# Engineering services.

Adrien Murillo — Murillo Consulting

Adrien Murillo, DevOps and DevSecOps consultant in Toulouse. Kubernetes, CI/CD, Cloud security, operations and security maintenance for critical systems.

## Areas of expertise

### [DevSecOps Cloud, Kubernetes & GitOps](/en/services/automatisation-devsecops-mco-mcs)

Industrialize critical cloud platforms and deployments by building security, traceability and operability into the delivery chain.

- CI/CD controls
- MCS runbooks
- hardening evidence
- automation backlog

### [SSI accreditation & operational compliance](/en/services/conformite-nis2-dora-cra)

Connect SSI requirements, technical gaps, remediation plans and usable evidence to support accreditation decisions.

- requirements map
- controls/evidence matrix
- remediation plan
- accreditation decision brief

### [Vulnerabilities, MCO/MCS & risk analysis](/en/services/analyse-risques-ebios-rm)

Prioritize CVEs, hardening gaps and risk scenarios by exposure, business impact and operating constraints.

- risk scenarios
- CVE/remediation backlog
- KPI/KRI
- residual-risk decisions

### [Cyber crisis, recovery & BCP/DRP](/en/services/reprise-rancongiciel-pra-pca)

Frame response, restoration and continuity with procedures that remain usable under pressure.

- crisis runbook
- recovery order
- BCP/DRP test
- remediation plan

### [Secure AI applications](/en/services/securite-ia)

You are integrating an assistant, RAG system or agents with your tools. I help map data flows, limit access and build security tests for your use case.

- Data and permission map
- Abuse scenarios and repeatable tests
- Control prototype within an agreed scope
- Risk register and implementation plan

### [Build reliable tools in Rust](/en/services/developpement-rust)

A script has become critical, an integration needs a maintainable component or you need a Rust prototype. I scope the expected behavior, develop the component and prepare your team to own it.

- Source code and build instructions
- Functional and error-path tests
- Interface documentation and technical decisions
- Demonstration and team handover

### [Train teams in cybersecurity](/en/services/formation-cybersecurite)

I design and facilitate awareness sessions and workshops for technical and business audiences. We define the objective first: understand a risk, execute a procedure or justify a decision.

- Audience-specific program and objectives
- Material and exercise instructions
- Explained solutions and learning assessment
- Resources for independent practice



## Navigation
- [DevOps and Cloud DevSecOps consultant.](/en/profil)
- [Engineering services.](/en/services)
- [Selected work.](/en/realisations)
- [Open-source projects.](/en/projets)
- [Guides to put into practice.](/en/ressources)
- [Let’s discuss your project.](/en/contact)
- [From scope to handover.](/en/approche)
- [Real contexts. Real constraints.](/en/secteurs)
- [Learn by making decisions.](/en/lab)
- [Legal notice](/en/mentions-legales)
- [Privacy](/en/confidentialite)
- [Terms of use](/en/conditions-utilisation)
- [Train your teams. Through practice.](/en/formation)

[Contact](mailto:contact@adrien-murillo.com)