TLP:CLEARPROFILE NOTE · NO. 2026-11 · F. MBOHOU

Subject

Cybersecurity analyst. Detection & investigation.

Fils Aboubakar Sidik MBOHOU

I analyse network flows and digital artefacts and document verifiable findings. My Data Engineering experience adds a demand for reliable, traceable data.

Available now · Permanent or fixed-term roles · Angers, open to relocation across France

Open to opportunities in cybersecurity consulting, GRC and CSIRT, as well as PhD projects in academia or industry.

176,758network flows analysedThreatLens case file

91.6%of attacks detected16.7% of benign flows flagged incorrectly · 0.48 threshold

1.29%FGSM attack successdown from 2.07% before hardening · D04

16.43/20MSc averageRanked 1st in semesters 2 to 4

Investigations

Each project handled as a case file: the question, the evidence examined, the finding. Academic projects carried out in authorised labs, alone or in teams, plus one production assignment.

D01 · Forensics · team of 4 · 2025

Reconstruct a scenario from three seized systems: disk, memory and network, examined using a four-step digital-forensics workflow.

Autopsy · FTK Imager · Volatility · Wireshark · HxD

Finding: Quasar RAT traces identified in memory.

CLOSED Read the case file →

D02 · Detection · team of 3 · 2024

Spot attacks in 176,758 CSE-CIC-IDS2018 flows: models compared, threshold set at 0.48, errors analysed.

Python · pandas · scikit-learn · Flask

Finding: 91.6% of attacks detected; 16.7% of benign test flows incorrectly flagged.

CLOSED Read the case file →

D03 · Network · pair work · April 2025

Authorised lab: understand what a compromised server sitting between two network zones can reach, from Kali to Debian.

Ligolo-ng · Nmap · Linux

Finding: internal host made reachable through a pivot.

CLOSED Read the case file →

D04 · AI security · team of 4 · 2025

Test a PyTorch CNN against the FGSM attack (ε = 8/255), then harden it with adversarial training. Public code.

PyTorch · FGSM · GitHub

Finding: attack success rate cut from 2.07% to 1.29%.

CLOSED Read the case file →

D05 · Detection · individual · 2025

Filter 5,157 unique messages without blocking real ones: a sequential BiLSTM model compared with a TF-IDF baseline.

Python · Keras (BiLSTM) · scikit-learn

Finding: 98.32% accuracy, spam F1 0.930; 4 legitimate messages blocked out of 678.

CLOSED Read the case file →

D06 · Supporting evidence · final-year internship

Optimise a production PostgreSQL warehouse: ETL cycle cut from 30 to 6 minutes. Reliable alerts start with reliable data.

PostgreSQL · PL/pgSQL · pgAgent · MyReport BE

Finding: 7 supervised regression tests with no discrepancy in the verified scope.

CLOSED Read the case file →

Appendices: forensic glass fragment classification (213 samples, Random Forest, macro F1 0.735) · food price analytics (66,100 WFP records, 2005–2025) · Power BI decision-support prototype (Alshadows, demonstration data) · Hadoop & Spark lab (Docker cluster, MapReduce and PySpark).

Evidence summary

Documented findings, linked to the case studies and coursework.

  1. 01Digital forensics demonstrated on disk, memory and network evidence.Documented evidence · D01
  2. 02Network-flow detection measured, false positives included.Test results · D02, D05
  3. 03Differentiator: reliable data pipelines, proven in production.Production experience · D06
  4. 04Governance and risk-analysis foundations covered during the MSc.Coursework foundations · EBIOS RM, ISO/IEC 27001

Skills × case files matrix

● skill used in the case file.
SkillD01D02D03D04D05D06
Disk and memory forensics●
Network analysis●●●
Detection and threshold tuning●●
Understanding lateral movement●
AI model security●
Data reliability and traceability●●

Method

A workflow suited to each project: collect relevant material, examine it, test hypotheses and report the results. For digital forensics, the approach draws in particular on NIST SP 800-86.

  1. 01

    Collect

    Acquire data without altering it and keep a record.

  2. 02

    Examine

    Extract what matters: processes, logs, flows, artefacts.

  3. 03

    Analyse

    Correlate sources and test hypotheses, thresholds included.

  4. 04

    Report

    Write a clear, dated finding that a third party can verify.

Security analysis is only as reliable as the data behind it: trustworthy inputs, effective checks and traceability. At HortiTrace, I applied these principles to production PostgreSQL pipelines; in my cybersecurity projects, they guide how I examine evidence and interpret results.

Skills, tools and frameworks

Built through documented case studies and MSc coursework, with the learning context made explicit for each area.

Detection & SOC Project · coursework
Network-flow analysis, intrusion detection and false-positive evaluation (ThreatLens); log collection and analysis, SIEM/SOC fundamentals, Wazuh/OSSIM studied in coursework.
Investigation & DFIR Cases · labs
Disk, memory and network artefacts; PCAP analysis and timeline reconstruction; Autopsy, FTK Imager, Volatility, Wireshark, HxD.
Networks & offensive security Labs · coursework
TCP/IP, routing, switching, segmentation, SSH; Nmap, Ligolo-ng, Linux (Kali, Ubuntu, Debian); academic pentesting methodology and the “Certified Ethical Hacker” (CEH) course taken at ESAIP.
GRC & incident management Coursework
Risk management and cyber crisis management, IT governance, data protection and Privacy by Design; incident-response principles.
Systems, cloud & cryptography Labs · coursework
Windows/Linux, Active Directory fundamentals (identities, accounts and access permissions), Microsoft Azure fundamentals (AZ-900 coursework), cryptography concepts and data security; Docker.
Security Analytics & scripting Projects · Data production
Python, pandas, scikit-learn, PyTorch, Keras, SQL/PostgreSQL, Git; ML-based detection and adversarial evaluation.
Technical frameworks Projects · foundations
NIST SP 800-86 for digital forensics; MITRE ATT&CK (foundational knowledge); EBIOS RM, ISO/IEC 27001 and GDPR.

Background

Experience

  1. 11/2025 – 05/2026

    Data Engineer, final-year internship · HortiTrace SAS, France

    Optimised a production PostgreSQL ETL chain: incremental loading and a pre-aggregated reporting layer, then validation through 7 supervised regression tests, with no discrepancy found within the verified scope. Case file D06

  2. 06/2025 – 08/2025

    BI Developer, academic internship · Alshadows Technologies, Cameroon

    Designed a BI prototype on demonstration data: 9-table SQL Server model, Power Query preparation, 20+ DAX measures and 4 Power BI pages.

  3. 10/2020 – 08/2022

    IT Consultant · HPS International Consulting, Cameroon

    Data security checks, backups and patching; business requirements analysis, integration of information systems (ERP, business applications), IT project follow-up and user support.

  4. 11/2019 – 10/2020

    IT Applications Analyst · Will & Brothers Consulting, Cameroon

    Optimised a TensorFlow vehicle-detection API (accuracy raised from 73% to 88%) and integrated inventory-monitoring dashboards.

Education

  1. 02/2024 – 10/2026

    MSc Cybersecurity & Data Science (Bac+5 level) · ESAIP Engineering School

    Average 16.43/20, ranked 1st in semesters 2 to 4. Detailed results

  2. 06/2022 – 12/2023

    MSc Technical Education (CSE), first year completed · IUT, Bangladesh

    First-year CGPA: 3.50/4.00.

  3. 01/2015 – 11/2018

    BSc Technical Education, Computer Science & Engineering · IUT, Bangladesh

    Degree awarded · CGPA: 3.57/4.00.

Off the record

What does not fit on a CV.

Adaptation, football, entrepreneurship and a first international experience: a few stories that also explain how I work.

Beyond the CV →

Unrestricted · Contact

Looking to strengthen your cybersecurity team?