👋 Hi, I'm Jeremy Chapeau

👨‍💻 About me

Founding Engineer at SubImage and Core Maintainer of Cartography (CNCF project). I'm passionate about cybersecurity, graph-based security, and open-source. With over 12 years of experience spanning from the French Navy to the Ministry of Armies, SOC leadership, and now building next-gen cybersecurity platforms, I focus on making security scalable and accessible.

Currently based in San Francisco, I build graph-based cybersecurity solutions that help organizations understand and secure their multi-cloud environments. I'm particularly interested in API security, OSINT, incident response, and offensive security research.

When I'm not coding or hunting security misconfigurations, you'll find me playing basketball 🏀, diving into video games 🎮, or exploring finance 📈.

🔧 Tech Stack

I work primarily with Python and Go for backend development, with a strong focus on cloud security and graph databases.

🚀 Featured Projects

Cartography

Core Maintainer | Python, Neo4j, AWS, Azure, GCP

A CNCF-backed open-source tool that creates a graph-based view of your infrastructure and applications. As a core maintainer, I:

• Developed multiple ingestion modules extending cloud coverage
• Improved the framework architecture for better scalability
• Drive community adoption and contributor growth

Shameleon

Author | Go, Python | January 2024 - January 2025

An asynchronous backdoor research project demonstrating covert C2 techniques:

• Designed and developed an asynchronous backdoor in Go
• Built a Command and Control (C2) system in Python
• Leverages public APIs (Grafana, Microsoft, Google) as covert channels
• Presented at Devoxx France 2024

🎤 Talks & Publications

Recent speaking engagements and publications:

• Auditer le cloud autrement : l'approche graphe de Cartography - MISC 141, Sept/Oct 2025
• Graph-Driven Audits for Keycloak: A Deep Dive with Cartography - KeyConf 2025, Amsterdam, August 2025
• Cartography - OSSIR, Paris, July 2025
• Cartography - NoLimitSecu Podcast, Paris, June 2025
• Malware Development: Asynchronous Backdoor Relying on Public APIs - Devoxx France 2024, Paris, April 2024

📊 Stats

🌐 Let's Connect

I'm always interested in collaborating on open-source projects, discussing cybersecurity, and connecting with fellow security enthusiasts and engineers.

📧 Email: jeremy.chapeau@gmail.com

📍 Location: San Francisco, United States

🗣️ Languages: French (Native), English (Fluent)