Skip to content
View alir961's full-sized avatar
2 followers · 4 following

Achievements

Achievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Block or report alir961

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
alir961/README.md
Ali Raad, Software Engineer, Secure Software & Critical Systems

LinkedIn Based in the Geneva area French, English C1, German B1


I build secure, maintainable backends: authentication, cloud infrastructure and threat detection.

At Société Générale, on the Digital Banking Security team, I led the migration of the digital-banking authentication system from Spring MVC on WildFly to Spring Boot, through to production for 3.5 million customers. I also remediated OWASP / CVE vulnerabilities and handled production incidents end to end.


Application security
OAuth2 / JWT · Spring Security · RBAC · OWASP & CVE remediation · SIEM design · forensics 		Architecture
C4 · DDD · TDD · layered and clean design · code review 		Cloud & delivery
GCP · Terraform · Kubernetes / GKE · Helm · Docker · Jenkins · GitHub Actions · GitLab CI

Projects

Soodora

EPITECH INNOVATIVE PROJECT · 2024–2026

A platform for independent artists, built over two years. Spring Boot 3 API with a layered DDD architecture and 563 tests, Vue / Ionic app, Stripe marketplace.

Java 21 Spring Boot Spring Security Vue 3 Stripe

Network SIEM

EPITECH · INCIDENT-RESPONSE EXERCISE

Reverse-engineered the implant on a simulated compromised hospital bastion (C2, multi-layer persistence, IDS bypass) and turned it into 9 detection rules for beaconing, exfiltration, DGA, scans and tunnels, with safe automatic iptables containment.

Python Scapy iptables Forensics

GCP Platform as Code

INFRASTRUCTURE AS CODE

A whole Google Cloud platform in Terraform: IAM, GKE with pod and node autoscaling, private Cloud SQL with Secret Manager, HTTPS ingress, Prometheus / Grafana, keyless GitHub Actions.

Terraform GKE Helm Cloud SQL FastAPI

TrekUL

UNIVERSITÉ LAVAL · SOFTWARE ARCHITECTURE

Java REST API with a layered DDD architecture, built test-first: 150+ test classes, coverage and quality gates, 300K+ open-data records ingested and validated.

Java JAX-RS JUnit 5 Mockito

Also   R-Type engine, C++20 multiplayer engine (UDP, ECS, runtime modules)  ·  ZenFit, real-time 3D pose estimation  ·  Panoramix, thread synchronisation in C  ·  Sneakers Avenue, security-reviewed e-commerce


Stack

Java Spring Python FastAPI TypeScript React Vue C C++ Kotlin Node.js

Google Cloud Kubernetes Terraform Docker GitHub Actions Jenkins PostgreSQL MongoDB Redis Linux PyTorch


Background

Education
M2 Software Engineering Expert · Epitech Paris · 2026
M1 exchange · Université Laval, Québec · 2025
Bachelor in Information Technology · Epitech Lyon · 2024 		Certifications
Google Cloud Cybersecurity Certificate · 2026
Google Cloud Computing Foundations · 2026
4 Google Cloud skill badges · network security, load balancing, app dev, ML APIs · 2025–2026

Popular repositories Loading

  1. gcp-gke-terraform-platform gcp-gke-terraform-platform Public

    GCP platform as code: Terraform stacks (IAM, private Cloud SQL, GKE with autoscaling, DNS), Helm, Prometheus monitoring, FastAPI service, GitHub Actions plan/apply

    HCL

  2. zenfit-ai-movement-analysis zenfit-ai-movement-analysis Public

    Real-time 3D pose estimation and exercise classification from a camera: PyTorch, ONNX Runtime, Three.js

    Python

  3. panoramix-threads-semaphores panoramix-threads-semaphores Public

    Thread synchronisation in C (pthreads, mutex, semaphores) with a TSan/ASan stress-test suite

    C

  4. r-type-game-engine r-type-game-engine Public

    C++20 multiplayer shoot'em up: authoritative UDP server, ECS, runtime-loadable engine modules

    C++

  5. sneakers-avenue-ecommerce sneakers-avenue-ecommerce Public

    Full-stack TypeScript e-commerce: React, Express, MongoDB, JWT auth, cart and profiles

    TypeScript

  6. soodora-platform soodora-platform Public

    Platform for independent artists: Spring Boot 3 layered API (563 tests), Vue/Ionic app, Stripe marketplace, security-reviewed

    Java