
Benjamin
GROLLEAU
R&D Engineer in IoT Cybersecurity
ENSEIRB-MATMECA Graduate
Fixed-term contract at CATIE from September 2026 to February 2027.
About
About Me
My name is Benjamin GROLLEAU, an engineering graduate of ENSEIRB-MATMECA, Bordeaux INP, where I completed a work-study degree in Networks and Computer Science. I specialize in IoT cybersecurity and embedded systems and have been working as an R&D engineer at CATIE in Talence, France, since September 2026. Following three years as an apprentice, I continue to design secure embedded architectures on Zephyr RTOS using ARM TrustZone and TrustedFirmware-M, alongside STSAFE secure elements. My work covers hardware-rooted identity, secure boot, the chain of trust, and MQTT-over-TLS communications, from hardware to the application layer. My fixed-term contract runs until February 2027 and also includes embedded AI integration with AIDGE.
My engagements
During my studies at ENSEIRB-MATMECA, I served as secretary and website manager of the Students’ Union in 2024–2025. I helped organize events for up to 700 students and deploy websites used by approximately 1,200 students and external visitors. At Eirbware, I also served as co-server manager in 2024–2025, sharing responsibility for hosting over 50 associations and clubs, maintaining the election website, and helping deploy campaign websites. In 2025–2026, I was secretary of Apicult’eirb. I helped create and install two beehives on campus and developed a blog to share updates on their activity. These commitments strengthened my project management and teamwork skills.
Interest in research
From June to August 2023, I completed a research internship at UFRGS in Porto Alegre, Brazil. I implemented an open-source EDA flow using OpenROAD for ASAP7 technology, in collaboration with Silvaco, to optimize standard-cell libraries. From February to September 2025, I then conducted an R&D master’s thesis on secure IoT provisioning at CATIE. This solo project combined Zephyr RTOS, TrustZone, TF-M, and STSafe-A110/A120 secure elements on nRF5340 microcontrollers. It resulted in a working demonstrator and a successfully defended and validated thesis. I also contribute to open source through Zephyr RTOS (TF-M secure peripheral support), Trusted Firmware-M (an OTP provisioning script and template for b_u585i_iot02a), and STSELib (secure element integration).
Experience
Education
2023 — 2026
Engineering Degree in Networks and Computer Science (Work-Study)
ENSEIRB-MATMECA — Bordeaux INP
Bordeaux (33) — France
- — Courses: Advanced networking, Advanced computer science concepts, Advanced programming, Engineering mathematics and physics, DevOps, Cybersecurity, IoT.
- — Projects: R&D master’s thesis in IoT security, DOR (Dynamic Onion Routing), HTTP proxy in C, management website, file compression in C.
- — TOEIC Certification (825/990) — B2 level
- — Degree obtained in 2026
June – August 2023
Internship in Automation of Physical Synthesis of Components
UFRGS
Porto Alegre — Brazil
- — Projects: Development of a synthesis flow with open source EDA tools (OpenROAD flow script) for ASAP7 technology, in partnership with Silvaco, to optimize the use of standard cell libraries.
2021 — 2023
Bachelor in Networks and Telecommunications, Cybersecurity / IoT Specialization (Work-Study)
IUT de la Roche-Sur-Yon — Nantes University
La Roche-Sur-Yon (85) — France
- — Courses: Basic networking, Windows/Linux computer systems, Virtualization, Programming, Mathematics, Pentesting methodology, Telecommunications.
- — Projects: Design and supervision of a network. Presentation of USB key risks. Website (IT solution). 'Pentest' and proposal of a secure solution for a company. Telecommunication solution for video surveillance.
- — ANSSI MOOC Certification (SecNumAcadémie) — November 2021.
- — Top of the class for 2 years
Professional Experience
2023 — February 2027
R&D Engineer in IoT Cybersecurity — Former Apprentice
CATIE
Talence (33) — France
- — September 2026 – February 2027: R&D engineer on a fixed-term contract. Continued integration of TrustZone, TrustedFirmware-M, and STSAFE secure elements under Zephyr RTOS, alongside embedded AI integration with AIDGE.
- — 2023–2026: R&D apprentice in IoT cybersecurity. Developed a secure demonstrator on 6TRON and nRF5340 boards, covering secure boot, cryptographic provisioning, and MQTT-over-TLS communications.
- — Integrated TrustZone, TF-M, and the STSafe-A120 secure element into a Zephyr-based MQTT-over-TLS test bench to protect against cyber-physical attacks.
- — Developed a Matter test bench under Zephyr RTOS with the Nordic SDK and studied CPA/DPA side-channel attacks on ARM processors.
- — Developed a Python Slack bot to analyze bills of materials (BOMs) and component references through Mouser, DigiKey, and Farnell APIs.
2022 — 2023
Apprentice Technician in Networks and Telecommunications
Paritel
Artigues-Près-Bordeaux (33) — France
- — Installation of telephone and DATA networks for SMEs.
- — Maintenance of IP and analog networks.
Skills
Software / Hardware Development
Web Development
- •React / Next.js / Vue.js
- •NestJS / TypeScript / TailwindCSS
- •MySQL / MongoDB
Scripting
- •Bash / Python
- •Git / Jujutsu (jj)
- •Make / GDB / Valgrind
Programming
- •C / C++ / Zephyr RTOS
- •Go / Rust
- •LaTeX / Doxygen
Projects
Arbor
A modern rewrite of the tree Unix command in Rust, with support of Git/Gitignore.
DOR — Dynamic Onion Routing
Academic peer-to-peer (P2P) onion routing prototype developed in Go, aiming to hide metadata by integrating volatile user-operated relays and dynamic paths.
Side-Channel Attacks on AES (CPA & DPA)
Practical implementation of Differential and Correlation Power Analysis on AES-128 hardware.
Apiculteirb
Installation of two beehives within ENSEIRB-MATMECA
BDE Presentation Website
Complete redesign of the student association's official website.
Election Website for ENSEIRB-MATMECA
Website for managing student elections with secure voting system.
HTTP Proxy Server in C
Implementation of a functional HTTP proxy server in C with caching, filtering, and logging capabilities.
Mafieirb
A website for showcasing and managing sales of student association merchandise.
Card Management Website
A web platform to manage and organize playing cards for a collector community.
C Compression Algorithms
Implementation and analysis of various compression algorithms in C.
Research on Physical Design Automation
A research internship on automated physical synthesis of integrated circuits.
Complex Networks
Setup of a complex and secure network for a fictional company.
Pentesting on a Fake Company
A penetration testing project on a simulated corporate environment.
MAGIC: Multiplayer Python Game
A multiclient server-based game developed in Python.
Digital Modulations Project
Designing a telecommunications solution using wireless cameras.
AM Radio Modulation
Building a functional AM radio modulator and transmitter.
IT Network for a Small Company
Design and implementation of a complete LAN for a small business.