Maxime Arthaud is a software engineer with 12 years of experience specializing in static analysis, security, and compilers, currently building product security analyzers at Meta in Paris. He has deep expertise in abstract interpretation across languages—C/C++, Java (Android), and Python—contributing to high-impact open-source projects like Mariana Trench, Pyre/Pysa and NASA’s IKOS. His work blends low-level correctness (bytecode optimizations, concurrency fixes) with tooling and build reliability (cross-platform build systems, shared-memory and dependency fixes), making security analyses both precise and practical. A former NASA engineer, he has run analyses on flight-critical software and found dozens of bugs, and he still codes for security tooling outside work, rewriting and hardening tools like git-dumper. Known for smoothing complex build and release workflows, he pairs rigorous academic training with hands-on delivery in production security systems.
12 years of coding experience
8 years of employment as a software developer
Master’s Degree Distributed System and Critical Software, Master’s Degree Distributed System and Critical Software at ENSEEIHT
Preparatory classes Mathematics and Physics, Preparatory classes Mathematics and Physics at Lycée du Parc
Contributions:1 release, 14 reviews, 40 commits in 5 years 2 months
Contributions summary:Maxime primarily focused on improving the security of the `git-dumper` tool. Their contributions involved a complete rewrite to incorporate multi-processing, fixing a race condition, and implementing various security enhancements, including directory traversal protection and disabling unverified HTTPS warnings. Additionally, the user added the ability to provide HTTP headers and made updates to leverage Dulwich for Git interactions.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
Role in this project:
Back-end Developer
Contributions:5 releases, 25 reviews, 410 commits in 5 years 2 months
Contributions summary:Maxime primarily worked on the `ikos` repository, a static analyzer for C/C++ code based on abstract interpretation. The commits focused on enhancements to core functionalities. Specifically, the user made fixes for version 0.9.10 of APRON, improved the implementation of the modulo operator and memory write operations, and added support for the handling of thread local storage in the analyzer.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.