Laurent Simon
Security Engineer at Google
San Francisco Bay Area United States
Summary
🤩
Rockstar🎓
Top SchoolLaurent Simon is a Security Engineer based in the San Francisco Bay Area with a PhD in Computer Security from the University of Cambridge and six years of industry experience spanning Google and Samsung Research America. He blends deep research pedigree with hands-on DevOps and backend work, improving CI/CD, dependency management, and build reliability for high-profile open-source projects like Google’s FuzzBench and the OpenSSF Scorecard. At Google he focuses on supply-chain and tooling security, contributing practical fixes—Dockerfile, build script, and GitHub Actions improvements—that reduce fragility and harden verifier workflows. Comfortable across Go, fuzzing ecosystems, and provenance tooling (e.g., sigstore/SLSA), he brings a rare mix of fuzzing, provenance, and CI security expertise that’s often overlooked in conventional security roles.
6 years of coding experience
4 years of employment as a software developer
Doctor of Philosophy - PhD, Computer and Information Systems Security/Information Assurance, Doctor of Philosophy - PhD, Computer and Information Systems Security/Information Assurance at University of Cambridge
Github Skills (22)
dependency-management10
github-ci10
benchmark10
docker10
evaluation10
it-security10
benchmarking10
dockers10
cicd10
gcp10
security10
go10
fuzzing10
githubaction-workflow10
testing9
Programming languages (16)
Github contributions (5)
slsa-framework/slsa-github-generator
Mar 2022 - Jan 2023
Language-agnostic SLSA provenance generation for Github Actions
Role in this project:
Full-stack Developer & DevOps Engineer
Full-stack Developer & DevOps EngineerContributions:21 releases, 1086 reviews, 141 commits in 10 months
Contributions summary:Laurent primarily contributed to the codebase by updating dependencies and refactoring build configurations. They worked on updating the Go module dependencies, including security-related libraries such as sigstore. They also introduced and improved CI/CD processes by integrating and fixing GitHub Actions workflows, focusing on fetching and verifying builder binaries, and enhancing the overall build process. The user’s work involved both backend (Go) and DevOps tasks, making them a full-stack and DevOps contributor.
security-toolsagnosticsecurityprovenanceslsaprovenance
ossf/scorecard
May 2021 - Dec 2022
OpenSSF Scorecard - Security health metrics for Open Source
Role in this project:Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:10 releases, 1482 reviews, 255 commits in 1 year 7 months
Contributions summary:Laurent's contributions primarily revolved around the improvement and maintenance of the OpenSSF Scorecard project. The user addressed a segfault issue, implemented sub-checks to the Branch-Protection feature, and incorporated dependency pinning within docker files. Further, the user demonstrated a strong understanding of CI/CD by contributing to the GitHub Actions workflows, verifying secrets, and enabling various security-related practices.
security-toolssecurityhealthscorecardopenssf
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.