Frédéric Vassard

Frédéric Vassard

Security & Platform Engineer: Detection & Response · SecDevOps · AI agent platforms

Roseville, California

[email protected]

Security & Platform Engineer with 20+ years in production operations at Twitter (SRE for the ~1,500-server Search fleet), the Wikimedia Foundation, Yammer (Microsoft), and Cisco Meraki, where I am SecDevOps Tech Lead in Detection & Response. OSCP-certified since 2007. At work I build detection, certificate-expiry alerting, certificate inventory, and secrets tooling; at home I run a multi-agent AI operations platform on a 9-node K3s cluster (~245 pods) with 27 Wazuh agents and Cloudflare WAF automation across 18 zones. Bilingual French/English, with EU work authorisation (French citizen).

Experiences

SecDevOps Tech Lead / Detection and Response Sr. Engineer

San Francisco, CA | June 2020 - Present

  • Integrated secure coding practices and API-based event detection.
  • Enhanced incident response protocols and overall security posture.
  • Developed CI/CD pipeline enhancements and an alerting framework for SSL/PKI certificates.
  • Created management systems for inventorying certificates across assets.
  • Built web UI for engineers to create and update their secrets.
  • Worked on FedRamp certification readiness.
  • Improved secure development practices and tooling.

Sr. DevOps Engineer - Observability

San Francisco, CA | October 2018 - June 2020

  • Designed and implemented metrics visualization solutions for applications and systems.
  • Migrated from Graphite to a modern monitoring stack using Elasticsearch and Grafana.
  • Set up alerting based on metrics to identify deviations and on log events for process behavior.
  • Collaborated on SRE tasks to ensure high availability.

Lead DevOps Engineer

San Francisco, CA | March 2017 - October 2018

  • Managed AWS infrastructure including EC2, S3, ECS, and RDS services.
  • Implemented monitoring and alerting using Sysdig, Cloudwatch, and Newrelic.
  • Updated and created automation using Python.
  • Updated deployment pipeline to make code deploys more reliable and efficient.
  • Redesigned monitoring stack and created automation scripts.

Senior DevOps Engineer / SRE

San Francisco, CA | May 2016 - March 2017

  • Responsible for Hipmunk's production network.
  • Monitored and alerted on vital metrics using Ganglia and Nagios.
  • Developed automation using Puppet and implemented new deployment strategies.
  • Handled infrastructure tasks with focus on Operations and Security.
  • Supported critical infrastructure during acquisition by Concur/SAP.

Automation Engineer / DevOps Engineer

Berkeley, CA | September 2013 - May 2016

  • Responsible for Labs' HR infrastructure.
  • Monitored and alerted on vital metrics using OMD and Nagios.
  • Set up configuration management via Puppet.
  • Improved monitoring situation and added automation where possible.
  • Supported scientific computing infrastructure for research groups.

Sr. Site Reliability Engineer (Level 3)

San Francisco, CA | October 2012 - September 2013

  • Responsible for Twitter's Search Group (about 1,500 servers).
  • Monitored and alerted on vital metrics using Ganglia and Nagios.
  • Deployed search infrastructure to new datacenter.
  • Made code deploys more reliable and efficient.
  • Created smoke-test environment based on virtualization.
  • Implemented reliable on-call and alerting management.

Sr. Infrastructure Engineer

San Francisco, CA | October 2011 - October 2012

  • Managed infrastructure for Yammer (later acquired by Microsoft).
  • Implemented system automation and monitoring solutions.
  • Supported infrastructure during company growth and acquisition phase.

Sr. Unix Systems Administrator

San Francisco, CA | August 2010 - October 2011

  • Managed Unix systems for CBS Interactive / CNET.
  • Implemented automation and monitoring solutions.
  • Maintained high-traffic web infrastructure.

Systems Engineer

San Francisco, CA | March 2009 - August 2010

  • Supported Wikimedia Foundation infrastructure.
  • Contributed to open-source initiatives and system improvements.

Sr. Unix Systems Administrator

San Francisco, CA | April 2008 - March 2009

  • Worked at Ip-Soft supporting Gap, Inc. infrastructure.
  • Managed Unix systems and enterprise applications.

Operations Engineer

Santa Clara, CA | November 2007 - April 2008

  • Supported Yahoo's infrastructure operations.
  • Implemented monitoring and automation solutions.

Sr. Security Analyst

Pleasanton, CA | March 2007 - November 2007

  • Led security initiatives and analysis for E-Loan.
  • Implemented security monitoring and vulnerability management.

Unix and Web Systems Administrator

Pleasanton, CA | July 2005 - March 2007

  • Managed Unix and web systems for E-Loan.
  • Supported critical financial applications and infrastructure.

Sr. Customer Engineer / NOC Systems Supervisor

San Francisco, CA | June 2004 - July 2005

  • Supervised NOC operations at ServePath / Coloserve.
  • Managed customer engineering and systems support.

Skills Explorer

Interactive breakdown of my technical expertise. Click on any skill for more details.

Skill Details

Click on a skill to see more information

Education

DeVry University

Fremont, CA | April 2001 - March 2003

Telecommunication Management – Completed 100% technical education and 93% general education. Repeated Dean's list appearance.

Rochester Institute of Technology (RIT)

Rochester, NY | September 2000 - April 2001

Software Engineering

Lycée Francais La Pérouse

San Francisco, CA | September 1997 - July 2000

Economics and Sociology – French Baccalaureate in Economics and Sociology.

Lycée Technique La Mache

Lyon, France | September 1995 - July 1997

Electrotechnics Engineering – BEP - CAP in Electrotechnics.

Projects & Contributions

Ampache Authentication Plugin

PHP OAuth

Assisted in troubleshooting and developing the authentication plugin used in Ampache.

Repository

Gallery2 Import Scripts

Perl Image Processing

Created Perl scripts to programmatically import and format pictures.

Repository

Documentation Tutorials

Markdown Technical Writing

Authored tutorials on UNIX server setup, LAMP system installation, and advanced Postfix configurations.

Read

Certifications & Licenses

  • Offensive Security Certified Professional (OSCP) – Awarded June 3rd, 2007 (ID: OS-101-02021)
  • FCC Amateur Radio Licensed – Awarded September 30th, 2008 (ID: K6FPV / KI6TDU)
  • In Progress: CEH, CISSP

What Others Say

Recommendations from former colleagues, quoted verbatim from LinkedIn

See all recommendations on LinkedIn

My Workspace & Tools

How I Work

I believe in creating efficient, secure, and scalable systems. My approach combines deep technical expertise with practical automation to solve complex problems.

Favorite Tools

Python
AWS
Bash
Docker
Git
Security Tools

Work Philosophy

  • Automate everything that can be automated
  • Security is a process, not a destination
  • Document thoroughly for future maintainers
  • Test early, test often, test automatically
  • Continuously learn and adapt to new technologies
0
Years Experience
0
Systems Managed
0
Projects Delivered
0
Technologies Mastered

Resources & Recommendations

Homelab

A personal datacenter running production-grade systems — because security engineers should practice what they preach.

Compute

Two Proxmox hypervisors (Ryzen 9 5950X + 7950X, ~250 GB RAM) hosting a 9-node Kubernetes cluster, plus an NVIDIA DGX Spark serving a local 27B model

Network

Full UniFi stack with 8 segmented networks, IPS/IDS, Tailscale VPN, and Traefik reverse proxy

Security

Wazuh SIEM (27 agents), CrowdSec and Cloudflare WAF blocking, a 3-node OpenBao vault, and VLAN segmentation

Observability

Prometheus, Grafana, custom alerting, and an AI-powered management platform

~245
Pods
9
K3s Nodes
70TB
Storage
27
SIEM Agents

AI & Innovation

A personal passion project — a multi-agent AI platform built from scratch to manage an entire homelab infrastructure.

Meet Thor

Thor is a comprehensive AI platform orchestrating 13 specialized agents and 2 review roles with 490+ tools across 45 tool groups. Built on the Model Context Protocol (MCP) with Claude, failover providers and a self-hosted model, each agent has a distinct personality and area of expertise — from security monitoring and infrastructure management to home automation and media curation.

The system operates autonomously across Discord, Telegram, a web portal, Obsidian, a Mac app and the CLI — with durable tickets, tiered auto-remediation, a RAG knowledge base, and the ability to ship its own reviewed pull requests.

15
Agents & Roles
490+
MCP Tools
45
Tool Groups
6
Platforms
⚡
Thor
Overseer
🛡️
Heimdall
Security
🔧
Jarvis
Infrastructure
🏠
Ada
Home Automation
✨
Minerva
Business
🎬
Apollo
Media
🧭
Odyssey
Research
📜
Chronicle
Family
🔨
Forge
Productivity
🗡️
Offsec
Red Team
🏹
Artemis
Family Activities
🎯
Fortuna
Career
🪽
Hermes
Laptop Helper
🧐
Critic
Review
📚
Librarian
Knowledge

Contact

Get In Touch

Feel free to reach out for inquiries, collaborations, or just to say hello.

Download Resume

Need a copy of my resume for reference? Download the PDF version below.

Download PDF