a
amino110

Amin H

@amino110

SOC Analyst Security Analyst Junior Penetration Tester Python Developer

Espagne
Anglais, Espagnol, Persan, Arabe
Certaines informations sont présentées en anglais.
À propos de moi
I am a Cybersecurity analyst and Python developer based in Barcelona with hands-on experience in SOC operations, web application security testing, and security automation. I have investigated real incidents using Splunk and Elastic/Kibana and identified vulnerabilities across the OWASP Top 10. I build security tooling in Python and have full EU work authorization.... Plus d’infos

Compétences

a
amino110
Amin H
hors ligne • 

Voir mes services

Programmation et Tech
I will audit your website and provide a security report
De15 $US / projetPlus de détails

Portfolio

Expérience professionnelle

Fiverr

Fiverr

Freelance • 4 mos

HTTP Security Auditor

May 2026 - Jul 2026 • 2 mos

Built a Python CLI tool that audits HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) across multiple targets, scoring each 0–100 and classifying severity as Critical, Medium, or Good. Mapped each finding to the specific attack class it mitigates (XSS, MITM/SSL stripping, clickjacking, MIME sniffing, information leakage), demonstrating applied understanding of common web attack vectors. Automated HTML report generation with integrated remediation guidance, turning raw scan output into an actionable, audit-ready deliverable.

NYC Taxi Data Pipeline

Mar 2026 - May 2026 • 2 mos

Designed and deployed a fully event-driven, serverless ETL pipeline (GCS → Cloud Functions → Dataproc Serverless → BigQuery) that processes large-scale data automatically on file upload — the same trigger-based, log-processing pattern used in SIEM and security data pipelines. Processed 160MB+ of source data in under 10 seconds using Dataproc Serverless, and built BigQuery analytics for operational reporting, showing the ability to work with large datasets under real infrastructure constraints (IAM, service accounts, event triggers)