maxime@portfolio:~
Maxime Chantemargue
Cybersecurity Engineer | Zug, Switzerland
Software Engineer at Siemens Smart Infrastructure
25 y.o. cybersecurity engineer with a passion for cryptography and building secure applications. BSc in Cybersecurity from HEIG-VD. More than 5 years experience in secure software engineering.
_

[ About ]

I'm a cybersecurity engineer based in Switzerland with a strong foundation in both offensive and defensive security. I graduated from HEIG-VD with a BSc in Cybersecurity, where I developed expertise in security and secure design software engineering.

Beyond security, I build full-stack applications — from mobile apps with Flutter to backend systems in Rust and Python. I thrive at the intersection of security and software development, where I can design systems that are both functional and resilient.

> cat skills.json
{
  "languages": [
    "C/C++",
    "Dart/Flutter",
    "Rust",
    "Java",
  ],
  "security": [
    "Cryptography",
    "Security Auditing",
    "Malware Analysis",
    "Exploitation",
    "Reverse Engineering"
    "Secure design"
  ],
  "cloud": [
    "Firebase",
    "GCP",
    "AWS"
  ],
  "tools": [
    "Git",
    "Docker",
    "Linux",
    "Wireshark",
    "Burp Suite"
  ]
}

[ Education ]

2020 — 2024

Engineer degree in Cybersecurity

HEIG-VD — Haute École d'Ingénierie et de Gestion du Canton de Vaud

Specialization in cryptography, network security, system exploitation, and secure software development. Capstone project on encrypted file sharing systems.

2015 — 2020

CFC in Information Technology

EPTM — École Professionnelle Technique et des Métiers

Federal Certificate of Competence in IT. Foundation in programming, networking, databases, and system administration.

[ Experience ]

Siemens Smart Infrastructure

Software Engineer Current

Software engineering within Siemens Smart Infrastructure Fire Safety division. Designing, optimizing, securing next generation fire safety system.

Tutorapp

Founder & Developer Current Flutter / Firebase

End-to-end development and maintenance of Tutorapp — a peer tutoring platform with 900+ users across 5 countries. Designed, built, deployed and maintained the full stack since 2021.

Netplus SA

Software Developer Django / Python

Developed and maintained internal web applications using Django and Python. Contributed to backend architecture, API development, and automated testing pipelines.

Nanoxi Sàrl

Software Developer Umbraco / C#

Built and customized CMS-based web solutions using Umbraco and C#. Worked on frontend integration, content management workflows, and client-facing features.

[ Projects ]

[01]

Tutorapp

Peer tutoring platform with 900+ users across 5 countries. Connects students for academic help with real-time scheduling. Released and maintained since 2021.

Flutter Firebase Dart In prod
[02]

Encrypted Sharing FS

End-to-end encrypted file sharing system built in Rust. Uses XChaCha20-Poly1305 for symmetric encryption, RSA-OAEP for key exchange, and TLS 1.3 for transport.

Rust XChaCha20 Blake RSA-OAEP TLS 1.3 PoC
[03]

Greenquest

Sustainability-focused application developed during the EPFL Lauzhack hackathon. Analyzes geographical areas to provide environmental insights and suggestions.

Hackathon EPFL Lauzhack 24h only In prod
[04]

Caffeino

Coffee expense splitting application for teams and friend groups. Track shared coffee purchases and settle balances effortlessly.

Mobile Flutter Firebase PoC
[05]

Side-Channel & Fault Attacks

Hands-on AES-128/256 key recovery using ChipWhisperer hardware. Performed Correlation Power Analysis (CPA) recovering the key based on collected traces, and voltage glitch fault injection with Differential Fault Analysis (DFA).

ChipWhisperer AES CPA DFA Python PoC

[ Research ]

Bachelor Thesis — 2024

Security Analysis of the LoRaWAN 1.1 Cryptographic Layer

Analysis of the cryptographic implementation in the LoRaWAN 1.1 IoT protocol. Investigated whether AES algorithms (AES-ECB, AES-CCM, AES-CMAC) function securely in resource-constrained devices, focusing on weaknesses like poor randomness and IV/Nonce reuse.

Key finding: several devices reuse IV/Nonce in AES-CCM — a catastrophic vulnerability allowing plaintext recovery.

LoRaWAN 1.1 AES-CCM AES-CMAC AES-ECB Rust MITM IoT Security

[ Media ]

[PRESS] HES-SO Tutorapp, une app pour centraliser les cours d'appui. [TV] RTS Forum des idées — Tutorapp, une application pour trouver des répétiteurs. [PRESS] Le Nouvelliste Tutorapp, une application pour cours d'appui. [RADIO] Radio Chablais Deux Montheysans visent juste avec une application pour trouver un prof d'appui.

[ Contact ]

echo $LINKEDIN
linkedin.com/in/maxime-chantemargue
echo $GITHUB
github.com/CSharper63
_