Hi, I'm Enguerrand. I build secure and reliable cloud platforms.
Senior Platform Security Engineer working on AI-first development guardrails, cloud and Kubernetes security, and secure-by-default developer platforms. This site is my notebook for talks, ideas, and field notes from real systems.
What I'm exploring now
Topics I'm spending time on lately.
AI-first development security
Building guardrails for agentic workflows, LLM tooling, and developer AI assistants without slowing teams down.
Security automation in delivery platforms
Embedding practical controls across CI/CD pipelines, cloud infrastructure, and Kubernetes platforms so secure defaults are part of the path to production.
Detection and response
Improving cloud-native detection, SIEM coverage, and response workflows so incidents are easier to understand and faster to contain.
Secure-by-default platform patterns
Shaping architecture reviews, threat modeling, and platform guardrails that help engineering teams move quickly without accumulating security debt.
Selected talks
Recordings, slides, and practical examples.
Practical supply chain security with SLSA
KubeCon + CloudNativeCon North America 2024
End-to-end implementation patterns for SLSA compliance using GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape.
September 2025 npm Supply Chain Attacks Explained
OWASP France Chapter Meetup (October 2025)
A timeline-driven incident analysis of the September 2025 npm compromise waves and practical controls for safer JavaScript pipelines.
AWS Cloud Security from Code to Runtime
AWS Summit Paris 2025
How Ledger unified cloud security with Wiz from code scanning to runtime detection and automated remediation.
Writing
Notes on security, AI, and life in Canada.
Browse the blog →Let's connect
Have a question about security, platforms, or a talk? Get in touch.