Etienne Stalmans
Security Engineer at Supabase
Barcelona, Catalonia, Spain
Summary
🤩
Rockstar🎓
Top SchoolEtienne Stalmans is a Security Engineer based in Barcelona with 11 years of hands-on experience securing cloud platforms, applications, and infrastructure at companies like Supabase, Aiven, and Salesforce. He blends deep offensive security roots from SensePost with large-scale platform security design, having moved from penetration testing into principal and senior security architect roles. At Supabase he contributes both to product hardening and UI-level compliance features, and his open-source work includes substantive contributions to the popular Supabase project and security-focused tooling for Exchange services. Comfortable in Go and backend protocol work, he has practical experience fixing vulnerabilities, implementing stricter validation, and improving observability integrations. His academic background (MSc in Computer Science) underpins a methodical approach to threat modeling and secure-by-design engineering. Colleagues know him for translating complex security requirements into developer-friendly controls that scale across cloud-native environments.
11 years of coding experience
11 years of employment as a software developer
MSc Computer Science, MSc Computer Science at Rhodes University
English, Afrikaans, Spanish
Github Skills (17)
it-security10
typescript10
security10
exchange10
rpc10
go10
typescript-types10
pentesting10
typescripts10
react10
pentest10
postgresql9
nextjs9
auth8
database8
Programming languages (18)
Github contributions (5)
sensepost/ruler
Aug 2016 - Feb 2021
A tool to abuse Exchange services
Role in this project:
Back-end Security Engineer
Back-end Security EngineerContributions:18 releases, 1 review, 66 commits in 4 years 6 months
Contributions summary:Etienne primarily focused on enhancing the functionality and security of the `sensepost/ruler` tool, which targets Exchange services. Their contributions involved implementing and modifying core components related to MAPI protocol interaction, including data structures and RPC calls. They also updated the code to implement features like brute-force password attempts and search functionalities and modified existing code, such as the search function and the autodiscover mechanism, to improve user experience. The user demonstrated proficiency in Go programming and an understanding of Exchange services security vulnerabilities.
abuseexchangemapipentestingshells
supabase/supabase
Jun 2024 - Apr 2025
The open source Firebase alternative. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.
Role in this project:Full-stack Developer
Full-stack DeveloperContributions:71 reviews, 55 PRs, 74 pushes in 9 months
Contributions summary:Etienne contributed to the Supabase project by implementing and modifying various features related to project settings, compliance, and documentation. They updated the Studio UI, including the addition of a compliance configuration option and a SOC 2 docs page. The user also addressed security vulnerabilities by implementing stricter validation for returnTo paths and added additional ingest hosts for Sentry.
realtimefirebase-databasewebsocketsfirestorefollow
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.