Hi, I'm

Maryam Alhawi

Full-Stack Developer & Cybersecurity Graduate

Full-stack developer trained at Reboot Coding Institute and a Cybersecurity graduate of the University of Bahrain — building secure, scalable systems from web apps and cloud infrastructure to low-level servers.

About Me

I'm a full-stack developer who completed Reboot Coding Institute's intensive programme, and a Cybersecurity graduate of the University of Bahrain (B.Sc., GPA 3.97 / 4.00), both in August 2026. I'm currently an IT Trainee at Arab Financial Services (AFS).

In 2026 I won the Benefit Fintech 2026 Award for a business case presented to Benefit's CEO and employees, and 1st Place at the UoB IT/Cybersecurity Exhibition for OpticNet, my senior project.

My work spans secure web application development, systems programming in Rust and Go, real-time communication, cloud & DevOps (Docker, Kubernetes, Terraform, AWS), and applied cybersecurity — from penetration testing and risk management to building my own HTTP servers and ray tracers from scratch.

Outside of code, I actively participate in CTF competitions, hackathons, and cybersecurity conferences like the Arab International Cybersecurity Conference. Passionate about fintech, AI, and DevOps.

Benefit Fintech 2026 Award

The Benefit Company — business case recognised for high implementation potential

Aug 2026

1st Place — IT/Cybersecurity Exhibition

University of Bahrain — for OpticNet, my AI-powered senior project

Jun 2026

Education & Certifications

💻
Reboot Coding Institute

Full-Stack Development Program

Mar 2024 – Aug 2026

🎓
University of Bahrain

B.Sc. Cybersecurity · GPA 3.97 / 4.00

Sep 2022 – Aug 2026

☁️
AWS Certified Cloud Practitioner

Amazon Web Services

🔐
Cybersecurity Certifications

IBM, Board Infinity, OWASP ZAP & Metasploit (Coursera)

Experience

Where I've put my skills to work.

IT Trainee Arab Financial Services (AFS)
Sep 2026 – Present
  • Working in the IT department on TIBCO middleware, supporting enterprise application integration and communication between core banking and payment systems.
Information Security Intern The Benefit Company
Jul 2026 – Aug 2026
  • Gained hands-on exposure to AWS security tools for network traffic analysis and firewall configuration, supporting infrastructure security evaluations.
  • Developed simulated phishing campaigns to train employees in recognising phishing attempts.
  • Conducted user access reviews across systems — auditing permissions and removing or deactivating accounts.
  • Won the Benefit Fintech 2026 Award for a business case presented to the CEO and employees.
2026 Chinese Bridge Student Delegation Shanghai University · Shanghai, China
Jan 2026
  • Selected to represent Bahrain in a cultural & academic exchange programme hosted by Shanghai University's College of International Education.
  • Studied Mandarin, calligraphy, paper cutting, and Chinese culture & history — achieved HSK Level 1 with a perfect 200/200.

Projects

A selection of work built at Reboot and beyond.

Senior Capstone Project 🏆 1st Place — UoB Exhibition Security Full Stack

OpticNet

An AI-powered network security intelligence platform — the largest and most complex project I've built, and winner of 1st place at the University of Bahrain IT/Cybersecurity Department Exhibition. It unifies industry-standard recon tools into one scanner, with real-time CVE analysis from NIST NVD and an interactive attack-surface risk graph.

  • Unified scanner: Nmap, Nikto, SQLMap, Nuclei, Subfinder & Gobuster
  • Real-time CVE analysis (NIST NVD) & interactive attack-surface risk graph
  • 10-container Docker lab with 6 intentionally vulnerable targets
  • Fully offline bilingual (EN / AR) AI assistant powered by Ollama
  • Zero-knowledge encryption (Argon2id + AES-256), JWT auth & RBAC
  • Attack path simulation mapped to MITRE ATT&CK
Python Flask Docker Ollama Nmap / Nuclei / SQLMap NVD API SQLite JWT Auth Pytest
View on GitHub

Project at a glance

Security tools integrated (Nmap, Nikto, SQLMap & more) 7+
Passing automated tests 426
Docker containers, incl. 6 vulnerable lab targets 10
Offline bilingual AI assistant (Ollama) AI
Zero-knowledge encryption (Argon2id) AES-256
Attack path simulation mapped to MITRE ATT&CK
Multi-role access control system RBAC
Exportable vulnerability scan reports PDF
Category
Language

Full Stack

Social Network Platform

A full-featured social platform with profiles, posts, followers, groups, events, and real-time messaging — built entirely from scratch without any framework.

  • Real-time chat via WebSockets
  • Session-based auth with secure cookies
  • Database migrations, follower & group systems
  • Dockerised deployment
Go Next.js React Docker SQLite
Cloud DevOps CI/CD

Code Keeper — CI/CD Pipelines

End-to-end CI/CD for a three-service microservices app: a self-hosted GitLab deployed with Ansible, and Terraform-provisioned staging and production environments on AWS, with a manual approval gate before every production release.

  • Self-hosted GitLab + Runner, deployed via Ansible roles
  • Infra pipeline: init → validate → plan → staging → approval → production
  • App pipelines: build → test → scan → containerize (ECR) → deploy
  • Protected branches, least-privilege IAM, no credentials in code
GitLab CI Ansible Terraform AWS ECS / ECR Python bandit / pip-audit
Cloud DevOps AWS

Cloud Design — Microservices on AWS

Designed and deployed a six-container microservices app on AWS with Terraform and ECS — secured with Cognito auth and HTTPS through CloudFront, auto-scaled, monitored, and built to be cost-effective.

  • Modular Terraform: VPC, ECS, ECR, Cognito, CloudFront, monitoring, budgets
  • Cognito JWT auth; databases & RabbitMQ reachable only inside the VPC
  • CloudWatch logs, alarms & dashboard, plus budget alerts
  • Cost-driven design: no ALB / NAT, SSM Session Manager instead of SSH
AWS Terraform ECS Cognito CloudFront CloudWatch
Systems

Localhost HTTP Server

A high-performance HTTP/1.1 server written in Rust using event-driven I/O. Supports CGI (Python), virtual hosting, session auth, and file uploads. Siege-tested at 99.5% availability with zero memory leaks and a stable 6.7 MB footprint under up to 5,000 concurrent connections.

Rust Python CGI HTTP/1.1
View on GitHub
Cloud DevOps Kubernetes

Orchestrator — Kubernetes (K3s)

Deployed a six-service microservices architecture on a two-node K3s cluster (master + agent) provisioned with Vagrant, and managed end-to-end by a single orchestrator.sh script.

  • CPU-based horizontal autoscaling (HPA, 1–3 replicas at 60%)
  • Databases & billing service as StatefulSets with persistent volumes
  • Credentials only in Kubernetes Secrets, manifests managed with Kustomize
  • Custom images built from Debian and pushed to Docker Hub
Kubernetes / K3s Vagrant Docker Hub Bash PostgreSQL RabbitMQ
Game Dev Multiplayer

Maze Wars — Multiplayer FPS

A multiplayer first-person shooter in Rust with 2.5D raycasting graphics, procedurally generated mazes, real-time UDP networking, server-authoritative state, and support for up to 10 concurrent players.

Rust UDP Networking Raycasting Proc. Generation
Systems Graphics

Ray Tracing Renderer

A realistic 3D rendering engine in Rust using ray-tracing. Renders spheres, planes, and cylinders with accurate lighting, reflections, and interactive camera controls — zoom, rotation, and viewpoint changes.

Rust Ray Tracing 3D Graphics
View on GitHub
Systems Cloud DevOps

Deep in System

Full Ubuntu Server setup on VirtualBox — manual disk partitioning, SSH hardening, UFW firewall, user management, FTP server, MySQL, WordPress deployment, automated backups with cron jobs, and a complete security audit.

Linux / Ubuntu Bash MySQL SSH / Firewall
Full Stack

Real-Time Forum

A forum with real-time private messaging via WebSockets, post categories, filtering, and secure session auth — built entirely in Go and vanilla JS.

Go WebSockets SQLite JavaScript
Cloud DevOps Docker

Play with Containers — Docker Compose

Containerized a microservices movie platform with Docker Compose — six custom-built images, a private network where only the gateway is exposed, persistent volumes, and automatic restarts on failure. Extended with a React frontend served by nginx, movie poster uploads, and Swagger UI docs.

Docker Docker Compose React nginx PostgreSQL RabbitMQ
Microservices Cloud DevOps

CRUD Master — Microservices API

A movie-streaming backend of three Flask services on three Vagrant VMs: an Inventory CRUD API on PostgreSQL, a Billing service consuming orders from RabbitMQ, and an API Gateway routing between them — orders queue safely even while billing is down.

  • Asynchronous billing via RabbitMQ message queue
  • PM2 process management, OpenAPI docs & Postman test suite
Python Flask PostgreSQL RabbitMQ Vagrant PM2
Full Stack Team Project

IT College Room Booking System

Multi-role room booking platform for a college, built in an Agile team. Admin dashboards, conflict-detection algorithms, reporting, commenting system, and full responsiveness.

PHP MySQL Tailwind JavaScript
Dashboard

GraphQL Profile Dashboard

A personal stats dashboard querying the Reboot01 GraphQL API — visualises XP growth, skill distribution, audit ratios, and user levels with interactive charts.

Next.js GraphQL React ApexCharts
View on GitHub
Systems

0-Shell

A minimalist Unix shell in Rust using raw system calls — no external binaries, no bash. Implements echo, pwd, cd, ls, cat, mkdir, cp, mv, rm and more, inspired by BusyBox. Handles quoting, flags, and robust error handling.

Rust Unix Syscalls POSIX
View on GitHub
Networking Cloud DevOps

Deep in Net

Built and configured multiple network topologies in Cisco Packet Tracer — static IPs, VLANs, routing, DNS, HTTPS, FTP, and full connectivity validation across complex multi-device networks.

Cisco Packet Tracer TCP/IP Routing & VLANs DNS / FTP / HTTPS
Networking

Net-Cat

A re-implementation of netcat in Go — TCP group chat rooms with connection limits, timestamps, message history for new joiners, and graceful disconnection handling.

Go TCP CLI
Networking

Wget Clone

A feature-complete Go implementation of wget — single file downloads with progress tracking, concurrent downloads, rate limiting, background mode, and full website mirroring.

Go HTTP CLI
View on GitHub
AI Algorithms

AI Game Bot — Filler

A strategic game bot that analyses the board state and calculates optimal moves using heuristic evaluation — achieving an ~80% win rate against competing bots.

Go AI / Heuristics Game Theory
View on GitHub
Simulation Algorithms

Smart Road Simulation

A traffic flow simulation modelling vehicles navigating intersections using concurrent goroutines — avoiding collisions, deadlocks, and race conditions while maximising throughput.

Go Concurrency Simulation
Algorithms

Lem-in (Ant Farm Pathfinding)

Finds the optimal set of non-colliding paths through a tunnel network to move ants from start to end in the fewest turns — custom max-flow / BFS implementation in Go.

Go Graph Theory BFS / Max-Flow
View on GitHub
OOP / Data Structures

Library Management System

A menu-driven library system in Java using OOP principles — LinkedList-based storage, member management, issuance tracking, book limits, and clean encapsulated architecture.

Java OOP Data Structures

Skills

Programming & Development

Languages
Go Rust Python Java PHP JavaScript TypeScript
Frontend
React.js Next.js Tailwind CSS HTML & CSS AJAX
Backend & APIs
RESTful APIs WebSockets GraphQL Session Auth Flask RabbitMQ Microservices
Cloud & DevOps
AWS (Cloud Practitioner) Docker & Compose Kubernetes (K3s) Terraform Ansible GitLab CI/CD Vagrant Linux Git & GitHub Bash
Databases
MySQL PostgreSQL SQLite

Cybersecurity

Offensive & Defensive
Penetration Testing Ethical Hacking Nmap / Nikto / SQLMap / Nuclei OWASP ZAP Metasploit Vulnerability Scanning CTF Competitions
Governance & Risk
Risk Management IT Auditing Security Ethics Secure Software Dev User Access Reviews
Networking
Network Security TCP/IP & Routing Firewalls & SSH VLANs & DNS
Uni Coursework
Secure Software Development Data Structures & Algorithms Network Security Risk Management IT Auditing Penetration Testing Ethical Hacking

Get in Touch

Open to opportunities, collaborations, and interesting conversations.

Feel free to reach out — whether it's about a project, an opportunity, or just to say hi. I'll get back to you as soon as I can.