Romain Ricard

Graduated from Mines and INSA Lyon, I spent 7 years understanding security from all angles: as a lead pentester, building application security platforms, and supporting engineering teams with their security challenges.

At Hackuity, I had the opportunity to experience this dual role: conducting penetration tests while developing security platform features, integrating SAST/DAST/SCA tools, and supporting development teams with their security questions. This experience taught me to translate complex technical vulnerabilities into actionable recommendations, whether for developers or executives.

As an independent consultant, **I support organizations with their technical security challenges**: secure architecture, integrating security into development pipelines (DevSecOps) and processes, choosing and implementing application security tools, threat modeling, and training and upskilling technical teams.

Pragmatic and results-oriented. I don't do security for security's sake: I aim to raise cybersecurity maturity levels without slowing down innovation or overwhelming teams with unnecessary processes.