Education — Freie Universität Berlin — Berlin

Foundations — gathering the intel and groundwork before the operation begins.

• > Abitur, Marie-Curie-Oberschule, Berlin (08/2003 – 07/2010)
• > Zivildienst (civilian service), Sankt Gertrauden-Krankenhaus, Berlin (10/2010 – 03/2011)
• > B.Sc. Computer Science, Freie Universität Berlin (04/2011 – 09/2014), grade 2.6
• > Bachelor's thesis: "Implementing and Analysing sFlow measurements at an IXP"
• > M.Sc. Computer Science, Freie Universität Berlin (10/2014 – 07/2017), grade 2.2
• > Cyber Security Summer School (C3S), Tallinn
• > 24th USENIX Security Symposium, Washington — co-authored DDoS research
• > Internet Engineering Task Force 96, Berlin
• > Master's thesis: "Is there only trash in the bin? Analyzing privacy conflicts in Pastebin"

Cyber Security Consultant — Mazars GmbH — Berlin

Building the capability — assembling the tooling and compliance groundwork.

• > Design, implementation, and operation of a penetration-testing system landscape
• > Consulting and auditing for compliance requirements (§8a BSIG, ISO 27001, GDPR)
• > Software testing based on functional & non-functional requirements (ISTQB Certified Tester)

Berater Informationssicherheit — iABG mbH — Berlin

Delivering the payload — running live cyber-range simulations and security assessments.

• > Trainer for the iABG Advanced Cyber Range (cyber-attack simulations)
• > Vulnerability management and remediation coordination
• > SIEM use cases & rules implementation with alert analysis & escalation
• > BSI IT-Grundschutz conform operations and Audit support

IT-Security Analyst — Netzbetreiber — Berlin

Finding and acting on the weak points — incident and vulnerability analysis.

• > SIEM engineering — use cases, rule implementation, testing
• > SIEM analysis — alert analysis & escalation
• > IT security incidents — analysis, assessment, remediation coordination
• > Vulnerability management — assessment & remediation coordination
• > SOC build-out — architecture, technical support
• > ISMS based on IT-Grundschutz — concepts, security assessment

IT-Security Operation Engineer — Netzbetreiber — Berlin

Embedding lasting capability — SOC architecture and automation at scale.

• > SIEM Implementing/updating and testing rules
• > SOAR playbook & API connection implementations
• > Threat hunting via threat-intelligence analysis; deriving and testing attack scenarios
• > Extending existing use cases in response to new or changed TTPs
• > Log-source onboarding & guides
• > Developing and automating processes within the SOC and CSIRT

IT-Security Engineer — ausecus GmbH — Berlin

Building and commanding the platform — product engineering for critical infrastructure defense.

• > Product development (of KRITIS Defender)
• > Python programming for product features (e.g. WebUI, CI/CD, data processing)
• > Security analyses for clients (assessments, findings, and remediation guidance)
• > Threat intelligence research and analysis supporting ausecus' products and clients

Current arsenal

The mission: defending critical infrastructure — and the toolkit built up along the way.