As the lead of Security Testing Automation at SAP, I drive the development and implementation of automated security tools, driving a paradigm shift in how SAP approaches security testing. This role is crucial in elevating the efficiency and effectiveness of SAP's security posture, while enhancing developer experience.Key responsibilities include defining and implementing a comprehensive strategy for security tools automation, evaluating third-party security tools and technologies, leading the development and implementation of automated security tools and processes, optimizing security processes, collaborating with internal stakeholders, and staying abreast of emerging security trends and technologies.

𝐴𝑚𝑖𝑑𝑠𝑡 𝑔𝑙𝑜𝑏𝑎𝑙 𝑒𝑐𝑜𝑛𝑜𝑚𝑖𝑐 𝑎𝑛𝑑 𝑒𝑛𝑒𝑟𝑔𝑦 𝑐𝑟𝑖𝑠𝑒𝑠, 𝑒𝑛𝑡𝑒𝑟𝑝𝑟𝑖𝑠𝑒𝑠 𝑠𝑡𝑟𝑖𝑣𝑒 𝑡𝑜 𝑒𝑛ℎ𝑎𝑛𝑐𝑒 𝑜𝑝𝑒𝑟𝑎𝑡𝑖𝑜𝑛𝑠 𝑎𝑛𝑑 𝑚𝑖𝑡𝑖𝑔𝑎𝑡𝑒 𝑟𝑖𝑠𝑘𝑠 𝑏𝑦 𝑖𝑛𝑡𝑒𝑔𝑟𝑎𝑡𝑖𝑛𝑔 𝑚𝑎𝑐ℎ𝑖𝑛𝑒 𝑙𝑒𝑎𝑟𝑛𝑖𝑛𝑔 𝑖𝑛𝑡𝑜 𝑡ℎ𝑒𝑖𝑟 𝑎𝑛𝑎𝑙𝑦𝑡𝑖𝑐𝑠. 𝐻𝑜𝑤𝑒𝑣𝑒𝑟, 𝑚𝑎𝑛𝑎𝑔𝑖𝑛𝑔 𝑐𝑜𝑚𝑝𝑙𝑒𝑥 𝑐𝑟𝑜𝑠𝑠-𝑜𝑟𝑔𝑎𝑛𝑖𝑧𝑎𝑡𝑖𝑜𝑛𝑎𝑙 𝑐𝑜𝑙𝑙𝑎𝑏𝑜𝑟𝑎𝑡𝑖𝑜𝑛 𝑎𝑛𝑑 𝑠𝑡𝑟𝑖𝑐𝑡 𝑑𝑎𝑡𝑎 𝑝𝑟𝑜𝑡𝑒𝑐𝑡𝑖𝑜𝑛 𝑟𝑒𝑞𝑢𝑖𝑟𝑒𝑚𝑒𝑛𝑡𝑠 𝑝𝑟𝑒𝑠𝑒𝑛𝑡𝑠 𝑐𝑜𝑛𝑓𝑙𝑖𝑐𝑡𝑖𝑛𝑔 𝑝𝑟𝑖𝑜𝑟𝑖𝑡𝑖𝑒𝑠. 𝑂𝑢𝑟 𝑎𝑖𝑚 𝑖𝑠 𝑡𝑜 𝑟𝑒𝑐𝑜𝑛𝑐𝑖𝑙𝑒 𝑡ℎ𝑒 𝑛𝑒𝑒𝑑 𝑓𝑜𝑟 𝑡𝑟𝑎𝑛𝑠𝑝𝑎𝑟𝑒𝑛𝑐𝑦 𝑤𝑖𝑡ℎ 𝑡ℎ𝑒 𝑖𝑚𝑝𝑒𝑟𝑎𝑡𝑖𝑣𝑒 𝑡𝑜 𝑠𝑎𝑓𝑒𝑔𝑢𝑎𝑟𝑑 𝑝𝑟𝑖𝑣𝑎𝑡𝑒 𝑏𝑢𝑠𝑖𝑛𝑒𝑠𝑠 𝑖𝑛𝑓𝑜𝑟𝑚𝑎𝑡𝑖𝑜𝑛 𝑎𝑛𝑑 𝑝𝑟𝑜𝑐𝑒𝑠𝑠𝑒𝑠 𝑖𝑛 𝑐𝑟𝑜𝑠𝑠-𝑜𝑟𝑔𝑎𝑛𝑖𝑧𝑎𝑡𝑖𝑜𝑛𝑎𝑙 𝑐𝑜𝑙𝑙𝑎𝑏𝑜𝑟𝑎𝑡𝑖𝑜𝑛𝑠.:: 𝐑𝐨𝐥𝐞Strategy definition, planning and execution for secure distributed enterprise systems, achieving- Business analytics and process automation leveraging on ML & GenAI- Transparency across cross-collaboration making use of blockchain and smart contracts technologies- Data privacy and process IP safeguarding with Confidential Computing:: 𝐊𝐞𝐲 𝐒𝐭𝐚𝐤𝐞𝐡𝐨𝐥𝐝𝐞𝐫𝐬 - 𝐒𝐜𝐡𝐧𝐞𝐢𝐝𝐞𝐫 𝐄𝐥𝐞𝐜𝐭𝐫𝐢𝐜 - 𝐜𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬 - 𝐍𝐕𝐈𝐃𝐈𝐀, :: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐢𝐞𝐯𝐞𝐦𝐞𝐧𝐭𝐬:- Strategy definition, planning and execution for secure distributed enterprise systems- Partnership establishment with key players 𝐍𝐕𝐈𝐃𝐈𝐀, and 𝐜𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬.- Contribution to SAP Security Research Strategy - Co-innovation projects including -- privacy preserving cross-organization collaboration [𝐜𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬] for public procurement-- secure production in assembly line [𝐒𝐜𝐡𝐧𝐞𝐢𝐝𝐞𝐫 𝐄𝐥𝐞𝐜𝐭𝐫𝐢𝐜].-- secure automated sustainability management for public organization- PoC development on SAP BTP, and SAP Hana Express

𝑇ℎ𝑒 𝑟𝑖𝑠𝑒 𝑜𝑓 𝐼𝑛𝑑𝑢𝑠𝑡𝑟𝑖𝑎𝑙 𝐼𝑜𝑇 𝑖𝑠 𝑎𝑢𝑔𝑚𝑒𝑛𝑡𝑒𝑑 𝑏𝑦 𝐴𝐼, 𝑤ℎ𝑖𝑐ℎ 𝑠𝑡𝑟𝑒𝑎𝑚𝑙𝑖𝑛𝑒𝑠 𝑑𝑒𝑐𝑖𝑠𝑖𝑜𝑛-𝑚𝑎𝑘𝑖𝑛𝑔, 𝑐𝑢𝑡𝑠 𝑙𝑎𝑡𝑒𝑛𝑐𝑦 𝑎𝑛𝑑 𝑐𝑜𝑠𝑡𝑠, 𝑎𝑛𝑑 𝑏𝑜𝑜𝑠𝑡𝑠 𝑖𝑛𝑠𝑖𝑔ℎ𝑡𝑠. 𝐸𝑛𝑠𝑢𝑟𝑖𝑛𝑔 𝑠𝑒𝑐𝑢𝑟𝑒 𝑚𝑎𝑐ℎ𝑖𝑛𝑒 𝑙𝑒𝑎𝑟𝑛𝑖𝑛𝑔 𝑠𝑜𝑓𝑡𝑤𝑎𝑟𝑒 𝑖𝑠 𝑖𝑚𝑝𝑒𝑟𝑎𝑡𝑖𝑣𝑒 𝑓𝑜𝑟 𝑠𝑎𝑓𝑒𝑔𝑢𝑎𝑟𝑑𝑖𝑛𝑔 𝑡ℎ𝑒 𝑝𝑟𝑖𝑣𝑎𝑐𝑦 𝑎𝑛𝑑 𝑖𝑛𝑡𝑒𝑙𝑙𝑒𝑐𝑡𝑢𝑎𝑙 𝑝𝑟𝑜𝑝𝑒𝑟𝑡𝑦 𝑜𝑓 𝑑𝑖𝑠𝑡𝑟𝑖𝑏𝑢𝑡𝑒𝑑 𝑀𝐿-𝑏𝑎𝑠𝑒𝑑 𝑎𝑝𝑝𝑙𝑖𝑐𝑎𝑡𝑖𝑜𝑛𝑠.:: 𝐑𝐨𝐥𝐞Strategy definition, planning and execution for secure distributed machine learning, achieving- Data privacy protection, being in compliance with data protection regulations (e.g. GDPR)- ML-based software IP safeguarding leveraging on crypto-based Privacy-Enhancing Technologies:: 𝐊𝐞𝐲 𝐒𝐭𝐚𝐤𝐞𝐡𝐨𝐥𝐝𝐞𝐫𝐬- 𝐂𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬- 𝐍𝐕𝐈𝐃𝐈𝐀- 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭:: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐢𝐞𝐯𝐞𝐦𝐞𝐧𝐭𝐬:- Strategy definition, planning and execution for secure distributed machine learning systems-- Contribution to SAP Security Research Strategy -- Methodology for Secure Development of ML-based Software Development- Partnership establishment with key players 𝐍𝐕𝐈𝐃𝐈𝐀, and 𝐜𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬.- Co-innovation projects including -- Secure Video Surveillance for incident detection in public space while preserving privacy of citizens. - Thought leadership and communication- PoC development from architecture design to deployment on SAP BTP- SAPPHIRE'19

𝑇ℎ𝑒 𝐼𝑛𝑡𝑒𝑟𝑛𝑒𝑡 𝑜𝑓 𝑇ℎ𝑖𝑛𝑔𝑠 (𝐼𝑜𝑇) 𝑖𝑠 𝑡𝑟𝑎𝑛𝑠𝑓𝑜𝑟𝑚𝑖𝑛𝑔 𝑂𝑇 𝑎𝑛𝑑 𝐼𝑇 𝑏𝑦 𝑐𝑜𝑛𝑛𝑒𝑐𝑡𝑖𝑛𝑔 𝑏𝑜𝑡ℎ 𝑛𝑒𝑤 𝑎𝑛𝑑 𝑙𝑒𝑔𝑎𝑐𝑦 𝑝ℎ𝑦𝑠𝑖𝑐𝑎𝑙 𝑎𝑠𝑠𝑒𝑡𝑠 𝑡𝑜 𝑐𝑜𝑙𝑙𝑒𝑐𝑡 𝑑𝑎𝑡𝑎, 𝑔𝑎𝑖𝑛 𝑖𝑛𝑠𝑖𝑔ℎ𝑡𝑠, 𝑎𝑛𝑑 𝑐𝑟𝑒𝑎𝑡𝑒 𝑏𝑢𝑠𝑖𝑛𝑒𝑠𝑠 𝑣𝑎𝑙𝑢𝑒. 𝑊𝑖𝑡ℎ 𝑎 𝑠𝑖𝑔𝑛𝑖𝑓𝑖𝑐𝑎𝑛𝑡 𝑛𝑢𝑚𝑏𝑒𝑟 𝑜𝑓 𝐼𝑜𝑇 𝑑𝑒𝑣𝑖𝑐𝑒𝑠 𝑒𝑥𝑝𝑒𝑐𝑡𝑒𝑑 𝑡𝑜 𝑜𝑝𝑒𝑟𝑎𝑡𝑒 𝑜𝑛 𝑙𝑜𝑤 𝑝𝑜𝑤𝑒𝑟, 𝑛𝑒𝑡𝑤𝑜𝑟𝑘𝑠 𝑠𝑢𝑐ℎ 𝑎𝑠 𝐿𝑃𝑊𝐴𝑁𝑠 𝑜𝑓𝑓𝑒𝑟 𝑐𝑜𝑠𝑡-𝑒𝑓𝑓𝑒𝑐𝑡𝑖𝑣𝑒 𝑠𝑜𝑙𝑢𝑡𝑖𝑜𝑛𝑠 𝑓𝑜𝑟 𝑑𝑒𝑝𝑙𝑜𝑦𝑖𝑛𝑔 𝑠𝑒𝑛𝑠𝑜𝑟𝑠 𝑎𝑛𝑑 𝑐𝑜𝑛𝑛𝑒𝑐𝑡𝑖𝑣𝑖𝑡𝑦 𝑖𝑛𝑓𝑟𝑎𝑠𝑡𝑟𝑢𝑐𝑡𝑢𝑟𝑒. 𝐻𝑜𝑤𝑒𝑣𝑒𝑟, 𝑒𝑛𝑠𝑢𝑟𝑖𝑛𝑔 𝑒𝑛𝑑-𝑡𝑜-𝑒𝑛𝑑 𝑑𝑎𝑡𝑎 𝑐𝑜𝑛𝑓𝑖𝑑𝑒𝑛𝑡𝑖𝑎𝑙𝑖𝑡𝑦 𝑎𝑛𝑑 𝑖𝑛𝑡𝑒𝑔𝑟𝑖𝑡𝑦 𝑝𝑜𝑠𝑒𝑠 𝑐ℎ𝑎𝑙𝑙𝑒𝑛𝑔𝑒𝑠 𝑑𝑢𝑒 𝑡𝑜 𝑡ℎ𝑒 𝑖𝑛𝑣𝑜𝑙𝑣𝑒𝑚𝑒𝑛𝑡 𝑜𝑓 𝑚𝑢𝑙𝑡𝑖𝑝𝑙𝑒 𝑎𝑐𝑡𝑜𝑟𝑠 𝑎𝑛𝑑 𝑐𝑜𝑛𝑠𝑡𝑟𝑎𝑖𝑛𝑡𝑠 𝑖𝑚𝑝𝑜𝑠𝑒𝑑 𝑏𝑦 𝐿𝑃𝑁𝑠.:: 𝐑𝐨𝐥𝐞Co-innovate with SAP’s academic and industrial ecosystem to tackle security challenges in low-poweredlandscapes.- Data at-rest and in transit protectioncryptography scheme for low-powered landscape- Cryptography scheme for low-powered landscape design and evaluation:: 𝐊𝐞𝐲 𝐒𝐭𝐚𝐤𝐞𝐡𝐨𝐥𝐝𝐞𝐫𝐬- 𝐂𝐢𝐭𝐲 𝐨𝐟 𝐀𝐧𝐭𝐢𝐛𝐞𝐬- 𝐒𝐈𝐆𝐅𝐎𝐗- 𝐈𝐍𝐓𝐄𝐋- 𝐒𝐞𝐧𝐬𝐢𝐥𝐞 - 𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐲 𝐨𝐟 𝐌𝐚𝐧𝐧𝐡𝐞𝐢𝐦- 𝐈𝐁𝐌:: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐞𝐢𝐯𝐞𝐦𝐞𝐧𝐭𝐬- Acquisition and lead of co-innovation initiatives-- Secure Predictive Maintenance for Utility management (City of Antibes, SIGFOX, INTEL)- Contribution to the strategy for SAP IoT Security: market search, reference model for IoT security- Thought leadership and communication with internal and external executives -- SAPPHIRE'18-- IoT related industrial event (MeetIoT'15, Innovative City Nice'15)- Design and implementation of security solution for secure end to end communication ---- End to end encryption scheme for low powered devices (IoT data confidentiality and integrity)

𝐁𝐞𝐚𝐜𝐨𝐧@𝐀𝐧𝐭𝐢𝐛𝐞𝐬: 𝐵𝑒𝑎𝑐𝑜𝑛𝑠, 𝑢𝑡𝑖𝑙𝑖𝑧𝑖𝑛𝑔 𝐵𝑙𝑢𝑒𝑡𝑜𝑜𝑡ℎ 𝑙𝑜𝑤 𝑒𝑛𝑒𝑟𝑔𝑦, 𝑡𝑟𝑎𝑛𝑠𝑚𝑖𝑡 𝑢𝑛𝑖𝑞𝑢𝑒 𝑖𝑑𝑒𝑛𝑡𝑖𝑓𝑖𝑒𝑟𝑠 𝑡𝑜 𝑒𝑛𝑎𝑏𝑙𝑒 𝑙𝑜𝑐𝑎𝑙𝑖𝑧𝑒𝑑 𝑠𝑒𝑟𝑣𝑖𝑐𝑒𝑠 𝑎𝑛𝑑 𝑡𝑟𝑎𝑐𝑘 𝑣𝑖𝑠𝑖𝑡𝑜𝑟 𝑡𝑟𝑎𝑓𝑓𝑖𝑐. 𝐶𝑖𝑡𝑖𝑒𝑠 𝑐𝑎𝑛 𝑙𝑒𝑣𝑒𝑟𝑎𝑔𝑒 𝑡ℎ𝑖𝑠 𝑡𝑒𝑐ℎ𝑛𝑜𝑙𝑜𝑔𝑦 𝑡𝑜 𝑢𝑛𝑑𝑒𝑟𝑠𝑡𝑎𝑛𝑑 𝑣𝑖𝑠𝑖𝑡𝑜𝑟 𝑏𝑒ℎ𝑎𝑣𝑖𝑜𝑟, 𝑒𝑛𝑔𝑎𝑔𝑒 𝑤𝑖𝑡ℎ 𝑐𝑖𝑡𝑖𝑧𝑒𝑛𝑠, 𝑎𝑛𝑑 𝑝𝑟𝑖𝑜𝑟𝑖𝑡𝑖𝑧𝑒 𝑐𝑖𝑡𝑦 𝑠𝑒𝑟𝑣𝑖𝑐𝑒𝑠 𝑒𝑓𝑓𝑒𝑐𝑡𝑖𝑣𝑒𝑙𝑦.:: 𝐑𝐨𝐥𝐞Lead innovation with French Public Sector, serving as facilitator with end customer, and consulting on se-curity concerns lied to mobile user authentication.- Product development team security consulting- OAuth based mobile user authentication implementation on IOS and Android:: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐞𝐢𝐯𝐞𝐦𝐞𝐧𝐭𝐬- Implementation of OAuth client on Android and iPhone- Consulting the development team on mobile user authentication- Business developer, in contact with the City of Antibes, France

:: 𝐑𝐨𝐥𝐞Acquisition and management of EU and national funded research projects for the security of ubiquitoussystems- Secure and traceable supply chain systems- Data protection for wireless sensor networks- Context-aware access control- Mobile identity management:: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐞𝐢𝐯𝐞𝐦𝐞𝐧𝐭𝐬 - Acquisition of FP7 / EIT ICT research projects(eJustice, TWISTNET, Mobile Security Platform, RESCUEIT): EU proposal writing, project planning, budget and consortium establishment. - Project management (WASP, RESCUEIT, Mobile Security Platform): use case and security requirements definition, novel security schemes for data protection - Responsible for the development of Proof of Concept and lead on the integration with academic and industrial partners - Co authors of scientific publications and patents on ubiquitous security focusing on ---- Trusted and Secure integration of wireless sensor network into business application ---- Secure asset tracking in supply chain management system ---- User authentication on mobile device. ---- Secure data sharing for mobile device.2nd Innovation Prize from the French-German Chamber of Business and Tourism (http://scn.sap.com/people/laurent.gomez/blog/2012/01/13/innovation-prize-for-sap-labs-france)Based on the research results, co-innovation project establishment with industrial partners (IBM) and customers (City of Antibes)

:: 𝐑𝐨𝐥𝐞Technical lead on research EU funded projects (MOSQUITO, WiTness):: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐞𝐢𝐯𝐞𝐦𝐞𝐧𝐭𝐬 - Work package lead for demonstrator: proof of concept design, implementation and integration with academics and industrials partners. - Co authors of scientific publications and patents on ubiquitous security focusing on ---- Extension of XACML for contextual access control ---- Smart card based X509 certificate infrastructure on mobile devices

:: 𝐑𝐨𝐥𝐞𝐂𝐨-𝐟𝐨𝐮𝐧𝐝𝐞𝐝 Bluesoft startup, funded by Ericsson, focused on developing innovative solutions for mobile technology.Technical lead for an secure embedded file system/WAP server/client for the Wireless Wallet.:: 𝐊𝐞𝐲 𝐀𝐜𝐡𝐢𝐞𝐯𝐞𝐦𝐞𝐧𝐭𝐬 - Development of an embedded file system/WAP server/client for the Wireless Wallet. - Implementation mutual authentication based on symmetric encryption for enhanced security. - Contribution to the Wireless Wallet, an electronic wallet featuring a WAP server, accessible via Bluetooth-enabled Ericsson phones. - Presentation of the Wireless Wallet at prestigious international industrial events including Cebit 1999, Cebit 2000, International Fair Beijing 2000, Cartes 2000, and Cebit 2001.:: 𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐈𝐦𝐩𝐚𝐜𝐭 - Pioneered cutting-edge mobile payment technology solutions with potential for widespread adoption