Marouan Ben Hmed

I'm a full-stack web developer and computer science engineer based in Tunis, Tunisia, with hands-on experience building modern, production-ready web applications — from polished React frontends to robust server-side APIs and cloud deployments.
My stack: React, Next.js, Node.js, Express, Python Flask — deployed on AWS and Vercel, containerized with Docker, and automated with GitHub Actions CI/CD. I write clean, maintainable code and ship fast.
What sets me apart is my background in offensive cybersecurity. I'm ranked Top 5 nationally in Tunisia on HackTheBox, which means I don't just build apps — I build them knowing exactly how they get broken. Authentication flaws, OWASP Top 10, injection vulnerabilities, insecure APIs — I address these at the code level, not as an afterthought.
Whether you need a responsive SPA, a secure REST API, a full-stack product, or a security review of your existing web app — I bring both the development skill and the adversarial perspective to get it done right.
Let's build something solid.
Technical Experiences:
Secure Full-Stack SPA — React + Node.js
Built a dynamic single-page application with a React/Next.js frontend and Node.js/Express backend. Implemented JWT-based authentication, role-based access control, and mitigated OWASP Top 10 vulnerabilities including XSS, CSRF, and injection. Deployed on Vercel with automated CI/CD via GitHub Actions.
REST API & Microservices — Python Flask
Designed a modular microservices backend using Python Flask with RESTful endpoints, request validation, and structured error handling. Containerized with Docker and deployed to AWS. Focused on clean API design, security headers, and input sanitization.
NLP Data Pipeline & Dashboard — MAS Enterprise Internship
Engineered end-to-end data pipelines for large text corpora, built text classification models, and delivered interactive dashboards for stakeholder review. Demonstrates backend engineering and data visualization skills.
I am familiar with:
React.js · Next.js · Node.js · Express.js · Python · Flask · REST API Development · JavaScript · HTML/CSS · Docker · AWS · GitHub Actions CI/CD · Web Application Security · OWASP Top 10 · Terraform · Bash