-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathindex.html
More file actions
843 lines (738 loc) · 50 KB
/
Copy pathindex.html
File metadata and controls
843 lines (738 loc) · 50 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Rahim - Portfolio</title>
<meta name="description" content="Application Security Engineer & Security Developer focused on AppSec, DevSecOps, and security tooling. I embed security into the SDLC, lead code reviews, and integrate SAST/DAST/SCA. Currently building secure systems at Morgan Stanley. Based in Edmonton, AB, Canada.">
<!-- Favicon -->
<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='7' fill='%2314b8a6'/%3E%3Ctext x='16' y='22' font-family='system-ui,-apple-system,sans-serif' font-size='18' font-weight='700' fill='white' text-anchor='middle'%3EAM%3C/text%3E%3C/svg%3E">
<link rel="apple-touch-icon" href="assets/img/am-favicon.png">
<script src="https://cdn.tailwindcss.com"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
<style>
@import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600&family=Space+Grotesk:wght@500;600&display=swap');
:root {
--accent: #14b8a6;
}
.dark {
color-scheme: dark;
}
body {
font-family: 'Inter', system_ui, sans-serif;
}
.heading-font {
font-family: 'Space Grotesk', 'Inter', system_ui, sans-serif;
font-weight: 600;
letter-spacing: -0.025em;
}
.section-header {
font-size: 13px;
letter-spacing: 0.08em;
font-weight: 600;
}
.impact-card {
transition: transform 0.2s cubic-bezier(0.4, 0, 0.2, 1),
box-shadow 0.2s cubic-bezier(0.4, 0.0, 0.2, 1);
}
.impact-card:hover {
transform: translateY(-4px);
box-shadow: 0 20px 25px -5px rgb(0 0 0 / 0.1), 0 8px 10px -6px rgb(0 0 0 / 0.1);
}
.dark .impact-card {
box-shadow: 0 10px 15px -3px rgb(0 0 0 / 0.3);
}
.nav-link {
transition: color 0.1s ease;
}
.nav-link:hover {
color: #14b8a6;
}
.expertise-card {
transition: all 0.2s cubic-bezier(0.4, 0.0, 0.2, 1);
}
.stat {
font-variant-numeric: tabular-nums;
}
.prose-custom p {
color: #374151;
}
.dark .prose-custom p {
color: #d1d5db;
}
.timeline-dot {
box-shadow: 0 0 0 4px white;
}
.dark .timeline-dot {
box-shadow: 0 0 0 4px #18181b;
}
.tech-tag {
font-size: 12px;
padding: 2px 10px;
border-radius: 9999px;
background-color: #f3f4f6;
color: #374151;
font-weight: 500;
}
.dark .tech-tag {
background-color: #1f2937;
color: #d1d5db;
}
.smooth-scroll {
scroll-behavior: smooth;
}
</style>
</head>
<body class="bg-white dark:bg-[#18181b] text-gray-900 dark:text-gray-200 smooth-scroll">
<!-- Navbar -->
<nav class="sticky top-0 z-50 bg-white/95 dark:bg-[#18181b]/95 backdrop-blur-md border-b border-gray-200 dark:border-white/10">
<div class="max-w-screen-xl mx-auto px-6">
<div class="flex items-center justify-between h-16">
<!-- Logo / Name -->
<a href="#" class="flex items-center gap-3 group">
<div class="w-9 h-9 rounded-xl bg-gradient-to-br from-teal-500 to-teal-600 flex items-center justify-center text-white font-semibold text-lg tracking-tighter">AM</div>
<div>
<div class="font-semibold text-lg tracking-tighter">Abderrahim Mayaba</div>
</div>
</a>
<!-- Desktop Navigation -->
<div class="hidden md:flex items-center gap-8 text-sm font-medium">
<a href="#impact" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Impact</a>
<a href="#journey" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Journey</a>
<a href="#approach" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Approach</a>
<a href="#skills" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Skills</a>
<a href="#credentials" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Credentials</a>
<a href="#writing" class="nav-link text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white">Writing</a>
</div>
<div class="flex items-center gap-3">
<!-- Theme Toggle -->
<button
id="theme-toggle"
class="w-10 h-10 flex items-center justify-center rounded-2xl border border-gray-200 dark:border-white/15 bg-white dark:bg-[#18181b] text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white hover:border-gray-300 dark:hover:border-white/30 transition-all shadow-sm"
aria-label="Toggle between dark and light theme"
title="Toggle theme">
<i class="fa-solid fa-moon text-[15px] dark:hidden"></i>
<i class="fa-solid fa-sun text-[15px] hidden dark:block"></i>
</button>
<!-- Contact CTA -->
<a href="#contact"
class="hidden sm:flex items-center gap-2 px-4 h-9 text-sm font-semibold rounded-2xl bg-gray-900 dark:bg-white text-white dark:text-gray-900 hover:bg-gray-800 dark:hover:bg-gray-100 transition-colors">
<span>Let's talk</span>
</a>
<!-- Mobile Menu -->
<button id="mobile-menu-btn"
class="md:hidden w-9 h-9 flex items-center justify-center rounded-xl border border-gray-200 dark:border-white/10 text-gray-500 dark:text-gray-400">
<i class="fa-solid fa-bars"></i>
</button>
</div>
</div>
</div>
<!-- Mobile Menu -->
<div id="mobile-menu" class="hidden md:hidden border-t border-gray-200 dark:border-white/10 bg-white dark:bg-[#18181b]">
<div class="px-6 py-6 flex flex-col gap-4 text-sm font-medium">
<a href="#impact" class="py-1 mobile-nav-link">Impact</a>
<a href="#journey" class="py-1 mobile-nav-link">Journey</a>
<a href="#approach" class="py-1 mobile-nav-link">Approach</a>
<a href="#skills" class="py-1 mobile-nav-link">Skills</a>
<a href="#credentials" class="py-1 mobile-nav-link">Credentials</a>
<a href="#writing" class="py-1 mobile-nav-link">Writing</a>
<a href="#contact" class="mt-2 inline-flex items-center justify-center gap-2 px-4 h-10 rounded-2xl bg-gray-900 dark:bg-white text-white dark:text-gray-900 font-semibold">Let's talk</a>
</div>
</div>
</nav>
<!-- Hero -->
<header class="max-w-screen-xl mx-auto px-6 pt-16 pb-20 md:pt-20 md:pb-24">
<div class="flex flex-col-reverse md:flex-row md:items-center gap-10 md:gap-12">
<!-- Text Content -->
<div class="md:w-7/12">
<div class="inline-flex items-center gap-2 px-3 py-1 rounded-full bg-gray-100 dark:bg-white/5 text-xs font-semibold tracking-[0.5px] mb-6">
<div class="w-1.5 h-1.5 rounded-full bg-teal-500"></div>
<span class="text-gray-600 dark:text-gray-300">Edmonton, AB, Canada</span>
</div>
<h1 class="text-6xl md:text-7xl leading-[0.96] font-semibold tracking-tighter heading-font">
Abderrahim<br>Mayaba
</h1>
<p class="mt-4 text-2xl md:text-3xl text-gray-600 dark:text-gray-300 font-light tracking-tight">
Application Security Engineer & Security Developer
</p>
<p class="mt-6 max-w-lg text-[15px] leading-relaxed text-gray-600 dark:text-gray-400">
With a background spanning software development, application security, and cybersecurity, I embed security into the SDLC — from vulnerability discovery and code reviews to developing fixes and safe production releases.
</p>
<div class="mt-8 flex flex-wrap items-center gap-3">
<a href="#impact"
class="inline-flex items-center justify-center gap-2 px-6 h-11 rounded-2xl bg-teal-600 hover:bg-teal-500 active:bg-teal-700 text-white font-semibold text-sm transition-colors">
See the work
</a>
<a href="#contact"
class="inline-flex items-center justify-center gap-2 px-6 h-11 rounded-2xl border border-gray-300 dark:border-white/15 font-semibold text-sm hover:bg-gray-50 dark:hover:bg-white/5 transition-colors">
Get in touch
</a>
</div>
<div class="mt-8 flex items-center gap-5 text-sm">
<a href="mailto:ammayaba@gmail.com" class="flex items-center gap-2 text-gray-600 dark:text-gray-300 hover:text-gray-900 dark:hover:text-white transition-colors">
<i class="fa-solid fa-envelope w-4"></i>
<span>ammayaba@gmail.com</span>
</a>
<div class="h-3 w-px bg-gray-300 dark:bg-white/20"></div>
<div class="flex items-center gap-4">
<a href="https://github.com/mayaba" target="_blank" class="text-gray-500 hover:text-gray-700 dark:text-gray-400 dark:hover:text-gray-200 transition-colors">
<i class="fa-brands fa-github text-lg"></i>
</a>
<a href="https://linkedin.com/in/mayabaa" target="_blank" class="text-gray-500 hover:text-gray-700 dark:text-gray-400 dark:hover:text-gray-200 transition-colors">
<i class="fa-brands fa-linkedin text-lg"></i>
</a>
</div>
</div>
</div>
<!-- Photo -->
<div class="md:w-5/12 flex justify-center md:justify-end">
<div class="relative w-full max-w-[240px] md:max-w-[210px]">
<div class="aspect-square rounded-3xl overflow-hidden border border-gray-200 dark:border-white/10 shadow-xl shadow-black/5 dark:shadow-black/30">
<img
src="assets/img/profile.jpg"
alt="Abderrahim Mayaba"
class="w-full h-full object-cover grayscale-[0.08]"
style="image-rendering: -webkit-optimize-contrast;">
</div>
<div class="absolute -bottom-3 -right-3 bg-white dark:bg-[#1a1b1f] border border-gray-200 dark:border-white/10 rounded-2xl px-4 py-2 text-xs shadow-sm">
<div class="flex items-center gap-2">
<div class="text-teal-600 dark:text-teal-400">
<i class="fa-solid fa-check"></i>
</div>
<span class="font-medium text-gray-700 dark:text-gray-200">Open to new opportunities</span>
</div>
</div>
</div>
</div>
</div>
</header>
<!-- Selected Impact -->
<section id="impact" class="max-w-screen-xl mx-auto px-6 pb-20">
<div class="flex items-end justify-between mb-8">
<div>
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">SELECTED IMPACT</div>
<h2 class="text-4xl tracking-tight font-semibold heading-font mt-1">Work that moved the needle</h2>
</div>
<a href="#journey" class="hidden md:flex items-center gap-2 text-sm font-medium text-gray-500 hover:text-gray-700 dark:text-gray-400 dark:hover:text-gray-300">
View full journey <i class="fa-solid fa-arrow-right ml-1"></i>
</a>
</div>
<div class="grid md:grid-cols-3 gap-5">
<!-- Card 1: Reachability -->
<div class="impact-card group bg-white dark:bg-[#1a1b1f] border border-gray-200 dark:border-white/10 rounded-3xl p-7 flex flex-col">
<div class="flex-1">
<div class="flex items-center gap-3 mb-5">
<div class="px-3 py-1 text-[10px] font-semibold tracking-wider rounded-full bg-teal-100 dark:bg-teal-900/40 text-teal-700 dark:text-teal-300">WORKJAM • 2023–2025</div>
</div>
<h3 class="font-semibold text-2xl tracking-tight leading-tight">Reachability Analysis<br>Pipeline</h3>
<p class="mt-4 text-[14.5px] leading-relaxed text-gray-600 dark:text-gray-300">
Snyk SCA was generating high volumes of low-signal findings. I extended Eclipse Steady with support for modern Java versions and built Python automation that performs precise call-graph analysis and auto-generates high-confidence pull requests.
</p>
</div>
<div class="mt-6 pt-6 border-t border-gray-100 dark:border-white/10">
<div class="text-xs font-semibold text-gray-500 dark:text-gray-400 mb-2">OUTCOME</div>
<p class="text-sm leading-snug">Dramatically improved signal-to-noise and reduced manual triage workload for both security and engineering teams.</p>
<div class="flex flex-wrap gap-1.5 mt-4">
<span class="tech-tag">Java</span>
<span class="tech-tag">Python</span>
<span class="tech-tag">Snyk</span>
<span class="tech-tag">Eclipse Steady</span>
<span class="tech-tag">CI/CD</span>
</div>
</div>
</div>
<!-- Card 2: Static Analyzer -->
<div class="impact-card group bg-white dark:bg-[#1a1b1f] border border-gray-200 dark:border-white/10 rounded-3xl p-7 flex flex-col">
<div class="flex-1">
<div class="flex items-center gap-3 mb-5">
<div class="px-3 py-1 text-[10px] font-semibold tracking-wider rounded-full bg-gray-100 dark:bg-white/10 text-gray-600 dark:text-gray-300">Concordia University • MEng • 2021</div>
</div>
<h3 class="font-semibold text-2xl tracking-tight leading-tight">Static Code Analyzer<br>for Secure Patterns</h3>
<p class="mt-4 text-[14.5px] leading-relaxed text-gray-600 dark:text-gray-300">
Built a Java static analysis tool using the Abstract Syntax Tree (AST) to automatically detect the "destructive wrapping" anti-pattern in exception handling — an issue that silently destroys stack traces critical for debugging and security investigations.
</p>
</div>
<div class="mt-6 pt-6 border-t border-gray-100 dark:border-white/10">
<div class="text-xs font-semibold text-gray-500 dark:text-gray-400 mb-2">OUTCOME</div>
<p class="text-sm leading-snug">Published open-source tool that helps teams maintain proper audit trails and improve code reliability at scale.</p>
<div class="flex flex-wrap gap-1.5 mt-4">
<span class="tech-tag">Java</span>
<span class="tech-tag">Eclipse JDT</span>
<span class="tech-tag">Maven</span>
<span class="tech-tag">AST Analysis</span>
</div>
<a href="https://github.com/mayaba/ast.destructivewrapping" target="_blank"
class="inline-flex items-center gap-1.5 text-xs font-medium text-teal-600 dark:text-teal-400 mt-4 hover:underline">
View on GitHub <i class="fa-solid fa-external-link-alt text-[10px]"></i>
</a>
</div>
</div>
<!-- Card 3: SOC Automation -->
<div class="impact-card group bg-white dark:bg-[#1a1b1f] border border-gray-200 dark:border-white/10 rounded-3xl p-7 flex flex-col">
<div class="flex-1">
<div class="flex items-center gap-3 mb-5">
<div class="px-3 py-1 text-[10px] font-semibold tracking-wider rounded-full bg-gray-100 dark:bg-white/10 text-gray-600 dark:text-gray-300">EBTIKAR • 2020–2022</div>
</div>
<h3 class="font-semibold text-2xl tracking-tight leading-tight">Real-Time Threat<br>Intelligence Platform</h3>
<p class="mt-4 text-[14.5px] leading-relaxed text-gray-600 dark:text-gray-300">
Designed and shipped a web-based IP and hash reputation lookup service plus supporting automation. Previously, threat investigations took over eight hours of manual effort.
</p>
</div>
<div class="mt-6 pt-6 border-t border-gray-100 dark:border-white/10">
<div class="text-xs font-semibold text-gray-500 dark:text-gray-400 mb-2">OUTCOME</div>
<p class="text-sm leading-snug">Reduced average investigation time from <span class="font-semibold text-gray-800 dark:text-gray-100">8+ hours to real-time</span>, enabling the SOC to scale without adding headcount.</p>
<div class="flex flex-wrap gap-1.5 mt-4">
<span class="tech-tag">Python</span>
<span class="tech-tag">Bash</span>
<span class="tech-tag">SIEM</span>
<span class="tech-tag">Automation</span>
</div>
</div>
</div>
</div>
</section>
<!-- Journey / Experience -->
<section id="journey" class="bg-gray-50 dark:bg-white/[0.015] border-y border-gray-100 dark:border-white/10 py-16">
<div class="max-w-screen-xl mx-auto px-6">
<div class="mb-9">
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">PROFESSIONAL JOURNEY</div>
<h2 class="text-4xl tracking-tight font-semibold heading-font mt-1">Experience</h2>
</div>
<div class="space-y-8 max-w-4xl">
<!-- Current Role -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pb-6 border-b border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">Morgan Stanley</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Montreal, QC • November 2025 – Present</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Senior Software Developer – Threat & Fraud Detection</div>
<ul class="space-y-[5px] text-[14.2px] text-gray-600 dark:text-gray-300">
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Embed application security into the SDLC for critical threat and fraud detection platforms, leading code security reviews and driving secure development practices.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Integrate SAST, DAST, and SCA tools into development pipelines to identify and remediate vulnerabilities early in the lifecycle.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Design and develop advanced detection models that identify real-time threats and fraudulent activity within complex financial applications.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Triage, validate, and remediate security findings while partnering with engineering teams to deliver secure, resilient production systems.</li>
</ul>
</div>
</div>
<!-- WorkJam -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2">
<div class="md:col-span-3">
<div class="font-semibold">WorkJam</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Montreal, QC • May 2023 – Oct 2025</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Application Security Engineer & Security Developer</div>
<ul class="space-y-[5px] text-[14.2px] text-gray-600 dark:text-gray-300">
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Integrated and managed SAST, DAST, and SCA (Snyk) tools directly into CI/CD pipelines with automated security gates.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Led threat modeling for customer-facing services and third-party integrations; partnered with engineering on secure design patterns.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Built custom automation (Python + Java) to reduce false positives and generate actionable developer workflows from scanner output.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Managed WAF policies and coordinated third-party penetration testing remediation lifecycle.</li>
</ul>
</div>
</div>
<!-- Morgan Stanley -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">Morgan Stanley</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Montreal, QC • 2022 – 2023</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Software Developer</div>
<ul class="space-y-[5px] text-[14.2px] text-gray-600 dark:text-gray-300">
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Developed and hardened backend services for large-scale risk monitoring and fraud detection platforms in a highly regulated environment.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Renovated legacy Java systems, significantly improving security posture, maintainability, and performance.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Applied secure SDLC practices and participated in architectural reviews for critical financial surveillance applications.</li>
</ul>
</div>
</div>
<!-- Ebttikar -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">Ebttikar Technology</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Riyadh, Saudi Arabia • 2020 – 2022</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">SOC Analyst & Automation Developer</div>
<ul class="space-y-[5px] text-[14.2px] text-gray-600 dark:text-gray-300">
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Built automation and a real-time reputation lookup service that reduced threat investigation time from 8+ hours to seconds.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Led incident response and threat hunting across critical banking systems; developed custom SIEM content and detection rules.</li>
<li class="flex gap-2"><span class="mt-1.5 block w-1 h-1 rounded-full bg-gray-400 flex-shrink-0"></span> Performed static code analysis on suspicious samples and designed security automation workflows that scaled the SOC.</li>
</ul>
</div>
</div>
<!-- TAV -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">TAV Technologies</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Riyadh, Saudi Arabia • 2016 – 2019</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">IT Team Leader & Aviation Systems Administrator</div>
<p class="text-[14.2px] text-gray-600 dark:text-gray-300">Led a global team supporting mission-critical airport systems. Owned security, performance, and 24/7 availability for 10+ core aviation platforms serving international stakeholders.</p>
</div>
</div>
<!-- Atu Duty Free -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">ATU Duty Free</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Medina, Saudi Arabia • 2015 – 2016</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Information Technologies Specialist</div>
<p class="text-[14.2px] text-gray-600 dark:text-gray-300">Provided 24/7 production support for critical business systems while managing endpoint security, system administration, and access controls across the organization.</p>
</div>
</div>
<!-- YASREF -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">YASREF</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Yanbu, Saudi Arabia • 2015</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Cooperative Education Student</div>
<p class="text-[14.2px] text-gray-600 dark:text-gray-300">Designed and built a Java-based information system that automated mobile billing for 2,000+ employees, reducing processing time from several weeks to real-time.</p>
</div>
</div>
<!-- Sky Spectrums -->
<div class="grid md:grid-cols-12 gap-x-8 gap-y-2 pt-5 border-t border-gray-200 dark:border-white/10">
<div class="md:col-span-3">
<div class="font-semibold">Sky Spectrums Est.</div>
<div class="text-sm text-gray-500 dark:text-gray-400">Yanbu, Saudi Arabia • 2013 – 2015</div>
</div>
<div class="md:col-span-9">
<div class="font-semibold text-lg tracking-tight mb-1.5">Computer Network Officer (Part-time)</div>
<p class="text-[14.2px] text-gray-600 dark:text-gray-300">Performed network testing, troubleshooting, and maintenance while maintaining detailed documentation and network diagrams for compliance and operational reliability.</p>
</div>
</div>
</div>
</div>
</section>
<!-- Approach / Expertise -->
<section id="approach" class="max-w-screen-xl mx-auto px-6 py-20">
<div class="max-w-2xl mb-9">
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">HOW I WORK</div>
<h2 class="text-4xl tracking-tight font-semibold heading-font mt-1">I reduce risk without adding friction.</h2>
<p class="mt-3 text-gray-600 dark:text-gray-300">Security only works when it enables teams instead of blocking them. My focus is always on high-signal automation and clear communication.</p>
</div>
<div class="grid md:grid-cols-2 lg:grid-cols-3 gap-4">
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">Application Security & Testing</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Threat modeling, manual penetration testing (Burp Suite), secure code review, and OWASP Web Security Testing Guide application.</p>
<div class="mt-4 text-xs text-gray-500">Burp Suite • Postman • OWASP WSTG</div>
</div>
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">Security Automation & Tooling</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Building internal tools that eliminate repetitive work — reachability analysis, reputation services, and custom static analyzers.</p>
<div class="mt-4 text-xs text-gray-500">Python • Java • Bash • GitHub Actions</div>
</div>
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">DevSecOps & Pipeline Security</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Embedding SAST/DAST/SCA into CI/CD with meaningful gates, WAF management, and infrastructure-as-code security reviews.</p>
<div class="mt-4 text-xs text-gray-500">Snyk • Jenkins • GitHub Actions • Terraform</div>
</div>
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">Cloud & Container Security</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Securing Kubernetes workloads, container image scanning, and applying security-as-code principles across AWS and GCP environments.</p>
<div class="mt-4 text-xs text-gray-500">AWS • GCP • Kubernetes • Docker • Terraform</div>
</div>
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">Vulnerability Management</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Prioritizing findings with reachability and context, driving remediation, and producing clear risk narratives for engineering and leadership.</p>
<div class="mt-4 text-xs text-gray-500">CVSS • Risk Scoring • Stakeholder Reporting</div>
</div>
<div class="expertise-card border border-gray-200 dark:border-white/10 bg-white dark:bg-[#1a1b1f] rounded-3xl p-6">
<div class="font-semibold mb-2">Security Enablement</div>
<p class="text-sm text-gray-600 dark:text-gray-300 leading-snug">Mentoring engineers, creating secure coding standards, and building a culture where security is a shared responsibility rather than a gate.</p>
<div class="mt-4 text-xs text-gray-500">Documentation • Training • Cross-team Collaboration</div>
</div>
</div>
</section>
<!-- Skills -->
<section id="skills" class="max-w-screen-xl mx-auto px-6 py-20 border-t border-gray-100 dark:border-white/10">
<div class="max-w-2xl mb-9">
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">SKILLS</div>
<h2 class="text-4xl tracking-tight font-semibold heading-font mt-1">Skills & Capabilities</h2>
<p class="mt-3 text-gray-600 dark:text-gray-300">A focused set of technical skills drawn from hands-on work across software development, application security, and cybersecurity operations.</p>
</div>
<div class="grid md:grid-cols-2 lg:grid-cols-4 gap-6">
<div>
<div class="font-semibold mb-3 text-sm text-gray-500 dark:text-gray-400">Security Testing & Assessment</div>
<div class="flex flex-wrap gap-2">
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Penetration Testing</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Threat Modeling</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Secure Code Review</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">OWASP WSTG</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Vulnerability Management</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Reachability Analysis</span>
</div>
</div>
<div>
<div class="font-semibold mb-3 text-sm text-gray-500 dark:text-gray-400">Security Automation & Engineering</div>
<div class="flex flex-wrap gap-2">
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Security Automation</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">CI/CD Security</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Policy-as-Code</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Custom Security Tooling</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Supply Chain Security</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">WAF & Zero-Day Protection</span>
</div>
</div>
<div>
<div class="font-semibold mb-3 text-sm text-gray-500 dark:text-gray-400">Cloud & Infrastructure Security</div>
<div class="flex flex-wrap gap-2">
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Cloud Security (AWS/GCP)</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Kubernetes Security</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Infrastructure as Code</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Container Security</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Zero Trust Architecture</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Observability & Monitoring</span>
</div>
</div>
<div>
<div class="font-semibold mb-3 text-sm text-gray-500 dark:text-gray-400">Programming & Systems</div>
<div class="flex flex-wrap gap-2">
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Java</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">JavaScript / TypeScript</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Python</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">REST APIs</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">GraphQL APIs</span>
<span class="px-3 py-1 text-sm bg-gray-100 dark:bg-white/5 rounded-full">Secure Backend Development</span>
</div>
</div>
</div>
</section>
<!-- Credentials -->
<section id="credentials" class="border-t border-gray-100 dark:border-white/10 bg-gray-50 dark:bg-white/[0.015]">
<div class="max-w-screen-xl mx-auto px-6 py-16">
<div class="grid md:grid-cols-2 gap-x-12 gap-y-10">
<!-- Education -->
<div>
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px] mb-4">EDUCATION</div>
<div class="space-y-6">
<div>
<div class="font-semibold">Master of Engineering in Software Engineering</div>
<div class="text-gray-600 dark:text-gray-300">Concordia University • 2019 – 2021</div>
<div class="text-sm text-gray-500 mt-0.5">GPA: 3.27</div>
</div>
<div>
<div class="font-semibold">Bachelor of Science in Computer Engineering</div>
<div class="text-gray-600 dark:text-gray-300">Yanbu University College • 2010 – 2015</div>
<div class="text-sm text-gray-500 mt-0.5">GPA: 3.22</div>
</div>
</div>
</div>
<!-- Certifications -->
<div>
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px] mb-4">CERTIFICATIONS</div>
<div class="grid grid-cols-1 sm:grid-cols-2 gap-3 text-sm">
<div class="flex items-start gap-3">
<i class="fa-solid fa-certificate text-teal-600 dark:text-teal-400 mt-1"></i>
<div>
<div>Advanced Web Application Penetration Testing (eWPTX)</div>
<div class="text-xs text-gray-500">INE</div>
</div>
</div>
<div class="flex items-start gap-3">
<i class="fa-solid fa-certificate text-teal-600 dark:text-teal-400 mt-1"></i>
<div>
<div>Certified Ethical Hacker (CEH)</div>
<div class="text-xs text-gray-500">EC-Council</div>
</div>
</div>
<div class="flex items-start gap-3">
<i class="fa-solid fa-certificate text-teal-600 dark:text-teal-400 mt-1"></i>
<div>
<div>Certified Security Analyst (ECSA)</div>
<div class="text-xs text-gray-500">EC-Council</div>
</div>
</div>
<div class="flex items-start gap-3">
<i class="fa-solid fa-certificate text-teal-600 dark:text-teal-400 mt-1"></i>
<div>
<div>CompTIA Security+</div>
<div class="text-xs text-gray-500">CompTIA</div>
</div>
</div>
<div class="flex items-start gap-3">
<i class="fa-solid fa-certificate text-teal-600 dark:text-teal-400 mt-1"></i>
<div>
<div>CCNA Routing & Switching</div>
<div class="text-xs text-gray-500">Cisco</div>
</div>
</div>
</div>
<div class="mt-5 text-sm text-gray-500 dark:text-gray-400">
Currently pursuing: <span class="text-gray-600 dark:text-gray-300">CISSP, eCPPT</span>
</div>
</div>
</div>
</div>
</section>
<!-- Writing / Blog teaser -->
<section id="writing" class="max-w-screen-xl mx-auto px-6 py-16 border-b border-gray-100 dark:border-white/10">
<div class="max-w-2xl">
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">WRITING</div>
<h2 class="text-3xl tracking-tight font-semibold heading-font mt-1">Thoughts on practical security</h2>
<p class="mt-3 text-gray-600 dark:text-gray-300">I occasionally write about real-world AppSec challenges, building effective security automation, and what actually works when embedding security into fast-moving teams.</p>
<div class="mt-6 text-sm">
<a href="https://linkedin.com/in/mayabaa" target="_blank"
class="inline-flex items-center gap-2 font-medium text-teal-600 dark:text-teal-400 hover:underline">
Read on LinkedIn <i class="fa-solid fa-arrow-up-right-from-square text-xs"></i>
</a>
</div>
<p class="text-xs text-gray-500 mt-3">More long-form writing coming soon.</p>
</div>
</section>
<!-- Contact -->
<section id="contact" class="max-w-screen-xl mx-auto px-6 py-20">
<div class="max-w-2xl">
<div class="section-header text-teal-600 dark:text-teal-400 tracking-[1.5px]">LET'S TALK</div>
<h2 class="text-4xl tracking-tight font-semibold heading-font mt-1">I tailor every conversation.</h2>
<div class="prose-custom mt-5 text-[15px] leading-relaxed text-gray-600 dark:text-gray-300">
<p>I prepare a focused resume and talking points for each opportunity. If you're building a security team or looking for someone who can both find problems and help fix them at scale, I'd love to hear from you.</p>
</div>
<div class="mt-8 flex flex-col sm:flex-row gap-4">
<a href="mailto:ammayaba@gmail.com"
class="flex-1 flex items-center justify-center gap-3 h-12 rounded-2xl bg-gray-900 dark:bg-white text-white dark:text-gray-900 font-semibold hover:bg-gray-800 dark:hover:bg-gray-100 transition-colors">
<i class="fa-solid fa-envelope"></i>
<span>ammayaba@gmail.com</span>
</a>
<a href="https://linkedin.com/in/mayabaa" target="_blank"
class="flex-1 flex items-center justify-center gap-3 h-12 rounded-2xl border border-gray-300 dark:border-white/15 font-semibold hover:bg-gray-50 dark:hover:bg-white/5 transition-colors">
<i class="fa-brands fa-linkedin"></i>
<span>Connect on LinkedIn</span>
</a>
</div>
<div class="mt-5 text-xs text-gray-500 dark:text-gray-400">
GitHub: <a href="https://github.com/mayaba" class="underline hover:no-underline" target="_blank">github.com/mayaba</a>
</div>
</div>
</section>
<footer class="border-t border-gray-100 dark:border-white/10 py-8">
<div class="max-w-screen-xl mx-auto px-6 text-xs text-gray-500 dark:text-gray-400 flex flex-col sm:flex-row justify-between gap-y-2">
<div>© <span id="year"></span> Abderrahim Mayaba. Built with intention.</div>
<div class="flex gap-4">
<a href="#" class="hover:text-gray-700 dark:hover:text-gray-200">Back to top</a>
</div>
</div>
</footer>
<script>
// Tailwind script
function initializeTailwind() {
document.documentElement.classList.add('dark'); // Default to dark
// Tailwind config for custom colors if needed
if (typeof tailwind !== 'undefined') {
tailwind.config = {
darkMode: 'class',
theme: {
extend: {
fontFamily: {
'heading': ['Space Grotesk', 'Inter', 'system-ui', 'sans-serif']
}
}
}
};
}
}
// Theme toggle
function setupThemeToggle() {
const toggle = document.getElementById('theme-toggle');
const html = document.documentElement;
// Check localStorage or system preference
const savedTheme = localStorage.getItem('theme');
if (savedTheme === 'light') {
html.classList.remove('dark');
} else if (savedTheme === 'dark') {
html.classList.add('dark');
} else {
// Default dark as per our design direction
html.classList.add('dark');
}
toggle.addEventListener('click', () => {
if (html.classList.contains('dark')) {
html.classList.remove('dark');
localStorage.setItem('theme', 'light');
} else {
html.classList.add('dark');
localStorage.setItem('theme', 'dark');
}
});
}
// Mobile menu
function setupMobileMenu() {
const btn = document.getElementById('mobile-menu-btn');
const menu = document.getElementById('mobile-menu');
btn.addEventListener('click', () => {
menu.classList.toggle('hidden');
const icon = btn.querySelector('i');
if (menu.classList.contains('hidden')) {
icon.classList.remove('fa-times');
icon.classList.add('fa-bars');
} else {
icon.classList.remove('fa-bars');
icon.classList.add('fa-times');
}
});
// Close menu when clicking nav links
document.querySelectorAll('.mobile-nav-link').forEach(link => {
link.addEventListener('click', () => {
menu.classList.add('hidden');
const icon = btn.querySelector('i');
icon.classList.remove('fa-times');
icon.classList.add('fa-bars');
});
});
}
// Smooth scroll for all anchor links
function setupSmoothScroll() {
document.querySelectorAll('a[href^="#"]').forEach(anchor => {
anchor.addEventListener('click', function (e) {
const target = document.querySelector(this.getAttribute('href'));
if (target) {
e.preventDefault();
const offset = 80;
const bodyRect = document.body.getBoundingClientRect().top;
const elementPosition = target.getBoundingClientRect().top;
const offsetPosition = elementPosition - bodyRect - offset;
window.scrollTo({
top: offsetPosition,
behavior: 'smooth'
});
}
});
});
}
// Dynamic year
function setYear() {
document.getElementById('year').textContent = new Date().getFullYear();
}
// Keyboard accessibility for theme
function setupKeyboard() {
document.addEventListener('keydown', (e) => {
if (e.key === '/' && document.activeElement.tagName === 'BODY') {
e.preventDefault();
document.getElementById('theme-toggle').click();
}
});
}
// Initialize everything
function init() {
initializeTailwind();
setupThemeToggle();
setupMobileMenu();
setupSmoothScroll();
setYear();
setupKeyboard();
// Optional: log that the new portfolio is ready
console.log('%c[Portfolio] New modern site initialized successfully.', 'color:#14b8a6');
}
// Boot
if (document.readyState === 'loading') {
document.addEventListener('DOMContentLoaded', init);
} else {
init();
}
</script>
</body>
</html>