At Schneider Electric, I drive CRA and CISA compliance initiatives and assess open-source and third-party vulnerabilities using CVE intelligence, SBOM context, and risk-based prioritisation.
I investigated security workflow issues across CI/CD pipelines, repositories, and security platforms, then automated VEX synchronisation to improve vulnerability-context consistency by 80%.
I strengthened security controls with Python automation, SBOM validation, and CI/CD policy gates, reducing manual security checks by 90%. I also developed reusable GitHub Actions and REST API workflows to extend security processes across development teams.
On my AI-Assisted Vulnerability Investigation Prototype, I built a lightweight Python prototype that uses LLM-based techniques to structure vulnerability and SBOM metadata into investigation insights. I also developed a Python DevSecOps workflow for CycloneDX SBOM generation, compliance validation, and VEX-based vulnerability mapping.
