Skip to main content
Top expert badge
Recommended expert
Profile header background

Bernhard B.-Senior Cyber Security Architect | Technical Project Manager | VS-NfD / BSI Expert

Bernhard B. - Senior Cyber Security Architect | Technical Project Manager | VS-NfD / BSI Expert - profile avatar
Profile header overlay
Wiesbaden, Germany

Check rate

Experience

Jan 2026 - Present

Technical Project Manager – VS-NfD Security Project

Position summary
Technical Project Manager – VS-NfD Security Project
Industries
Information Technology
Business areas
Information Technology
Project Management
  • Preparation of a complete IT security concept (ISiKo)
  • Implementation of BSI / NATO / national security requirements
  • Risk analysis, documentation, audit preparation
  • Consulting and management of development teams in Cybersecurity Recovery and Resilience
  • Genua firewalls, VPN, VS-NfD migration from Checkpoint and PaloAlto firewalls
  • Administration of log sources: firewall traffic, ALG (SIP calls), ATP, DLP
  • System administration – servers, AD, clients (according to BSI)
  • Stakeholder communication (C-level / government agencies)
Jan 2025 - Dec 2025
Germany

Senior Security Architect

Intermediate Beratung

Position summary
Senior Security Architect at Intermediate Beratung
Industries
Government and Administration
Business areas
Information Technology
  • Consulting in an ongoing project in the area of IT security architecture
  • Documentation of the previous progress and planning of the next steps
  • Application and implementation of BSI IT Basic Protection
  • Establishment and maintenance of security management systems
  • Application of the ISO 27001 series of standards
  • Integration of ITIL processes into security architectures
  • Cooperation with public-sector clients, supervisory authorities, and internal and external service providers
Jan 2024 - Dec 2024
Germany

Security Consultant / Project Manager

Position summary
Security Consultant / Project Manager
Industries
Information Technology
Professional Services
Business areas
Information Technology
Project Management
  • Security of a large Europe-wide network in the VS-NfD project in the KRITIS sector
  • Consulting, planning, review, and documentation
  • Technical consulting in the network area, including migration planning, segmentation, and IP harmonization
  • Support in the regular operation of the security infrastructure based on BSI C5 and BSI 200-2
  • Focus on SIEM and SOC platforms as well as the generation of use cases and playbooks
  • Identification, planning, and independent implementation of projects to improve the security infrastructure
  • Technical, active project management and leadership of internal teams
  • Compliance with VS-NfD requirements and VSA Classified Information Directives
Jan 2023 - Apr 2024
Germany

Cyber Security Engineer

Position summary
Cyber Security Engineer
Industries
Information Technology
Business areas
Information Technology
Project Management
  • Consulting, planning, and active hands-on project management for a closed on-premises high-security network
  • Focus on BSI, VS-NfD, VSA, ITSCM as well as SOC, SIEM, and ISMS/KRITIS in the OT/IoT area
  • Technical consulting in the network and data center areas
  • Support in the regular operation of the security infrastructure and LAN/WAN environment
  • Further development of use cases and playbooks on the Splunk platform
  • Implementation of security infrastructure projects in the existing data center
  • Development and continuous updates of the GENU VPN architecture
  • Architecture and development work in Windows and Linux environments
  • Network segmentation as well as review and expansion of the LAN/WLAN environment
  • Review and update of the HPE/Aruba switching platform and gateway
  • Introduction of EDR (Endpoint Security) and DriveLock encryption
  • Improvement of email security through DLP and ProofPoint
  • SharePoint project management and reporting to C-level and Board of Directors
  • Management of the IT security department and coordination of vendors and service providers
Sep 2022 - Jan 2023
Germany

Project Manager / Consultant

Position summary
Project Manager / Consultant
Industries
Healthcare
Business areas
Information Technology
Procurement
Project Management
  • Consulting on the architecture of an on-premises hospital network
  • Renewal of the network to the current B3S security standard
  • Management of infrastructure services such as DNS, DHCP, and RDP
  • Consulting on security regulations in the healthcare sector
  • Introduction of a SIEM and SOC platform
  • Consulting during the tendering and implementation of a closed high-security network
Jan 2022 - Dec 2022
Germany

Lead Architect – Government Network & Data Diode Platform

Position summary
Lead Architect – Government Network & Data Diode Platform
Industries
Information Technology
Government and Administration
Business areas
Information Technology
  • Architecture, design and implementation of a complete rebuild of a third-party connection platform and data diode
  • Support of several thousand users in the VS-NfD environment with NATO security classification
  • Integration of Deep Security Enterprise solutions such as Opswat, Infodas and S-Dot
  • Documentation and vulnerability analysis in the IoT/OT area
  • Introduction of IAM/PAM/LDAP in the government network in compliance with BSI KRITIS requirements
  • Development of connection solutions such as Thin Client, SINA, Terminal Services and ReCoBS
  • Requirements analysis for data diodes and SOC platforms with Splunk
  • Script development with PowerShell, VBS, Batch and Ansible
  • Management of the BCM-GRC HyScout Suite
  • Compliance with the Verschlusssachenanweisung (VSA) and EU and NATO requirements
  • Conducting training workshops and creating audited project documentation
Nov 2020 - Jan 2022
Germany

Network Architect

Position summary
Network Architect
Industries
Information Technology
Business areas
Information Technology
  • Network architecture according to BSI Grundschutz for on-premises environments
  • Design and rebuilding of a SIEM (Splunk, Wazuh) and planning of SOAR/SOC/CDC as well as IAM/PAM
  • Development of a cyber security strategy for on-premises and cloud environments
  • Support of the DriveLock implementation from design through production
  • Setup and design of a geo-redundant data center
  • Introduction of Elastic SIEM with Siemplify SOAR
  • Container management with Kubernetes
  • Analysis of security events and incident response planning
  • Introduction of IAM/PAM tools such as CyberArk REST API, Omada and Saviynt
  • Configuration of Stormshield and Cisco firewalls in separate private networks
  • Rollout of TrendMicro Deep Security servers and agents
Jul 2020 - Oct 2020
Singapore

Technical Pre-Sales Manager

ERP/ SCM System Singapore Pte

Position summary
Technical Pre-Sales Manager at ERP/ SCM System Singapore Pte
Industries
Information Technology
Business areas
Information Technology
Product Development
Sales
  • Preparation of a blockchain-based security platform (PAM/IAM/SIEM/SOC/SOAR)
  • Management of the sales team and technical training
  • Architecture and customized concepts for new customers
  • Preparation of proposals and technical support during commissioning
  • Development based on blockchain technology and Wazuh
Apr 2020 - Oct 2020
Singapore

Head of Development

SecureScrypt Team

Position summary
Head of Development at SecureScrypt Team
Industries
Information Technology
Business areas
Information Technology
Product Development
  • Development of a cloud management platform with payment gateway for SaaS sales
  • Architecture of a private cloud without a connection to AWS or Azure
  • Development of the SentosaXchange payment gateway for marketplace transactions
  • Introduction of Splunk as a security platform including SOC use cases and playbooks
  • Integration of IAM and PAM services
  • Training staff in the administration of cloud services
Feb 2020 - Aug 2021
Germany

Project Manager / Consultant

Position summary
Project Manager / Consultant
Industries
Aerospace and Defense
Information Technology
Business areas
Information Technology
Project Management
  • Integrator of a complete EPM-IAM-PAM-PSM-Vault system with onboarding of 64 AWS environments in a military environment
  • Setup of a system with security gateways, HSM, DDI and PKI
  • Implementation of BSI and BMWI requirements according to NATO level
  • Setup of an endpoint security solution with DriveLock
  • Migration and implementation from BeyondTrust to CyberArk REST API
  • Administration of RHEL Openshift and integration of the OMADA IAM/PAM Identity Suite
  • Script development with PowerShell, VBS, Batch and Ansible
  • Migration of CyberArk environments from version 10.X to 11.X
Jan 2020 - Dec 2023
Singapore

Security Developer

SecureScrypt Pte. Ltd.

Position summary
Security Developer at SecureScrypt Pte. Ltd.
Industries
Banking and Finance
Information Technology
Business areas
Information Technology
Product Development
  • Development of a blockchain security structure
  • Implementation of encryption using QKD (Quantum Key Distribution) via Fiber Optics between two data centers
  • High-security development for financial applications
Apr 2019 - Oct 2019
Braunschweig, Germany

Lead Project Manager / Consultant

Position summary
Lead Project Manager / Consultant
Industries
Automotive
Business areas
Information Technology
Project Management
  • Cyber Security in embedded Automotive platforms
  • Planning and implementation of CyberArk (EPM, PAM, PSM), IAM and SIEM/SOC
  • Container management with Kubernetes
  • Integration of the OMADA (OIS) IAM/PAM Identity Suite
  • Conducting penetration tests with Wireshark and Aircrack
  • Budget planning and negotiations with suppliers
Jan 2019 - Mar 2020
Germany

Sub-Project Consultant

Position summary
Sub-Project Consultant
Industries
Aerospace and Defense
Transportation
Business areas
Information Technology
Procurement
Sales
  • Introduction of SOC/SOAR platforms including Siemplify, Splunk and Wazuh
  • Technical consulting, planning and implementation in the aviation and logistics sectors
  • Pre-sales design and vendor management
  • Introduction of business continuity processes (ITSCM) and ISMS in the KRITIS sector
  • Conducting penetration tests in the Azure Cloud environment
  • Creating scripts with PowerShell and documentation in an agile environment
Sep 2018 - Mar 2019
Frankfurt, Germany

Project Manager / Technical Project Manager

Position summary
Project Manager / Technical Project Manager
Industries
Banking and Finance
Information Technology
Business areas
Information Technology
Project Management
  • Design and implementation of a Europe-wide security system for the EZB 4CB network
  • Integration and adaptation to BAIT and MaRisk requirements
  • Integration of HiScout GRC as part of BSI Grundschutz
  • Cloud operations with QRadar, NexPose and TheHive
  • Planning penetration tests with Burp Suite and Metasploit
  • Preparation of the cloud migration to Azure and AWS
Nov 2017 - Oct 2018
Germany

Global Project Manager

Position summary
Global Project Manager
Industries
Information Technology
Business areas
Information Technology
Project Management
  • Architecture, planning and integration of DLP, ATP, EDR and AntiDDoS systems
  • Implementation of ISMS, SIEM and SOC
  • Preparation of the cloud migration with Splunk in an agile environment
  • Introduction of the OMADA IAM platform for cloud environments
  • Development of a blockchain security infrastructure
  • Design and rollout of the Azure Cloud migration
  • Management of system integrators and vendors
May 2017 - Apr 2018
Germany

Security Compliance Consultant

Deutsche Bank

Position summary
Security Compliance Consultant at Deutsche Bank
Industries
Banking and Finance
Business areas
Audit
Information Technology
  • Creation of an ISMS concept in compliance with the GDPR
  • Contributed to the development of a global network of approx. 25,000 servers
  • Development of a SIEM based on Splunk and HP ArcSight
  • Implementation of patch and update processes in mainframe, Unix, and Linux environments
  • Endpoint security management with IBM BigFix and Tanium
  • Conducting penetration tests in WLAN and cloud networks
  • Reorganization of admin rights (AMR4V)
Sep 2016 - Apr 2017
Germany

Senior Enterprise Security Architect

Position summary
Senior Enterprise Security Architect
Industries
Information Technology
Business areas
Information Technology
  • Documentation and implementation of security requirements according to BSI 100 Grundschutz and ISO 27XXX
  • Consulting on 3G/5G network security and risk analysis
  • Planning of a SOC/ISMS and development of a VMware concept (SaaS)
  • Use of automation tools such as Ansible and Terraform
  • Creation of cryptography solutions for mobile environments and documentation of embedded software
Jul 2016 - Aug 2016
Germany

Consultant / Trainer

Position summary
Consultant / Trainer
Industries
Information Technology
Professional Services
Business areas
Information Technology
  • Development of IT security training concepts based on BSI Grundschutz and ISO 27001
  • Conducting workshops on SOC and SIEM
  • Development of defense measures against targeted attacks
  • Conducting penetration tests and security analyses with Wireshark
  • Consulting on securing firewalls and VPN gateways
Feb 2016 - Jul 2016
Germany

Consultant / Team Member

Position summary
Consultant / Team Member
Industries
Telecommunication
Business areas
Information Technology
Procurement
  • Expansion and securing of the GSM-R network and planning the transition to LTE
  • Introduction of an ISMS based on BSI Grundschutz and ITSig
  • Establishment of a SOC/SIEM including use case and playbook frameworks
  • Threat analysis according to ISO 27001 and BNA 109
  • Risk and change management as well as vendor management
Sep 2015 - Feb 2016
Germany

Team Member / Project Manager

Position summary
Team Member / Project Manager
Industries
Information Technology
Business areas
Information Technology
Project Management
  • Data center migration and expansion as well as reconstruction of the data center
  • Connection to Black Fibre and system analysis
  • Structuring of the SOC and expansion of the SIEM
  • Installation of PKI components and work with hardware security modules (SINA, SafeNet)
  • Migration from SSL-SHA1 to SHA-2 and ADS patching
  • Risk and residual risk analysis for high-availability networks
Feb 2009 - Sep 2015
Singapore

Technical Director

Neoi Pte. Ltd.

Position summary
Technical Director at Neoi Pte. Ltd.
Industries
Aerospace and Defense
Information Technology
Business areas
Information Technology
Product Development
Project Management
  • Software and hardware development as well as PCB layout
  • Development of security concepts in Windows and Unix environments
  • Development of modern encryption solutions for the military and government sectors
  • Development of television and payment applications for Android and iOS
  • Management of an international development group of over 100 people
  • Implementation of a network security platform with SINA and AVDA
  • Securing clouds with PKI-based security
Jan 2005 - Jan 2009
Hong Kong

Senior Systems Engineer / Manager

PIC Pte. Ltd.

Position summary
Senior Systems Engineer / Manager at PIC Pte. Ltd.
Industries
Information Technology
Telecommunication
Business areas
Information Technology
  • Management of 200 technical employees in Hong Kong, China and South America
  • Design of new IT security and network solutions
  • Design and implementation of IP/VoIP systems for service providers
  • IT risk management, analysis and training delivery
Jan 2000 - Dec 2000
Hong Kong

VP IT / Head of Asia Pacific Group

Credit Suisse First Boston

Position summary
VP IT / Head of Asia Pacific Group at Credit Suisse First Boston
Industries
Banking and Finance
Business areas
Information Technology
  • Management of the Global Engineering and Infrastructure Support Team
  • Analysis of existing networks for security risks
  • Development of new risk solutions and migration of systems to Windows
Germany

Senior Systems Engineer

Position summary
Senior Systems Engineer
Industries
Banking and Finance
Telecommunication
Business areas
Information Technology
Product Development
  • Planning of 5G mobile networks while taking security standards such as 3GPP into account
  • Installation of terminal server networks for Swiss banking groups
  • Experience with Packet Protocol as the basis for GSM systems
  • Development of encrypted mobile devices and satellite phones
Singapore

SVP

Goldtron Group Singapore Pte. Ltd.

Position summary
SVP at Goldtron Group Singapore Pte. Ltd.
Industries
Telecommunication
Business areas
Product Development
Project Management
  • Head of the Singapore development group and main coordinator of the Hong Kong team
  • Design of the MXI platform for combined mobile and VoIP services
  • Installation of the first VoIP network in Malaysia
Hong Kong

Interim CTO

Lintux Hong Kong Ltd.

Position summary
Interim CTO at Lintux Hong Kong Ltd.
Industries
Information Technology
Manufacturing
Business areas
Product Development
Sales
Supply Chain Management
  • Acquisition of new customers and coordination of orders with Chinese factories
  • Training of technical staff and technology transfer
  • Development of IP systems
Hong Kong

Senior Consultant

Merrill Lynch International Inc.

Position summary
Senior Consultant at Merrill Lynch International Inc.
Industries
Banking and Finance
Business areas
Business Intelligence
Information Technology
Product Development
  • Network migration from Novell to Windows and Transaction Server
  • Development of investment applications for monitoring the stock market
  • Integration of Reuters and Bloomberg live feeds
  • Implementation of the first security policies for banks in the investment sector
Hong Kong

Contract Engineer

PIC Intl. Hong Kong

Position summary
Contract Engineer at PIC Intl. Hong Kong
Industries
Telecommunication
Business areas
Operations
Product Development
Project Management
  • Project implementation in Iraq, Lebanon, Syria and Saudi Arabia
  • Installation of complete radio communication networks
  • Development of the first encrypted satellite phone
Las Vegas, United States

RF Development Engineer

Pathcom Inc.

Position summary
RF Development Engineer at Pathcom Inc.
Industries
Telecommunication
Business areas
Operations
Product Development
  • Development of CB and UHF radio systems
  • Supervision of manufacturing in the USA and Japan
  • Development of the first Asian-made radio synthesizer and UHF transceiver
Taipei, Taiwan, Province of China

Developer

Taitoma Group

Position summary
Developer at Taitoma Group
Industries
Information Technology
Manufacturing
Business areas
Information Technology
Product Development
Project Management
  • Development and design of software and hardware for Asian manufacturers
  • Implementation of project management methods and strategic leadership
  • Development of solutions for IT security and risk reduction

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Information Technology, Aerospace and Defense, Banking and Finance, Telecommunication, Government and Administration, and Professional Services.

Information Technology
Aerospace and Defense
Banking and Finance
Telecommunication
Government and Administration
Professional Services
Profile match chart

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology, Project Management, Product Development, Procurement, Sales, and Audit.

Information Technology
Project Management
Product Development
Procurement
Sales
Audit
Profile match chart

Summary

More than 30 years working as a technical IT Engineer, PM, Sales Analyst, more in the complete CV.

For over 15 years, I have specialized in digital (cyber) security and bring extensive technical and consulting expertise in highly sensitive areas such as VS-NfD, NATO security projects, aviation security (LSÜ2), and government IT security. I am Ü2-certified and have extensive experience with BSI courses and international standards (ISO 27001, NIST, ENISA).

I have designed, proposed, developed, and hands-on implemented VSA-compliant security solutions for data processing up to the classification level „GEHEIM“ several times – both in consulting and technical roles.

Skills

Help And Support For Clients In Finding The Right Business And Technology Solutions By Working As A Consultant And Consultant On Design Trend-Setting Security Architectures.

Expert In The Classified Information Directive (Vsa), Especially In The 4 Classification Levels, Vs-Nfd, Vs-Vertraulich, Geheim, Streng Geheim.

Core Topics:

  • Secure Hardware Development (Layer 2 Network Devices, Mobile Security Solutions)
  • Security Architectures According To Vs-Nfd Guidelines
  • Development And Securing Of Mobile Platforms (Smartphones, Tablets)
  • Vulnerability Analysis And Implementation Of Protective Measures
  • More Than 15 Years Of Experience As An Analyst With Security In It, Ot, Etc.
  • Ot - Managing Physical Operations
  • Iot - Bridges The Two By Connecting Physical Devices (Ot) To Digital Systems (It)
  • Kritis - Critical Infrastructures – In The Areas Of Information Technology And Telecommunications, Finance And Insurance, Energy (Electricity, Gas, Oil, District Heating), Public Sector, Military Environments
  • Vsa - Classified Information Directives For The Four Classification Levels

Professional Strengths & Technological Expertise – Consulting & Technical Implementation (Selection):

  • Many Years Of Experience As A Certified Security Consultant (Bsi 100–200, C5, Vsa Isms, Grc, Bcm, Hiscout Suite)
  • Kritis Implementation With An Isms In Risk Management And Ensuring The Shared Protection Goals Of Availability, Confidentiality, And Integrity Of Information And Systems
  • Hands-On Project Management And Technical Implementation In Soc, Siem, Soar (Splunk, Ibm Qradar, Exabeam, Thehive, Cortex, Arcsight)
  • Use Of Drivelock (Edr, Device & Application Control), Cyberark Epm, Pam, Psm, Beyondtrust, Zscaler And More
  • Consulting On The Processing Of Classified Information Under Vs-Nfd Criteria (National & International)
  • Architecture And Implementation Of It Security Solutions In Government Environments (Germany, Nato, Eu, Usa, Embassies)
  • Kritis: Critical Infrastructures That Must Be Specially Protected Against Cyberattacks And System Failures To Ensure The Stability And Security Of Society

Iam & Pam Expertise:

  • Implementation Of Abac-/Rbac Solutions In Connection With Identity & Access Management (Iam)
  • Development Of Secure Access Architectures For Cloud And Devops Environments (E.G. Cyberark Rest Api, Empowerid, Saviynt)
  • Planning And Integration Of Pki, Ssl Certificates, Hsm, Ms Ndes, Safenet, And More

Project Experience & Roles (Skill Focus):

  • Project Management, Pmo, Agile Coach, Technical Project Manager (Hands-On), Security Consultant
  • Development Of Secure Products (Hardware And Software), Including Mobile Border Scanners, Fingerprint Solutions, And Sim Card-Based Authentication
  • Customer Focus: Public Sector, Military, Government Agencies, Banks, Insurance Companies, Automotive, Energy, And Transport

Industry Expertise & Regulation:

  • Financial Sector: Dora, Bait, Vait, Risk And Compliance Management, Incident Response
  • Industry & Military: Itscm, Network Security, Vs-Nfd, Nato Standards, Bsi Basic Protection
  • E-Government: E-Banking, Secure Digital Identities, Smartcard Authentication

Technology Stack (Selection):

  • Security Tools: Splunk, Arcsight, Qradar, Wazuh, Exabeam, Thehive, Cortex, Misp, Nexpose, Zalert
  • Penetration Testing: Wireshark, Metasploit, Acunetix, Burp Suite, Aircrack
  • Cloud Platforms: Aws, Azure, Strato, Telekom Cloud – Including Cloud Security & Migration
  • Scripting & Programming: Powershell, Batch, Vbs, Java, C++, Sql, .Net
  • Os & Infrastructure: Windows Server (2003–2022), Linux/Unix, Rhel/Openshift, Oracle
  • Protocols & Architecture: Vlan, Ngw, Ddi, Pap Structures, Secure Segmentation
  • Blockchain & Quantum Security: Own Platform Development & Research Since 2020

Soft Skills & Working Style:

  • Analytical And Structured Approach
  • Strategic Thinking With A Focus On Implementation
  • Expert-Level Technical Understanding
  • Team Leadership Of Up To 80 People, International & Remote
  • Very Good Documentation, Training, And Presentation Skills

Hardware Expertise (25+ Years Of Experience) – Security Hardware & Biometrics:

  • Development Of The First Portable Android-Based Passport Scanner With Integrated Multi-Fingerprint Recognition For Border Protection, Police, Bka, And Banks
  • Development Of Patented Biometric Systems Based On Fingerprint Recognition (E.G. Nurugo Technology)
  • Integration Of Secure Sim And Sd Cards For Passwordless Authentication In Mobile And Stationary Security Applications

Embedded Systems & Cryptography:

  • Experience In Designing And Implementing Security-Critical Embedded Hardware With Hardware-Based Encryption Mechanisms (Aes-256, Diffie-Hellman, Quantum Ready)
  • Research And Development In Quantum-Computing-Based Encryption (Since 2020)

Security Components & Interfaces:

  • Development And Integration Of Nfc And Smartcard Technology
  • High-Security Solutions For Transactions (Uaf, Biometric-Based)
  • Hardware Security Modules (Hsm) & Key Management Systems (Kms)
  • Pap Architectures (Packet Filter, Application Layer Gateway)

Production & Technical Implementation:

  • Management Of Prototype Development, Production Control, And Documentation Of Security-Critical Hardware
  • Rollout Of Security-Certified Devices In Cooperation With Government Agencies, Military, And Civilian Organizations Worldwide

Software And Technology Expertise – Cloud & Infrastructure:

  • Planning, Architecture, And Migration Of Cloud Environments (Aws, Azure, Strato, Telekom Cloud)
  • Development Of Secure Cloud Platforms With Marketplace Integration For Cloud Services (Xaas, Saas, Iaas)
  • Virtualization And Automation Solutions (Vmware Vrealize, Vmware Cloud Foundation, Ansible)

Cybersecurity Solutions:

  • Siem/Soc/Edr: Splunk, Ibm Qradar, Exabeam, Hpe Arcsight, Elk/Elastic Siem, Thehive, Cortex, Nexpose, Misp
  • Endpoint Security: Fireeye, Sophos, Trendmicro, Drivelock (Device Control, Application Control, Encryption)
  • Iam & Pam: Empowerid, Cyberark, Beyondtrust, Saviynt, Psm, Pvwa, Cpm, Abac/Rbac Integration, Epm, Pam, Psm
  • Pki & Certificate Management: Ms Ndes, Safenet, Ssl/Tls, Hsm Integration

Network & Security:

  • Network Analysis And Segmentation: Vlan, Ngw, Ddi, Pap Architecture
  • Penetration Testing: Metasploit, Burp Suite, Acunetix, Aircrack, Wireshark
  • Security Architectures For Classification Levels: Vs-Nfd, Vsa, Nato Secret/Restricted, Usa/Tc Standards

Software Development & Scripting:

  • Languages: Java, C++, .Net, Sql, Json
  • Scripting: Powershell, Vbs, Batch
  • Source Code Analysis, Extensions, Adaptations & Corrections
  • Version Control & Devops: Git, Gitlab, Ci/Cd Integration

Standards & Regulation:

  • Iso/Iec 27001, Bsi 200-2, Bsi C5, Nist, Enisa, Gdpr, Dora, Bait, Vait
  • Emergency Management According To Bsi 100-4
  • Risk Management, Grc, Business Continuity Management (Bcm)
  • 5g Security Tools, Palo Alto Networks, Zscaler Zero-Trust, Cisco, Fortinet, Proofpoint

Roles & Responsibilities In Projects – Project Leadership & Management:

  • Project Manager/Pmo For Complex It And Security Projects With Up To 80 Team Members – Locally And Internationally (Remote/On-Site)
  • Responsibility For Project Planning, Budget, Time Management, Quality And Risk Control
  • Application Of Agile Methods (Scrum, Kanban, Safe), Certified In Jira & Atlassian Suite

Consulting & Technical Expertise:

  • Enterprise Security Consultant Focused On High-Security Requirements In Government/Military And Industrial Environments
  • Analysis And Assessment Of Existing Security Architectures
  • Development Of Customized Security Solutions According To International Standards
  • Contact Person For Classified Information Processes (Vs-Nfd, Nato, Eu, Usa, Embassies)

Security Operations & Incident Response:

  • Establishment And Operation Of Siem And Soc Environments Including Use Case Development, Playbooks, Escalation Chains
  • Consulting And Technical Implementation Of Soar Automation (Splunk, Cortex, Etc.)
  • Vulnerability Management & Vulnerability Assessment Including Cdc Interface And Incident Documentation

Product Development & Innovation:

  • Development Of New Security Products (Hardware & Software) From Concept To Market Launch
  • Technical And Commercial Leadership In Pre-Sales And Sales Situations
  • Support For Research Departments With Trend Analyses And Market Launches Of Innovative It Security Solutions

Languages

German
Native
English
Advanced
Spanish
Advanced
Chinese
Advanced

Education

Philipp Reitz Polytechnikum

Diplom Ingenieur

Humanistic Gymnasium Wiesbaden

TU Darmstadt

Electrical Engineering, Electronics, Mathematics, Physics

...and 2 more

Certifications & licenses

AISP

BSI 100 / BSI 200 / C5-Testierung

BSI C5

BSI GRUNDSCHUTZ

BSI certified as Cyber Security Engineer including recovery and resilience

BSI

Cloud Security

CyberArk –certified

CyberArk

GDPR / DSGVO

Splunk

Ü2 / LSÜ2

Statistics

Experience

Total positions 30
Experience in Information Technology 19 y
Avg length 1 y
Longest experience 6 y 7 m

Global experience

Countries worked in 5 (Germany, Singapore, Hong Kong, United States, Taiwan, Province of China)
Primary country Germany

Expertise

Recent roles Technical Project Manager – VS-NfD Security Project, Senior Security Architect, Security Consultant / Project Manager
Main industries Information Technology, Aerospace and Defense, Banking and Finance
Main business areas Information Technology, Project Management, Product Development

Qualifications

Certifications earned 18
Member since
Last update
Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Frequently asked questions

Have questions? Find more information here.

Bernhard is based in Wiesbaden, Germany and can operate in on-site, hybrid, and remote work models.

Bernhard speaks the following languages: German (Native), English (Advanced), Spanish (Advanced), Chinese (Advanced).

Bernhard has at least 23 years of experience. During this time, Bernhard has worked in at least 22 different roles and for 8 different companies. The average length of individual experience is 1 year. Note that Bernhard may not have shared all experience and actually has more experience.

Based on recent experience, Bernhard would be well-suited for roles such as: Technical Project Manager – VS-NfD Security Project, Senior Security Architect, Security Consultant / Project Manager.

Bernhard's most recent position is Technical Project Manager – VS-NfD Security Project.

In recent years, Bernhard has worked for Intermediate Beratung and SecureScrypt Pte. Ltd..

Bernhard is most experienced in industries like Information Technology, Aerospace and Defense, and Banking and Finance. Bernhard also has some experience in Telecommunication, Government and Administration, and Transportation.

Bernhard is most experienced in business areas like Information Technology, Project Management, and Product Development. Bernhard also has some experience in Procurement, Sales, and Audit.

Bernhard has recently worked in industries like Information Technology, Banking and Finance, and Government and Administration.

Bernhard has recently worked in business areas like Information Technology, Product Development, and Project Management.

Bernhard attended Philipp Reitz Polytechnikum.

Bernhard has 18 certificates. Among them, these include: AISP, BSI 100 / BSI 200 / C5-Testierung, and BSI C5.

Bernhard will be available full-time from January 2027.

Daily rate distribution

0% 25% 50% 75% 100%
22% of experts charge less than €800 per day.
56% of experts charge between €800 and €1200 per day.
22% of experts charge €1600 or more per day.
<€800 €800-​1200 €1600+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1200
900
600
300
Rate comparison chart
Daily rate avg. 1034 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1200
900
600
300
Rate comparison chart
Median rate 960 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 5 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.