Romain Thomas
Senior Security Engineer at ESIEA - ÉCOLE D'INGÉNIEUR·E·S D'UN NUMÉRIQUE UTILE
Paris, Ile-de-France
Summary
🤩
Rockstar🎓
Top SchoolRomain Thomas is a Senior Security Engineer based in Paris with 11 years of hands-on experience in mobile security, obfuscation and executable file formats. He develops protections and tooling for Android and Windows platforms and has deep practical knowledge of DEX/ART/OAT and ELF/Mach-O internals, reflected in his long-term contributions to the LIEF project. Creator of Open-Obfuscator and an active contributor to Triton, he combines reverse-engineering expertise with systems-level tooling to improve analysis, signing and memory-handling workflows. As a trainer and evening instructor, he regularly translates advanced research into teachable courses on Android reverse engineering and executable formats. Notably, his work often addresses subtle runtime issues—memory leaks, code-signing quirks and taint propagation—that make real-world protections more robust.
11 years of coding experience
8 years of employment as a software developer
Baccalauréat, Sciences, Baccalauréat, Sciences at Lycee Maurice RavelBachelor's degree, Génie Informatique, Bachelor's degree, Génie Informatique at Université de Montréal - Ecole polytechnique de MontréalESIEE PARIS
French, English
Github Skills (17)
c-language10
python10
taint10
mach-o10
binarydiff10
dynamic-analysis10
elf10
reverse-engineering10
cprogramming-language10
program-analysis10
semantics9
build-system9
cmake9
semantic9
error-handling9
Programming languages (12)
Github contributions (5)
lief-project/LIEF
Mar 2017 - Jan 2023
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Role in this project:
Back-end Developer
Back-end DeveloperContributions:44 releases, 22 reviews, 1268 commits in 5 years 10 months
Contributions summary:Romain primarily focused on fixing issues related to ELF format, including handling errors, improvements for section and segment information, and resolving memory leaks within the ELF builder and parser. They also addressed issues around code signing and various aspects of the Mach-O format, involving aspects like rebase and binding opcodes and code signature and adding new command. Furthermore, the user enhanced the project by adding tests for various functionalities, including object files and object file modifications, also adding support for OAT, DEX, VDEX, ART formats. They also added helper functions for general tasks.
vdexbinary-analysispythonelfexecutable-formats
JonathanSalwan/Triton
Jun 2015 - Mar 2021
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
Role in this project:Back-end Developer
Back-end DeveloperContributions:61 commits, 42 PRs, 13 pushes in 5 years 9 months
Contributions summary:Romain focused on enhancing the Triton dynamic binary analysis library. Their primary contributions involved adding and modifying taint-related functionalities, specifically implementing functions like `taintMemFromAddr` and `untaintMemFromAddr` within the Python bindings and processing configurations. These changes indicate a focus on improving memory analysis capabilities, which is essential for dynamic binary analysis and reverse engineering tasks. Further contributions involve adding new features and merging changes from other branches.
binary-analysisemulatoremulateengineeringabstract-interpretation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.