Guillaume Assier

I worked in the detection division of ANSSI. Our role was to develop SIEM tooling and collect a huge volume of logs for the division * Designing and implementing an edge-based deployment platform based on Linux and Kubernetes, meeting high security and maintainability requirements (K3s, ArgoCD, Cilium, Bootc, and Fedora) * Preparation and monitoring of a pentest by an external service provider. Pentest successful, no critical vulnerabilities found * Automating of deployment services (Ansible, GitLab-CI IaC) * Implementing DAGs for business data collection and processing (Python, Apache Airflow) * Participation in recruitment processes (Technical architecture tests)

I worked in the traffic team witch in charge of develop and operate a fleet of our load balancer sozu. * Performing load balancer maintenance and upgrading in realtime without downtime (Ansible, Exherbo Linux, Sozu) More than 100 instances * Automating of deployment services and testing (Ansible, IaC, Sozu) * Packaging of rust applications (Exherbo Linux) * Implementing an ETL pipeline to extract and transform access logs (Vector, VRL) * Implementing automation performance regression tests (Python, Github Actions) * Providing Level 2/3 technical assistance to customers

I worked in the security architect team. I conducted tests and implemented automated security testing tools on internal Java projects. * Implement a shift left approach by embedding security tests inside CI/CD pipelines * Test and implement static code and packaging analysis (OWASP Dependency-Track, OWASP Cyclone DX) * Setup secrets detection in git repositories CI (Gitlab-CI) * Setup containers security compliance tests (Trivy)