arab Security Cyber Wargames 2025 International Finals; 5th globally / 1st Maghreb at Securinets Quals; 10+ national wins.
Hackathons
•
6 podiums, 3 wins - AI, cybersecurity, game dev, data science (Orange × Hexabot, Playground IAC, IEEE TSYP12, DataOverflow...).
Languages
English
Proficient
French
Proficient
Arabic
Proficient
Spanish
Beginner