Hamadi Gratien

Architecture & Product

• • Definition of the security architecture for embedded modules and associated security requirements.

• • Definition of security requirements for embedded communications.

• • Implementation of Secure by Design principles on legacy and new generation products.

• • Technical coordination with R&D teams and suppliers.

• • Technical support to development teams for the implementation of security mechanisms.

Compliance & Security Assurance

• • Management of the compliance of industrial products according to the IEC 62443 standard.

• • Deployment of the ISO/IEC 27034 standard for an entire R&D department (variable speed activity).

• • Anticipation of the regulatory requirements of the Cyber Resilience Act for legacy products.

• • Performance of product security gap analyses and follow-up of remediation plans.

• • Contribution to application security governance at the variable speed department level.

Risk Analysis & Security Audit

• • Conducting application risk analyses (ISO 27005).

• • Performing security audits and code reviews.

• • Conducting internal application security audits and follow-up of remediation plans.

• • Definition and management of application security testing strategies.

DevSecOps & Security Transformation

• • Integration of security into the product development lifecycle.

• • Deployment of DevSecOps practices and automation of security controls.

• • Awareness and skill development of R&D teams in cybersecurity.

• • Dissemination of the Secure by Design culture among R&D teams.

• • Design of modular and client-server software architectures for critical systems.

• • Design and implementation of security mechanisms: encryption, access control, securing communications, and managing system confidentiality, integrity, and availability.

• • Contribution to technical compliance and traceability of requirements and documents.

• • Development of real-time software components and performance optimization.

• • Technical supervision and participation in the improvement of software engineering, quality, and traceability practices.

• • Design of the client-server architecture.

• • Contribution to technical compliance and requirements traceability, producing engineering documentation to facilitate reviews and audits.

• • Optimization of encryption algorithm performance through GPU parallelization (CUDA).

• • Implementation and validation of critical software components for sensitive operational environments.

• • Contribution to the writing and validation of test plans to support assurance and compliance activities.