Gaspard Torterat–Slanda · Systems & Security Engineer

1 · About

The short version

About

Final-year engineering student in systems and network security. I like hard, low-level problems and systems that have to keep working, and I learn each layer by building it.

Who I am

I am in my final year of engineering at EPITA, majoring in systems and network security. When I want to understand a layer of production, I write my own version of it, run it, and watch how it breaks.

That habit gave me a compiler, a TCP/IP stack, a hypervisor and a homelab I run remotely every day. I am not tied to one job title: reliability, security, infrastructure and systems software all draw on the same skills, and I want to keep growing across them.

Journey

2027
EPITA, engineering degree
Systems and network security major (SRS). Hardened Active Directory, firewalls, IDS, PKI and incident response labs.
Aug 2025 to Jan 2026
Dowsers · R&D engineering intern
Formal verification of smart contracts.
- Worked in C# on a verification engine that translates Solidity contracts into Boogie and checks their properties with SMT solvers.
- Extended the Solidity-to-Boogie translator to four major language versions and fixed translation errors found in the original research paper, working from limited documentation on the source language.
- Refactored the core with design patterns, halving a 300,000-line codebase, and parallelized the functional test suite to make it 12 times faster, while keeping full functionality and runtime performance.
- Took over the existing translator and traced its errors down to the generated Boogie code, since a wrong translation can let a vulnerable contract pass verification, then checked every fix against the test suite.
- Brought an engineering approach to a research team and raised that writing temporal logic properties over Boogie, across two interfaces without tooling, was a barrier to adoption, then kept delivering.
Hackathon
Kyndryl AI Hackathon · Winner
Built a retrieval-augmented assistant with MCP servers.
2024
Semester in Dublin
Dorset College. TOEIC 920.

Open to opportunities

Role: Open: reliability, security, infrastructure, systems software, or something I have not thought of yet
Format: 6-month end-of-studies internship
Start: February 2027
Where: Paris or abroad

Arsenal

Systems: Linux, Windows, kernel architecture, memory management
Languages: C, C++, Rust, Python, Bash
Infrastructure: Proxmox, OpenStack, k3s, Ansible, Docker, WireGuard
Security: Active Directory, pfSense, Suricata, MISP, Graylog, PKI
AI tools: Claude Code in daily use since its early release, Cursor, RAG, MCP servers
Soft skills: Technical communication, rigor, dynamism, proactivity

Reach me

Emailgaspard.torterat@gmail.com

LinkedIngaspard-torterat-slanda

GitHubGaspardcode

RésuméCV_Gaspard_SRE_EN.pdf

2 · Projects

What I built

Projects

Nine systems, from the kernel up to trust. Each card says what it is, what I learned from it, and how it was built, including which ones I wrote with an AI assistant.

3 · Open source & awards

Outside my own machines

Open source & awards

Work that left my own machines: fixes for projects other people run in production, and one competition.

4 · Writing

Blog

Writing

Long-form notes on certificate revocation, CVEs, infrastructure state and the industry. Some are in French.

5 · Observatory

Product · in the making

Observatory

A search engine over every public TLS certificate, built from Certificate Transparency logs. It tells you what is about to expire or is too weak before it causes an outage.

Expiry still causes outages

Large services have gone down because one certificate quietly expired. Alerts on expiry are cheap; outages are not.

Everything is already public

Browsers require public certificates to be logged in CT. That log is a full, verifiable inventory of who has what.

Passive by design

Nothing is scanned. Every row comes from public logs, so the service can run in the open without probing anyone.

Query

Subject	Issuer	Key	Days left	State

Sample data on example domains. Next: expiry alerts for domains you prove you own, then monitoring for private PKIs.

GaspardTorterat–Slanda

On Call

Service down