Thomas Roccia — AI Researcher

👋 Hi! I’m Thomas Roccia, also known as @fr0gger_! With more than a decade of experience in cybersecurity, I’ve worked on the front lines of major cyberattacks, managed critical outbreaks, and traveled the world to tackle emerging threats. I’m a regular speaker at top security conferences and an active contributor to the open-source community. In 2015, I founded the Unprotect Project, an open database dedicated to malware evasion techniques. More recently, I launched YaraToolkit, a platform for YARA rule creation and analysis, and the NOVA framework, the first prompt pattern matching based on detection rules to secure and hunt your AI systems. I’m also a passionate Python enthusiast who regularly shares tools and techniques with the cybersecurity community. As an early adopter of generative AI for threat intelligence, I’ve integrated cutting-edge technology into real-world applications. I’ve shared my findings and experiments on social media and created the first advanced training, taught at Black Hat, that blends generative AI with threat intelligence to build practical solutions. In 2023, I published my book Visual Threat Intelligence: An Illustrated Guide for Threat Researchers, which became a bestseller in multiple countries and won the Bronze Foreword INDIES Award in the Science & Technology category. Over the years, my work has been featured in multiple media outlets worldwide. 🐥 Twitter: @fr0gger_ 📝 Personal website: https://securitybreak.io 🎤 Conferences: https://speakerdeck.com/fr0gger 👨‍💻 Blog: https://blog.securitybreak.io/ ☄️ Nova Framework: https://novahunting.ai/ 👾 The Unprotect Project: https://unprotect.it/ 👽 Yara Toolkit: https://yaratoolkit.securitybreak.io/ 📰 Newsletter: https://newsletter.securitybreak.io/subscription/form

Stackforce AI infers this person is a Cybersecurity Expert with a focus on AI and threat intelligence.

Experience: 17 yrs 4 mos

Skills

Cyber Threat Intelligence (cti)
Generative Ai
Mentoring
Technical Research
Forensic Analysis
Cyber Threat Hunting (cth)

Career Highlights

Founder of the Unprotect Project
Published bestselling book on threat intelligence
Regular speaker at top security conferences

Work Experience

Microsoft

Lead Sr. Security Researcher (4 yrs 6 mos)

McAfee

Senior Security Researcher, Advanced Threat Research at McAfee (6 mos)

Security Researcher, Advanced Threat Research (3 yrs 1 mo)

Foundstone Services Principal Consultant - Intel Security (2 yrs 6 mos)

OpenClassrooms

Cybersecurity Content Creator and Mentor (7 yrs 10 mos)

EVA Group

Security Analyst (7 mos)

Crédit Foncier [Groupe BPCE]

IT Security Engineer (2 yrs 2 mos)

INSTITUT LE VAL MANDE

System and Network Security Administrator (11 mos)

DORIS ENGINEERING 58A,RUE DU DESSOUS DES BERGES

IT Technician (3 yrs 1 mo)

Education

BADGE at ESIEA - École d'Ingénieur·e·s d'un numérique utile

Master of Science (M.Sc.) at ESGI

BTS Informatique de Gestion at Groupe Médicis

Thomas Roccia

AI Researcher

Australia17 yrs 4 mos experience

Most Likely To SwitchAI ML Practitioner

Key Highlights

Founder of the Unprotect Project
Published bestselling book on threat intelligence
Regular speaker at top security conferences

Stackforce AI infers this person is a Cybersecurity Expert with a focus on AI and threat intelligence.

Contact

Skills

Core Skills

Cyber Threat Intelligence (cti)Generative AiMentoringTechnical ResearchForensic AnalysisCyber Threat Hunting (cth)

Other Skills

Reverse EngineeringMalware AnalysisPython (Programming Language)Large Language Models (LLM)Analytical SkillsAI securityTeachingCoaching & MentoringDigital ForensicsGeopoliticsPenetration TestingNetwork SecuritySécurité informatiqueSécurité réseauInformation Security

About

Experience

Microsoft

Lead Sr. Security Researcher

Oct 2021 – Present · 4 yrs 6 mos · Australia

Cyber Threat Intelligence (CTI)Reverse EngineeringMalware AnalysisPython (Programming Language)Large Language Models (LLM)Technical Research+3

Mcafee

3 roles

Senior Security Researcher, Advanced Threat Research at McAfee

Mar 2021 – Sep 2021 · 6 mos

Technical ResearchAnalytical SkillsForensic AnalysisAI security

Security Researcher, Advanced Threat Research

Feb 2018 – Mar 2021 · 3 yrs 1 mo

Threat Intelligence
APT & Cybercrime
Reverse engineering
Leading Security Research
Machine Learning and Data Science applied to malware research
Media Interview and Spokesperson
Python, infrastructure development and tooling

Technical ResearchAnalytical SkillsForensic Analysis

Foundstone Services Principal Consultant - Intel Security

Aug 2015 – Feb 2018 · 2 yrs 6 mos

Reverse Engineering
Threat Hunting
Malware Research
Incident Response
Penetration Testing
Security Strategy

Technical ResearchCyber Threat Hunting (CTH)Analytical SkillsForensic Analysis

Openclassrooms

Cybersecurity Content Creator and Mentor

Jun 2018 – Present · 7 yrs 10 mos

Technical ResearchMentoringTeachingCoaching & Mentoring

Eva group

Security Analyst

Nov 2014 – Jun 2015 · 7 mos · Paris, Île-de-France, France

Technical ResearchCyber Threat Hunting (CTH)Analytical SkillsForensic Analysis

Crédit foncier [groupe bpce]

IT Security Engineer

Sep 2012 – Nov 2014 · 2 yrs 2 mos · Greater Paris Metropolitan Region

Technological Intelligence and security administrator : reporting of security threats and 0-day vulnerability.
Penetration Testing WAPT, Internal, Databases, Thick Application.
Computer Forensic and Malware Analysis.
CISCO Networking Security
Development of security measures for Web Server.
Managing Penetration Testing.
Monitoring security updates (Microsoft KB, update...).
Development of a quarterly report (security checkpoints, reporting and implementation measures...).
Maintenance and update script reporting (perl and batch).
User awareness, viral risk and safety measures.

Technical ResearchForensic Analysis

Institut le val mande

System and Network Security Administrator

Sep 2011 – Aug 2012 · 11 mos · Greater Paris Metropolitan Region

Setting up infrastructure (DHCP, DNS).
Setting up and administration of server image deployment (Partimage, Knoppix, Debian)
Authorization management and deployment GPO (Active Directory).
Setting up a secure network infrastructure (Sonicwall router, wifi terminal Sonicwall, Cisco switch).
Administration of the PABX.
Development of a toolkit for troubleshooting USB key (scripts, repair, cleaning, data recovery, encryption and anonymity, viral analysis ...).
User training Microsoft Office.

Technical Research

Doris engineering 58a,rue du dessous des berges

IT Technician

Jul 2008 – Aug 2011 · 3 yrs 1 mo · Greater Paris Metropolitan Region

IT support and networking (IT).
User management in Windows Server 2003 and Windows Server 2008 (Active Directory).
Setting up server configuration and system administration, network security.
Deploying Symantec Ghost imaging system.
Setting up and administration Domino (Lotus Notes) server.
Setting up a Lotus Traveler server to access to Lotus Notes from smartphone.
Implementation of network infrastructure (HP switch, UPS).
Creating a deployment application in VB.net.
User support, customer international relations (Korean, Burmese, English, Brazilian, American).