Nathan Rodet

Cybersecurity and DevSecOps expert, I intervene to secure the entire lifecycle of your applications, your pipelines, and your cloud-native infrastructure to bring best practices or provide opinions on the security of existing systems.

My approach: security should not be a hindrance. I integrate it from the design phase and automate controls as close to the code as possible, so your teams deliver quickly and effectively.

In DevSecOps, I audit and secure the entire development cycle through manual and automated practices: source code, CI/CD pipelines with SAST, SCA, SBOM generation in CycloneDX format, secrets detection, commit signing. If these terms mean nothing to you, my skills should interest you. I have industrialized these practices on critical systems at Enedis.

In the field of AI applied to security, while it remains a sensitive subject, I integrate augmented analysis tools directly into development workflows. Coupled with the expertise of a specialist, AI today detects more vulnerabilities than traditional SAST tools alone with fewer false positives and at a lower cost, particularly for logical flaws and contextual bad practices that scanners overlook.

In offensive security, with my experience in penetration testing, I primarily practice white-box code audits. I participate in bug bounty programs by private invitation (YesWeHack), I am HTB CPTS certified, and I possess approximately 2,000 Root-me points. This regular practice of attack directly informs my defensive recommendations.

Today at Enedis, I hold the role of Cybersecurity Expert and Tech Lead for the Linky communication chains, in addition to being the security referent for several SIE projects in secure zones, with responsibility for vulnerability management and Security by Design prescriptions within a SAFe framework.

Based in Lyon, available for on-site and remote work.