01robot
AI Agent Development
LLM orchestration (Ollama, OpenAI, Anthropic), RAG with pgvector, agent memory & feedback loops, embedding pipelines, FastAPI
Available for AI agent & SOC toolingHi, I'm Issam Heli.
Hi, I'm Issam Heli.
I build agents that defend networks.
AI Agent Developer·Cybersecurity Soc Analyst·Full-Stack Developer·Media Buyer
AI Agent Developer and Cybersecurity SOC Analyst from Morocco. Full-stack background — I build open-source SOC infrastructure on Ubuntu (Wazuh, Shuffle, TheHive, Cortex, MISP, OpenCTI), engineer local-first AI agent systems, and run performance Meta Ads campaigns.
- AGENTS
- RAG · pgvector · LLM router
- SOC
- 5 SIEM connectors · MITRE
- STACK
- FastAPI · .NET · Next.js
- ADS
- Meta · 75% sell-through
live · agentthree.js
$ nexus analyze --alert "C2" → true_positive conf=0.94 ▌
FastAPI◆Next.js◆.NET Core◆pgvector◆Ollama◆Wazuh◆Shuffle◆TheHive◆Cortex◆MISP◆OpenCTI◆Ubuntu Server◆Splunk◆QRadar◆MITRE ATT&CK◆Meta Ads◆Docker◆Azure◆TypeScript◆Python◆Grafana◆Redis◆FastAPI◆Next.js◆.NET Core◆pgvector◆Ollama◆Wazuh◆Shuffle◆TheHive◆Cortex◆MISP◆OpenCTI◆Ubuntu Server◆Splunk◆QRadar◆MITRE ATT&CK◆Meta Ads◆Docker◆Azure◆TypeScript◆Python◆Grafana◆Redis◆
/identity
Issam Heli
AI Agent Developer · SOC Analyst
- Based
- Agadir, Morocco
- Stack
- FastAPI · .NET · Next
- Languages
- AR · FR · EN
01 / About
Full-Stack developer turned Cybersecurity Soc Analyst & AI Agent Developer.
I'm Issam Heli, based in Agadir, Morocco. I started in full-stack development, then trained as a SOC analyst at JobInTech Academy. I'm fully equipped to build an open-source SOC infrastructure end-to-end.
To push past the curriculum I designed NexusSOC — a production-grade, AI-powered SOC platform with pgvector memory, multi-SIEM connectors, and LLM-driven triage.
On the side, I run high-performance Meta Ads campaigns for Moroccan real-estate and retail brands, and produce multimedia content. Same instinct, different surface: ship fast, measure, iterate.
5+
Years building
5
SIEM connectors
2025
SOC certified
75%
Sell-through · Ads
02shield
Cybersecurity / SOC
SOC analyst workflow, SIEM integration (Wazuh, Elastic, Splunk, QRadar), SOC infrastructure engineering on Ubuntu Server (Wazuh, Shuffle, TheHive, Cortex, MISP, OpenCTI), incident detection & response, MITRE ATT&CK mapping, threat intel, vulnerability assessment, network & system hardening — capable of building an open-source SOC infrastructure end-to-end
03server
Backend
Python, FastAPI, PostgreSQL + pgvector, Redis, C#, ASP.NET Core, MVC, Web API, EF Core, SQL Server
04code
Frontend
React, Next.js, TypeScript, Tailwind, Blazor, Bootstrap, jQuery, Chart.js
05cloud
Cloud & DevOps
Microsoft Azure, Vercel, Docker, linux, GitHub Actions, Prometheus, Grafana
06video
Multimedia & Marketing
SEO, Google Tag Manager, Meta Ads Manager, professional videography,
◆ stack.depth
Four faces. One operator.
Scroll to rotate. The same person ships AI agents, defends the network, builds the product, and runs the ad spend that pays for all of it.
- AI Agents— Ollama · pgvector · RAG
- SOC Stack— Wazuh · Shuffle · TheHive · Cortex · MISP · OpenCTI
- Backend— FastAPI · .NET · Postgres
- Growth— Meta Ads · GTM · CRO
↕ scroll to rotate
02 / Projects
Selected work across AI, security, web, and growth.
2025·AI Agent Developer
NexusSOC — AI SOC Analyst
Local-first AI-powered Security Operations Center. Ingests alerts from any major SIEM, classifies with local or cloud LLM, retrieves prior cases via pgvector memory, executes response playbooks. FastAPI + React + Postgres + Ollama.
FastAPIPythonReactPostgreSQL + pgvectorOllamaRAGDockerGrafana
Read case study→Web Development
.NET · React · cloud
webliveGstMagasin
2023▸ Full-stack Developer
All-in-one store management platform for small and large retail businesses. Boosts productivity and optimizes operations.
ASP.NET CoreEF CoreSQL ServerAzure
weblivePriorityClips
2023▸ Full-stack Developer
Curated video platform delivering top-tier clips with a focus on relevance and quality.
ASP.NET CoreAzure
webliveStudio El Horia
2024▸ Frontend Developer
Photography and videography studio with 21+ years of experience. Wedding coverage, events, aerial shots, creative services.
HTMLCSSJavaScriptAzure Static Web Apps
Media Buyer
Meta Ads · creative · CRO
mediacompletedMiaa Mar
2024▸ Media Buyer
Digital marketing strategy for Founty Houara residential and commercial lots (R+3 / R+4). 75%+ sales completion in 6 months.
Meta AdsReal estatePerformance marketing
medialiveqotoof_choco
2024▸ Media Buyer
Digital marketing campaigns for a premium chocolate retail store in Agadir.
Meta AdsRetail
03 / Resume
Trajectory & training.
▸ experience.log
- 2026
AI Agent Developer
NexusSOC project
- 2026
SOC Infrastructure Engineer
Ubuntu · Wazuh · Shuffle · TheHive · Cortex · MISP · OpenCTI
- 2022 - Present
Freelance Full-stack Developer
- 2024 - Present
Media Buyer (Meta Ads)
Freelance
- 2025 - Present
Creative Collaborator (Videography & Photography)
▸ education.log
- 2025 - Completed
Bootcamp: Cybersecurity SOC Analyst
- ▸Network & system security fundamentals
- ▸SIEM operation and log analysis
- ▸Incident detection, triage, and response
- ▸Threat intelligence and MITRE ATT&CK mapping
- ▸Vulnerability assessment and hardening
- ▸Linux / Windows defense, identity & access management
- ▸Security monitoring, alerting, and reporting
Holds the full SOC analyst skill set taught in the program — and is capable of building a complete open-source SOC infrastructure end-to-end. To push beyond the curriculum, designed and built NexusSOC: a production-grade AI-powered SOC platform with pgvector memory, multi-SIEM connectors, and LLM-driven triage.
- 2020 - 2022
Diploma in IT Development
Office de la Formation Professionnelle et de la Promotion du Travail
- 2019 - 2020
Baccalaureate in Physics and Chemistry
High School - Agadir, Morocco
04 / Contact
Let's build something secure, fast, and a little bit intelligent.
Open to AI agent engineering, SOC tooling, full-stack, and performance Meta Ads engagements.