I'm an Application Security Engineer dedicated to embedding security seamlessly into the software development lifecycle. My day-to-day involves working closely with developers, DevOps, and security teams to automate, monitor, and continuously improve application security.
-
DevSecOps Focus:
I specialize in integrating security tools (SAST, SCA, DAST, IAST) across CI/CD pipelines, enabling early detection of vulnerabilities and compliance issues without slowing down delivery. -
Security as Code:
I advocate for “security as code” practices: codifying security checks, policies, and controls so they are versioned, testable, and repeatable.
On my GitHub profile, you will mostly find tools and scripts I use on a daily basis, my former student projects, and some personal coding projects.
- Onepoint — Application Security Consultant — 2024-present
- FDJ — Internship: AWS Cloud Security — 2023
- ECE Paris — Engineering school — Cybersecurity Major — 2019-2024
- Edinburgh Napier University — Study abroad semester — 2021
| 🛡️ Security & DevSecOps | 💻 Languages & Frameworks | ☁️ Cloud & Automation |
|---|---|---|
| SAST (Checkmarx, SonarQube, Semgrep, CodeQL, ...) SCA (Dependency Check, Depscan, Dependabot, ...) DAST/IAST (OWASP ZAP, Trivy, ...) GHAS Suite |
        |
      |
- GitHub Advanced Security (GHAS)
- AWS Solutions Architect Associate & Cloud Practitioner
- HashiCorp Vault Associate
- 👉 See all my badges on Credly
While security is my main focus, I also enjoy coding and building applications, mostly with:
- Frontend: Next.js, React, TypeScript, Tailwind CSS
- Backend: C# / .NET, Node.js
- Personal Projects: Check out my pinned repositories below for a few of my favorites!
