Senior Software Engineer · Security Tools Builder
15+ years enterprise experience · Master's in CS & Data Science · Tech Lead @ CAC40 clients
Enterprise software engineer turned open-source security researcher. I spent 15+ years architecting and leading delivery of complex systems for CAC40-listed companies — Essilor, Carmignac Gestion, CACIB, AXA, Eurosport, Conduent — before shifting full focus to open-source tooling.
Today I build cyber security tools, exploit proof-of-concepts, web/API pentesting tooling, and privacy-first cryptographic applications. My work encodes hard-won audit expertise into executable, pattern-driven detection engines.
Available immediately for permanent positions, freelance/consulting, and co-founder opportunities.
Pattern-driven detection across ZK circuit layers — Circom · Noir · Cairo · Halo2 — and the EVM.
| Project | Description | Stack |
|---|---|---|
| ZkPatternMatcher | Structural pattern matching for ZK constraint systems. Scan ZK code against YAML patterns to surface security issues. | Rust |
| smartcontractpatternfinder | YAML-pattern static analysis for Solidity/EVM. High-performance scanner with SARIF output and CI/CD integration. | Rust · Solidity |
| Project | Description | Stack |
|---|---|---|
| circomlib-exploit | Circomlib vulnerability exploitation research and PoCs. | Shell |
| fft-exploit-poc | FFT-based ZK proof system exploit proof-of-concept. | Shell |
| zklibreports | Structured findings and audit reports from ZK library research. | Solidity |
| Project | Description | Stack |
|---|---|---|
| BurpAPISecuritySuite | Burp Suite extension — 15 attack types, 108+ payloads, BOLA/IDOR detection, AI-assisted analysis. Supports REST · GraphQL · SOAP. | Python |
| Excalibur | Dual-component WAF/CAPTCHA/anti-bot bypass framework. Chrome extension records traffic; Burp extension replays with captured cookies. | Python |
| Mcpwn | Security testing framework targeting MCP (Model Context Protocol) attack surfaces. | Python |
| BurpCopyIssues | Burp Suite extension for streamlined issue export and reporting. | Python |
| BurpWpsScan | Burp Suite extension for WordPress security scanning. | Python |
| burp-mcp-server | MCP server interface for Burp Suite tooling. | JavaScript |
| IotScanner | IoT device discovery and attack surface scanning. | Python |
| honeypotscan | Free honeypot token scanner for Ethereum, Polygon & Arbitrum. 13 detection patterns, no API keys required. | TypeScript |
| Project | Description | Stack |
|---|---|---|
| Sanctum | Zero-trust encrypted vault with cryptographic plausible deniability. RAM-only, IPFS-backed. Built for activists, journalists, and whistleblowers. | TypeScript · Next.js |
| Timeseal | Time-locked AES-256 encryption with a Dead Man's Switch. Messages auto-release if you go silent. Split-key crypto, ephemeral seals. | TypeScript · React |
| GhostChat | True P2P encrypted chat over WebRTC — no servers, no storage, no accounts. Self-destructing messages, panic wipe. | TypeScript · React |
| xmrproof | Client-side Monero payment verification using transaction private keys — no view key sharing, stateless, self-hostable. | TypeScript · Next.js |
| TrustCircle | File timestamping vault backed by IPFS. | Next.js |
| EmojiSmuggler | Emoji steganography tool — hide payloads inside emoji sequences. | HTML · JavaScript |
| Project | Description | Stack |
|---|---|---|
| DiffCatcher | Rust CLI that recursively discovers Git repos, captures state changes, extracts code elements with snippets, and produces security-focused review reports. | Rust |
| PygubuAI | AI-assisted Python GUI tooling. | Python |
| Project | Description | Stack |
|---|---|---|
| Chuckle | AI-powered meme generator Chrome extension. | TypeScript |
| Gist | Chrome extension to summarize, store, and share web searches using AI. | HTML |
| ScrambleText | Text scrambler Chrome extension. | TypeScript |
| SolarClose | Solar energy economy calculator for sales teams. | JavaScript |
15+ years leading delivery for major corporations in France — full stack from DB to architecture.
| Period | Role | Company | Sector |
|---|---|---|---|
| 2019–2023 | Tech Lead | Essilor (CAC40) | Optics / MedTech |
| 2018–2019 | Tech Lead | Conduent (ex-Xerox) | Public Transport / Ticketing |
| 2016–2017 | C# Engineer | Docapost (ex-Monéo Applicam) | Energy / Retail |
| 2016 | C# Engineer | Deltametrics | Finance / FinTech |
| 2014–2016 | C# Engineer | Carmignac Gestion | Asset Management |
| 2011–2013 | C# Engineer | Kernel Networks | Cyber Security |
| 2010–2011 | C# Engineer | Eurosport | Media |
| 2009–2010 | C# Engineer | CACIB (ex-Calyon) | Investment Banking |
| 2008 | C# Engineer | AXA Risk Management | Insurance |
Core enterprise stack: C# · ASP.NET MVC · WCF · WinForms · Entity Framework · T-SQL · Oracle · SQL Server · TFS · BizTalk · Roslyn · DevExpress · SSRS
| 🎓 M.Sc. Data Science | OpenClassrooms & CentraleSupélec — April 2022 |
| 🎓 M.Sc. Computer Science (Valedictorian) | Université Marne-La-Vallée — July 2008 |
| 📜 Microsoft MCPD .NET 4 Desktop & Web | 2009–2014 |
| Certificate | Issued | Credential ID |
|---|---|---|
| ⬛ Noir Programming And ZK Circuits | Feb 2026 | 6ED68LHJDH67 |
| 🔮 Fundamentals of Zero-Knowledge Proofs (ZKPs) | Feb 2026 | J7F6NHCS92U2 |
| 🔐 Smart Contract Security | Aug 2025 | EJI899QOU169 |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| Ethereum Blockchain Developer Bootcamp With Solidity (2025) | Udemy | May 2025 | Solidity · Blockchain |
| Advanced Solidity: Understanding and Optimizing Gas Costs | Udemy | May 2025 | Solidity · EVM · Gas |
| Advanced Solidity: Yul and Assembly | Udemy | May 2025 | Solidity · Yul · Assembly |
| Blockchain A-Z: Build a Blockchain, a Crypto + ChatGPT Prize | Udemy | Apr 2025 | Solidity · Blockchain |
| Create a Metaverse using Three.js, Solidity and NFT Tokens | Udemy | May 2025 | Solidity · Web3 · Three.js |
| DeFi — Decentralized Finance: Future of Finance Masterclass | Udemy | Mar 2025 | DeFi |
| Blockchain for Business: The New Industrial Revolution | Udemy | Mar 2025 | Blockchain |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| Ethical Hacking: Blockchain & Smart Contract Security 2025 | Udemy | Apr 2025 | Blockchain Security |
| The Complete Cyber Security Course: Hackers Exposed! | Udemy | Jan 2025 | Pentesting · CyberSec |
| Breaking APIs: An Offensive API Pentesting Course | Udemy | Feb 2025 | API Pentesting |
| Learn Bug Bounty Hunting & Web Security Testing From Scratch | Udemy | Feb 2025 | Bug Bounty · Web Security |
| The Complete Nmap Ethical Hacking Course: Network Security | Udemy | Jan 2025 | Nmap · Network Security |
| Cyber Security Social Engineering — Hacking Human Firewalls | Udemy | Jan 2025 | Social Engineering |
| Assembly Language Programming for Reverse Engineering | Udemy | Mar 2025 | x86 Assembly · RE |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| Rust: The Complete Developer's Guide | Udemy | May 2025 | Rust |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| LLM Mastery: ChatGPT, Gemini, Claude, Llama3, OpenAI & APIs | Udemy | Dec 2024 | LLMs · AI APIs |
| Hugging Face — Transformers.js: Free AI Models for JavaScript | Udemy | Dec 2024 | AI · JavaScript |
| NextLevel Images with Generative AI and Stable Diffusion GUI | Udemy | Dec 2024 | Generative AI |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| The Ultimate Modern Next.js Complete Course 2024 | Udemy | Nov 2024 | Next.js · MongoDB |
| Interactive Web Animation — JavaScript SVG CSS & Canvas | Udemy | Oct 2024 | Frontend · Animation |
| Web Performance In Practice: Master Core Web Vitals & More | Udemy | Oct 2024 | Web Performance |
| Advanced SEO Strategies 2024 — Level Up Your SEO Knowledge | Udemy | Nov 2024 | SEO |
| DESIGN RULES: Principles + Practices for Great UI Design | Udemy | Sep 2024 | UX/UI Design |
| Certificate | Platform | Issued | Skills |
|---|---|---|---|
| Hands on With Docker & Docker Compose From a Docker Captain | Udemy | Nov 2024 | Docker |
| Upgrade Your Clean Code Skills to Top Industry Standards | Udemy | Sep 2024 | Code Quality |
| Certificate | Platform | Issued | Credential ID |
|---|---|---|---|
| Microsoft Certified Professional Developer (MCPD) | Microsoft | Jan 2013 | 6865160 |
Languages
Frameworks & Platforms
Databases
Data Science
| 🇹🇳 Arabic | Native |
| 🇫🇷 French | Fluent |
| 🇬🇧 English | Fluent |
| 🇮🇹 Italian | Conversational |
Open to: Permanent positions · Freelance & consulting · Co-founder opportunities
Focused on the intersection of cryptographic systems and adversarial security research.
