Gabriel Marquet
Security Researcher at Escape
Paris, Ile-de-France
Summary
🤩
Rockstar🎓
Top SchoolGabriel Marquet is a Security Researcher based in Paris with a decade of experience helping development teams find and fix vulnerabilities through threat modeling, penetration testing, and SAST/SCA/DAST review. He blends hands-on security engineering with curiosity for systems-level instrumentation, using OS- and application-level tracing and eBPF to build aggregated views of microservice interactions that enhance and help automate threat models. A former Principal Product Security Engineer at Talend and contributor to the widely used DefectDojo vulnerability management platform, he focuses on reducing scanner noise by dissecting tooling to root causes of false positives. Gabriel is exploring novel reachability, filesystem activity analysis, and SBOM/VEX-driven workflows to scale CVE triage across the open-source community. He pairs a strong engineering background with practical research, preferring to build defenses as much as he breaks them.
10 years of coding experience
6 years of employment as a software developer
Master of Science (MS) Ingénierie, Master of Science (MS) Ingénierie at ESILV - Ecole Supérieure d'Ingénieurs Léonard de VinciComputer Engineering, Computer Engineering at University of California, Riverside
French, English
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (10)
vulnerability-management10
python10
django10
security10
apidoc9
automations9
automation9
api9
devsecops8
testing8
Programming languages (22)
Github contributions (5)
DefectDojo/django-DefectDojo
Jun 2022 - Jan 2023
DevSecOps, ASPM, Vulnerability Management. All on one platform.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:38 reviews, 19 commits, 22 PRs in 7 months
Contributions summary:Gabriel primarily contributed to the backend of the DefectDojo project, focusing on bug fixes and enhancements to the reimport functionality. They addressed issues related to reactivating mitigated findings and implemented date-based reimporting mechanisms. Additionally, the user was involved in creating an API importer for Bugcrowd, implementing URI extraction, and integrating various fixes to the importer. They also made adjustments to the Bugcrowd API parser.
pythondjangovulnerability-managementbugbountydefectdojo
Gby56/torrent-searcher
Mar 2017 - Aug 2021
Contributions:2 PRs, 10 pushes, 2 branches in 4 years 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.