Jean-michel Picod
Senior Staff Software Engineer at Google
Zurich, Zurich, Switzerland
Summary
🤩
Rockstar🎓
Top SchoolJean-michel Picod is a Senior Staff Software Engineer based in Zurich with 12 years of hands-on expertise in embedded systems, firmware security, and offensive hardware testing. He combines deep reverse-engineering, malware analysis and incident response skills with practical RF and physical-interface pentesting (SDR, JTAG, logic/spectrum analysis, RFID/NFC), and has audited networks, web apps and access-control systems. At Google he works on low-level secure firmware and tooling, contributing to notable open-source projects like OpenSK (FIDO security keys) and Tock OS, where he focused on cryptographic key handling and hardware support. His contributions to proxmark3 and Scapy show a rare blend of protocol-level card/Radio work and packet-level Bluetooth engineering, revealing both practical attack techniques and robust defensive fixes. He holds an MSc in Computer Science with a focus on network security from EPITA and is known for translating complex hardware vulnerabilities into reproducible, build-system-aware fixes.
12 years of coding experience
Master of science, Computer Science, Network Security, Software Development, Master of science, Computer Science, Network Security, Software Development at EPITA: Ecole d'Ingénieurs en InformatiquePTSI / PT*, PTSI / PT* at La Martinière Monplaisir
French, English, Spanish, German
Github Skills (39)
packet-injection10
scapy10
python10
buttons10
network-analysis10
ui-components10
mifare10
firmware10
bluetooth-le10
cortex-m10
rfid10
packet10
c1110
microcontroller10
hardware10
Programming languages (9)
Github contributions (5)
google/OpenSK
Jan 2020 - Oct 2022
OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.
Role in this project:
Embedded Systems Engineer / IoT Developer
Embedded Systems Engineer / IoT DeveloperContributions:1 release, 389 reviews, 219 commits in 2 years 9 months
Contributions summary:Jean-michel primarily focused on low-level system programming and hardware interaction within the context of security keys. They modified build scripts and code related to key material generation, including the handling of OpenSSL-generated cryptographic keys and certificates. Their work involved adapting the build process to extract and embed cryptographic data. They also made changes to the Tock OS build process and build configuration.
nrf52840hardwareu2fcryptographyfirmware
RfidResearchGroup/proxmark3
Oct 2022 - Jan 2023
Iceman Fork - Proxmark3
Role in this project:Back-end Developer & Embedded Systems Engineer
Back-end Developer & Embedded Systems EngineerContributions:7 reviews, 29 commits, 34 PRs in 2 months
Contributions summary:Jean-michel primarily contributed to the `proxmark3` project by modifying code related to Mifare card handling. Their work focused on improving the `hf mf dump` command by attempting key B when key A fails, indicating an understanding of contactless card protocols. Further contributions included fixing return codes, buffer overflows, and addressing ISO7816-4 logic issues. Finally, the user integrated and adapted to SIM module firmware changes.
emulatoricemansnifferreaderiso14443a
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.