Alexandre Dulaunoy
Co-Chair - OASIS Cyber Threat Intelligence (CTI) TC
Luxembourg
Summary
🤩
Rockstar
Top expert inCybersecurity Analytics and Threat Intelligence
Alexandre Dulaunoy is a cybersecurity researcher and engineer with 18 years of experience who co-chairs the OASIS Cyber Threat Intelligence TC and leads research at CIRCL, driving automated information sharing and real-time network defense. A core member of the MISP project, he has deep hands-on expertise building back-end tooling for threat intel — from enrichment modules and taxonomies to warning lists and galaxy documentation — and has contributed notable improvements to widely used projects like PyMISP and cve-search. He blends academic lecturing and community-building (co-founding hack.lu) with practical engineering, often implementing Python-based indexing, Redis caching, and Whoosh full-text tooling. Known for enjoying unexpected human–machine interactions, he combines playful curiosity with rigorous operational security, making complex threat data more machine-readable and actionable.
19 years of coding experience
24 years of employment as a software developer
Stackoverflow
130reputation
12kreached
5answers
0questions
Github Skills (52)
data-formats10
json10
apim10
asciidoc10
back-end-development10
python10
redis10
api-design10
api-client10
msp10
data-format10
mongodb-database10
api10
data-extraction10
rest-api10
Programming languages (29)
Github contributions (5)
MISP/misp-modules
Feb 2016 - Jan 2023
Modules for expansion services, enrichment, import and export in MISP and other tools.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:4 releases, 550 commits, 266 PRs in 7 years
Contributions summary:Alexandre primarily contributed to the development of expansion modules, enrichment services, and other tools for MISP. Their work involved implementing a DNS expansion module using Python and the `dns.resolver` library, adding a passivetotal expansion module, and integrating a caching module with Redis. The user also made improvements to the module server, including adding logging, versioning, and module type information.
exportmisppassive-dnsimport-and-exportexpansion
MISP/misp-warninglists
Apr 2016 - Jan 2023
Warning lists to inform users of MISP about potential false-positives or other information in indicators
Role in this project:Backend Developer
Backend DeveloperContributions:2 releases, 1 review, 386 commits in 6 years 10 months
Contributions summary:Alexandre primarily contributed to the development of warning lists, which involved creating tools to extract and generate data from various sources. Their work included implementing Python scripts to fetch data from external APIs (e.g., Alexa, Office 365, Azure, VPN providers, and Chrome CrUX) and format it into JSON warning lists. They also updated existing scripts to incorporate new features, address identified issues, and generate documentation.
mispfalse-positivedfirinformsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.