Alexandre-Xavier Labonté-Lamoureux

About Me

I am a passionate IT professional and DevSecOps advocate with over 8 years of experience in DevOps, system administration, and cybersecurity. Currently pursuing a Master's in Software Engineering at ÉTS, focusing on Internal Developer Platforms. Open-source enthusiast, contributor to game engines and tools, reverse engineering projects, and has been actively volunteering in student tech clubs and meetups for a decade.

Giving a talk at Club CEDILLE during a Beer & Learn event

Education

• Master's in Software Engineering - École de Technologie Supérieure (ÉTS), Montréal (Completing) - Research: Internal Developer Platforms
• Bachelor's in Software Engineering - École de Technologie Supérieure (ÉTS), Montréal

Professional Experience

• AppSec/DevSecOps Consultant - Arctiq, Montréal (Current) - Making the world a better place via AppSec, DevEx, and IDPs.
• Cybersecurity/DevSecOps Specialist - Ubisoft, Montréal (Previous) - Established cybersecurity foundations and enhanced DevSecOps maturity.
• Malware researcher - ESET, Montréal (Previous)
• Malware analyst - Government of Canada, Ottawa (Previous)

Awards & Achievements

• Won over 10 CTFs, including NorthSec back in 2020
• Laureate, Cybertalent Trophy from École Cybersécurité, "Achievement" category - 2021
• 1st place at HackQC 2019 on the theme "Digital interaction with the citizen" (Project: Tragile) - 2019
• Won an OCTAS for JardinIoT and a 1000$ scholarship - 2018

Community Involvement & Open-Source Contributions

• Many open source projects on Github
• Led the NoiseTorch security audit - 2021
• Volunteer and presenter @ Montréhack - 2020-2021: "Windows malware reversing" - Jan 2020 and "Canada CrackMe" - Apr 2021
• CTF Organizer and challenge designer @ United CTF 2020 & United CTF 2021 & Journée Francophone des Femmes en Informatique (JFFI) - 2023
• Mentor to the Canadian teams @ European Cyber Security Challenge (ECSC) - 2021 and @ International Cyber Security Challenge (ICC) - 2022
• Linux Kernel: Add device support to em28xx driver (V4L driver) - 2018 & Linux Scheduler Optimization: Reported 6x performance increase in VM under heavy load - 2016
• Built an enhanced version of GoldenEye 007 for a tournament - Since 2023

Talks at Conferences and Meetups

• "Cybersecurity on a budget: Securing your code and infrastructure for free" - GoSec Conference 2022
• "Nix: The declarative package manager" - DevOps Montréal, 2024
• Linux-Meetup: "Présentation de logiciels libres qu'on peut utiliser en entreprise pour sécuriser nos pipelines de développement" - Sept 2022 & "Présentation de Nix package manager et NixOS" - June 2024
• "Introduction à la rétro-ingénierie" - Jan 2020 & "Introduction au cracking de logiciels" - May 2020

Publications

• Academic: "Automatic Pipeline Provisioning" (arXiv, Nov 2025, co-authored with Simon Boyer).
• Arctiq Blogs:
  • "Top 10 GitHub Actions Security Pitfalls" (Jan 2026).
  • "Simplify your GitHub EMU Migration" (Jun 2025).
• Medium Articles:
  • "Fixing the Arch-Vile fire bug in Doom II" (Nov 2019).
• WeLiveSecurity Blog:
  • "Varenyky: Spambot campaigns target France" (Aug 2019).

Contact

LinkedIn: ca.linkedin.com/in/axll

GitHub: github.com/axdoomer