Rémi Cattiau

• Built and lead the security team and program across compliance, application, cloud and corporate security.
• Run the compliance program behind enterprise and regulated deals (SOC 2, PCI DSS, HIPAA, NIST 800-53).
• Application security through a secure SDLC, a bug bounty program and regular penetration tests.
• Cloud security on GCP and AWS, including Kubernetes hardening, WAF, network security and intrusion detection.
• Negotiate security terms in customer contracts and run risk management and third-party assessments.

GCP, AWS, Kubernetes, Go, Python, Java, TypeScript

• Created the security program, which supported 25% yearly business growth by meeting the security requirements of enterprise customers.
• Compliance program for PCI DSS and SOC 2.
• Managed the bug bounty program, penetration tests and the security fix process.
• Chose and deployed AWS tooling for cost management, intrusion detection and cloud security policies.
• Rolled out single sign-on, network security and asset management across the company.

AWS, Java, Python, Ansible, Docker, Jenkins

• Designed on-demand Nuxeo clusters on AWS with Rancher, Docker and Ansible.
• Rebuilt Nuxeo Drive as a multithreaded application (FSEvents, WebKit and AngularJS UI), grew it past 4,000 users and let customers white-label it.
• Designed and built Nuxeo Edge Cache, an on-premise service that caches Nuxeo binaries locally and securely to cut bandwidth to Nuxeo Cloud.
• Delivered archiving and cloud document management projects on Nuxeo and Nuxeo Drive.

AWS, Java, Python, MongoDB, AngularJS, Polymer, Docker, Rancher, Ansible

• Author of Webda (webda.io), an open-source TypeScript framework for serverless and microservice applications.
• Ported STS SaaS Manager to AWS (fault tolerance, JMS, S3, cluster management) and led its team through the next major version while supporting older releases.
• Implemented PCI DSS, the NF Z42-013 archiving standard and the French registered electronic mail law, with chained and signed audit logs and card data encryption.
• Hardened web servers with encrypted backups (AES, RSA), DRBD replication and iptables firewalls.

AWS, Node.js, TypeScript, Kubernetes, Docker, Linux

• Technical lead for a 25-person R&D department; knowledge sharing on GWT and Hibernate Search, technical debt tracking with Sonar.
• Improved continuous integration through coding dojos, unit tests and code coverage.
• Proofs of concept for Nuxeo integration, product convergence, Hibernate Search with Lucene, and SSO with PasswordBank and SAML.

Java, Spring, Hibernate, GWT, Jenkins, Ant, Ivy

• Designed STS SaaS Manager, a secure archiving and exchange platform (GWT, Spring, Hibernate) deployed on Linux and Windows with Oracle, SQL Server and MySQL.
• Led the 8-person development team with Scrum, working with product management and QA.
• Launched an offshore team in Shanghai, with specifications and on-site training.

Java, Spring, Hibernate, GWT, Jenkins

• Document dematerialization projects for insurance contributions, integrating Keyvelop and STS products.
• Proof of concept of a multi-tenant SaaS exchange and archiving product, which became STS SaaS Manager.

PHP, MySQL