👨‍💻 Dominique Righetto

Product Engineer

Luxembourg, Luxembourg22 yrs 2 mos experience

Highly Stable

Key Highlights

Expert in Application Security with extensive OWASP contributions.
Experienced educator in Application Security courses.
Proven leadership in security projects enhancing web application safety.

Stackforce AI infers this person is a Cybersecurity expert specializing in Application Security and web vulnerabilities.

Contact

Skills

Core Skills

Application SecurityWeb Application SecurityMobile Security

Other Skills

Intrusion SecurityConsultingHTTP SecurityContent WritingPenetration TestingJavaArchitectureAndroidJ2EEComputer SecurityPythonMetasploitw3afOpen Source DevelopmentLinux

About

🌎 Originally from the north of France, I moved at the end of my studies to Luxembourg to meet people from different cultures. 👨‍💻 I am deeply passionate about Application Security (offensive & defensive point of view). 🎯 Since 2011, I contribute to different OWASP projects (either as a contributor or as a leader) in order to help development teams on the topic of Application Security from a pragmatic point of view.

Experience

22 yrs 2 mos

Total Experience

5 yrs 4 mos

Average Tenure

4 yrs 3 mos

Current Experience

Digital learning hub luxembourg

External Teacher

Nov 2023 – Present · 2 yrs 5 mos · Luxembourg

Teaches several courses about Application Security via the module n°5 part 1 "Application Security".
https://www.dlh.lu/shop/learning-track-cybersecurity-essentials-1755

Application Security

Owasp® foundation

5 roles

OWASP Secure Headers Project Leader

Promoted

Jan 2022 – Present · 4 yrs 3 mos

The OWASP Secure Headers Project describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities.

HTTP SecurityWeb Application Security

Active contributor to the OWASP Secure Header Project

Feb 2021 – Jan 2022 · 11 mos

The OWASP Secure Headers Project describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities.
The OWASP Secure Headers Project intends to raise awareness and use of these headers.

Web Application Security

Active contributor to the OWASP Mobile Security Testing Guide

Mar 2018 – Apr 2023 · 5 yrs 1 mo

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

Mobile SecurityApplication Security

Project leader of the OWASP Cheat Sheet Series

Nov 2017 – Sep 2019 · 1 yr 10 mos

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific web application security topics.

Web Application Security

Contributor & Member

Jan 2011 – Present · 15 yrs 3 mos

Write different content about Application Security.

Content WritingApplication Security

Thales cybersecurity services

2 roles

Subject Matter Expert (Application Security domain)

Promoted

Mar 2021 – Present · 5 yrs 1 mo · Luxembourg

Role of S.M.E. (Application Security) in the Intrusion & Application Security department (IAS).
Legal name of the company: Thales Cyber Solutions Luxembourg.

Application SecurityIntrusion Security

Senior Consultant (Application Security domain)

Mar 2015 – Mar 2021 · 6 yrs · Luxembourg

Role of Senior Consultant (Application Security) in the Intrusion & Application Security department (IAS).
Legal name of the company: Thales Cyber Solutions Luxembourg.

Application SecurityConsulting

Telecom nancy

External Teacher

Jan 2018 – Jan 2022 · 4 yrs · Nancy, Grand Est, France

Teaches several courses about Application Security.

Application Security

W3af

Contributor

Oct 2012 – Dec 2013 · 1 yr 2 mos

Implementation of modules of the framework and some plugins for W3C specifications below:
CORS : Cross-Origin Resources Sharing
CSP : Content Security Policy

Web Application Security

Cgi

Solutions Consultant (Application Security domain)

Jan 2011 – Feb 2015 · 4 yrs 1 mo · Luxembourg / France

Missions among different customers (banking, insurance, state, institution, ...) on following topics :
Web application penetration testing (white / gray / black box),
Web application code & architecture security audit (Java / PHP / .Net),
Integration of the security into the application development lifecycle,
Implementation of defensive measures (active & passive),
Development team training on secure coding.

Web Application SecurityPenetration Testing