Tom Durand-Gasselin

Freelance DevSecOps & Backend mission on a Go financial application for an asset management fintech (>€500M AUM).

· Secure CI/CD pipeline via TeamCity: build, automated tests, quality gates and deployment

· Go (Golang) backend development: REST API, financial business logic, data processing

· Application security: security code reviews, secrets management, dependency hardening

· Infrastructure as Code: automation of environments and pipelines

Stack: Go · Rust · TeamCity · CI/CD · Python · Linux

I worked as a CISO in a startup, where I managed automated deployment and security (IAM, WAF, pentests) on OVH. As a Python/Django backend developer, I implemented security controls, automatic email verification, and multi-factor authentication (MFA). I also automated infrastructure provisioning with Python CDKTF (Terraform), integrating security checks and automated scripts.

DevSecOps Engineer apprentice within the IT subsidiary of BNP Paribas — regulated environment, critical infrastructure, 2+ years.

· Discovered a 0-day in production via Rust fuzzing and symbolic execution — validated by the internal security team

· End-to-end DevSecOps pipeline: SAST, DAST, secrets scanning (HashiCorp Vault), container hardening

· Accelerated IBM BPM processes via JavaScript + Bash automation — significant reduction in downtime

· Server monitoring tool with secure DB access via Python & HashiVault

· Python orchestrator (Airflow) + automated deployments Terraform & Ansible

Stack: Python · Rust · Terraform · Ansible · HashiCorp Vault · Airflow · Bash · JavaScript · Docker · Linux