Willy W.-Senior IT Security Consultant | IT Security Officer
Check rate
Experience
IT Security Consultant
SIEM/SOC Wazuh Implementation
Logistics
Wazuh | OpenSearch | Use Cases | Dashboards | Training
- Advised and provided technical support for the implementation of Wazuh as a SIEM solution
- Prepared and coordinated with teams involved in firewall, network, and IT operations
- Installed and configured Wazuh on the designated server infrastructure
- Developed security-related use cases and dashboards for centralized monitoring
- Delivered employee training on using and analyzing data from the SIEM solution
IT Security Consultant
BSI IT-Grundschutz
Federal Government
CVE Reviews | CVSS / EPSS | Patch Coordination | WSUS / MECM / PowerShell | BSI IT-Grundschutz | ISO 27001 | ISMS | Audit Preparation | Security Governance
- Reviewed internal assets for vulnerabilities based on current BSI CVE reports, including risk and exploitability analysis and prioritization based on CVSS and EPSS
- Coordinated security-related updates and patches to fix identified vulnerabilities
- Managed Windows patches using WSUS and Microsoft Configuration Manager, including PowerShell-based automation
- Conducted ongoing IT-Grundschutz checks and assessed existing security measures
- Recorded and assessed new assets as part of BSI IT-Grundschutz
- Supported the certification team with audit preparation and audit-ready evidence documentation
- Reviewed existing security policies and ISMS processes for compliance with BSI IT-Grundschutz and ISO 27001
- Assessed audit evidence, documented gaps, and identified appropriate security measures
IT Security Consultant
SIEM/SOC OpenSearch
Federal Government
Linux Patching RHEL / Ubuntu | Python / Ansible | OpenSearch SIEM | Suricata | Baselining | Threat Hunting | SOC Structures | Confluence
- Managed Linux patching for Ubuntu and Red Hat Enterprise Linux (RHEL) systems and connected sensors, including repository management and kernel updates
- Automated update and maintenance processes using Python and Ansible
- Operated and continuously developed the OpenSearch SIEM environment
- Conducted baselining and threat hunting to detect security-related anomalies
- Improved existing Suricata IDS rules to enhance threat detection
- Supported the development and improvement of SOC structures and security processes
- Took on operational duties as a Security Engineer and Security Analyst
- Analyzed and improved existing correlation rules to reduce false positives
- Administered and maintained the Linux-based SIEM infrastructure
- Conducted security analyses and made recommendations for technical improvements
- Documented technical configurations and analysis results in Confluence
External Information Security Officer (ISB)
External Information Security Officer (ISB)
Retainer Clients (non-project)
ISMS | BSI IT-Grundschutz | TISAX | ISO 27001 | Audit Preparation | Security Governance | Risk Management
- Provided ongoing support, maintenance, and development of existing information security management systems (ISMS)
- Prepared for and provided expert support during audits, and compiled relevant security evidence
- Advised clients on organizational and technical information security matters
- Implemented and assessed security requirements under BSI IT-Grundschutz, TISAX, and ISO 27001
- Analyzed and assessed reported security incidents from SentinelOne, SIEM, and IDS/IPS systems
- Created and aligned security policies and rules for IT systems, cloud/SaaS solutions, and external service providers
- Supported internal ISMS audits and service provider assessments with audit checklists, risk assessments, and recommendations
IT Security Consultant & ISB
SIEM/SOC QRadar
Financial Sector
Greenbone | QRadar | PCI-DSS 4.0 | DORA | Use Cases | Security Onion | BSI IT-Grundschutz
- Operated and maintained the Greenbone vulnerability scanner and improved Security Onion IDS rules
- Connected and analyzed log sources in QRadar, including parsing, DSM mapping, and LogSource reviews
- Developed and improved security-related use cases in coordination with business teams
- Monitored the SIEM, analyzed alerts, and handled security events in the SOC environment
- Created and improved correlation rules in line with PCI-DSS 4.0
- Conducted threat hunting to identify potential threats
- Implemented regulatory security requirements from DORA and PCI-DSS
- Documented security measures in Confluence and managed tasks through Jira
- Assessed security events against existing security concepts and BSI requirements
- Prepared audit-ready documentation of analysis results and security measures for internal and external audits
IT Security Consultant
SIEM/SOC Splunk
Financial sector
Splunk | Use Case Optimization | Playbooks | Policies | Recertification | BAIT | DORA
- Set up centralized application monitoring based on the Splunk SIEM solution
- Developed and optimized existing Splunk use cases to improve threat detection
- Conducted SIEM monitoring, and analyzed and handled security-related alerts
- Created and further developed security policies and monitoring concepts
- Created and documented operational security playbooks in Confluence and Jira
- Recertified monitoring profiles and existing logging concepts
- Considered regulatory requirements from BAIT and DORA in SIEM operations
IT Security Consultant & ISB
TISAX & ISMS
Logistics
TISAX | VDA ISA 5.1 | ISO 27001 | BSI IT-Grundschutz | Risk Analysis | Audit Preparation | EDR Evaluation
- Set up and implemented an ISMS to prepare for TISAX certification
- Developed and implemented IT security concepts in line with VDA ISA 5.1, ISO 27001 and BSI IT-Grundschutz
- Created organizational security policies, work instructions and IT security concepts
- Conducted risk analyses, determined protection requirements and assessed relevant threat scenarios
- Developed and prioritized action plans to sustainably address identified security gaps
- Conducted PoCs and evaluated various NDR/MDR/EDR solutions, including CrowdStrike, SentinelOne, Cybereason and Cynet
- Implemented SentinelOne, including agent rollout and assessment of reported security incidents
- Prepared for and supported the ISMS/TISAX audit, including reviewing security evidence and documenting deviations
- Further developed audit-ready security policies and assessed security requirements for software solutions and IT service providers
IT Security Consultant
Azure Cloud Security
Logistics
Microsoft Azure | Cloud Security | SentinelOne Cloud Security | RBAC | Security Concepts | Risk Assessment
- Provided security expertise during the setup of a Microsoft Azure cloud environment
- Advised on the secure configuration of cloud services and infrastructure components
- Created security concepts and policies for secure cloud operations
- Implemented SentinelOne Cloud Security to monitor the cloud environment
- Reviewed existing cloud configurations for security risks and misconfigurations
- Reviewed RBAC and role and permission concepts within the Azure environment
- Assessed the cloud architecture from a security perspective and developed specific security requirements and recommendations
- Further developed auditable cloud security policies in line with ISO 27001 and BSI IT-Grundschutz, including risk documentation
IT Security Officer
SIEM Migration & ISMS
Logistics
QRadar to Splunk | Darktrace | Microsoft Sentinel | SIEM Migration | IT-Grundschutz | ISMS
- Maintained and further developed existing SIEM use cases, correlation rules and SOC processes
- Continuously monitored and analyzed security-related alerts and incidents
- Planned and provided technical support for replacing the existing SIEM system
- Migrated existing use cases and correlation rules from QRadar to Splunk
- Implemented and configured Darktrace Email Security
- Analyzed and assessed Darktrace security alerts during ongoing operations
- Conducted PoCs with Microsoft Sentinel, Splunk and Cloudflare Area 1
- Conducted IT-Grundschutz-based reviews of the current state and assessed existing security measures
- Reviewed and expanded the ISMS, including policies and security concepts in line with ISO 27001 and BSI IT-Grundschutz
IT Security Consultant
TISAX Implementation
Automotive
TISAX | VDA ISA 5.1 | ISMS | Threat Analysis | Risk Assessment
- Implemented an information security management system in line with VDA ISA 5.1
- Prepared for the TISAX audit, including assessing existing security measures
- Conducted threat analyses and risk assessments to identify relevant security risks
IT Security Consultant
QRadar Use Case Development
Media
QRadar | MITRE ATT&CK | Sigma Rules | Use Cases | Correlation Rules | Log Analysis
- Developed security-related use cases and correlation rules based on existing requirements and log analyses
- Used MITRE ATT&CK and Sigma Rules to systematically detect potential attack patterns
- Reviewed and optimized existing detection rules in coordination with business units and the SOC
- Analyzed log events to identify new threat scenarios and improve QRadar monitoring
IT Security Consultant
AWS Security & Centralized Logging
Pharmaceuticals
AWS CloudTrail | AWS CloudWatch | IAM | Log Consolidation | Splunk | CrowdStrike
- Consolidated security-related log sources from various AWS cloud services for centralized monitoring
- Set up and configured AWS CloudTrail and CloudWatch to log security-related events
- Implemented identity and access management requirements for cloud services and log access
- Reviewed existing AWS configurations for security risks and potential misconfigurations
- Set up log forwarding to Splunk for centralized analysis and correlation of security events
- Implemented CrowdStrike to support cloud security monitoring and XDR capabilities
Data Engineer / Data Analyst
Business Intelligence
Logistics
Microsoft Power BI | ETL | Microsoft SQL | Lobster_data | Data Integration
- Built and developed a business intelligence solution using Microsoft Power BI
- Performed data analysis, data transformations, and ETL processes to prepare data
- Created and optimized SQL queries for Microsoft SQL databases
- Integrated various data sources using Lobster_data for centralized analysis in Power BI
IT Security Consultant & ISB
ISMS Implementation
Industrial Engineering
ISO 27001 | BSI IT-Grundschutz | QRadar | Risk Management | Security Concepts
- Identified and assessed relevant IT assets and established an ISMS in accordance with ISO 27001 and BSI IT-Grundschutz
- Conducted protection needs assessments, threat analyses, and structured risk assessments
- Created security policies, organizational instructions, and IT security concepts
- Developed and optimized QRadar use cases based on identified security risks
- Developed recommendations for emergency management, as well as emergency and recovery plans
- Defined technical and organizational security measures based on the risk analyses conducted
Security Research
HackerOne
Bug Bounty
HackerOne
Web Application Pentesting | Vulnerability Research | Bug Bounty | Web Security
- Conducted bug bounty activities through the HackerOne platform
- Performed security analyses and penetration tests of web applications and publicly accessible IT systems
- Identified, analyzed, and documented potential vulnerabilities in defined test environments
- Supported client companies in improving their security measures through structured vulnerability reports
Security Development .NET/C#
.NET/C#
Logistics
Secure Development | .NET/C# | REST API | Data Processing
- Development of software tools for the secure processing and provision of data based on .NET/C#
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Transportation, Information Technology, Professional Services, Banking and Finance, Government and Administration, and Automotive.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Research and Development, Audit, Business Intelligence, and Product Development.
Summary
IT Security Consultant and Information Security Officer (ISB/ISO) with project experience since 2017, specializing in patch and vulnerability management in public sector and financial environments: reviewing assets against current CVE reports, risk and exploitability analysis with prioritization based on CVSS and EPSS, operating the Greenbone/OpenVAS vulnerability scanner, and coordinating security-related updates and patches. Hands-on experience in Windows patch management (WSUS, Microsoft Configuration Manager, PowerShell) and Linux patch management (Red Hat Enterprise Linux, Ubuntu, repository management, kernel updates), including automation with Python and Ansible. Extensive experience building, developing, and maintaining ISMS based on ISO 27001, BSI IT-Grundschutz, and VDA ISA/TISAX, as well as in security governance, risk management, and creating security policies and IT security concepts. Preparing for and supporting audits with audit-ready evidence, assessing security measures, identifying gaps, and making recommendations; regulatory requirements from DORA, BAIT, and PCI-DSS. Also experienced in security assessments of cloud/SaaS environments (Azure, AWS), with strong technical expertise in SIEM/SOC (IBM QRadar, Splunk, Wazuh, OpenSearch), security analytics, incident handling, and developing security use cases and correlation rules.
Skills
Professional Development & Expertise: Nis 2 / Incident Management & Risk Management; Information Security Officer Isb/Iso; Bsi Incident Expert / Bsi It-Grundschutz; Iso 27001 / Tisax; Microsoft Sentinel; Splunk / Siem / Soc; Cloud Security (Azure, Aws); Ethical Hacking Essentials; Software Developer (Ihk); It Security Concepts
Industry Focus: Logistics; Federal Government; Financial Sector; Automotive; Media; Pharma; Industrial Engineering
Vulnerability & Offensive Security: Vulnerability Management, Cve Reviews, Cvss/Epss Prioritization, Greenbone/Openvas, Vulnerability Scanning, Patch Coordination, Windows Patch Management (Wsus, Microsoft Configuration Manager, Powershell), Linux Patch Management (Rhel, Ubuntu, Repository Management, Kernel Updates), Automation (Python, Ansible), Penetration Testing (Burp Suite, Kali, Metasploit), Web Application Security, Web Security, Vulnerability Research, Bug Bounty
Siem & Soc: Qradar, Splunk, Microsoft Sentinel (Azure Sentinel), Elastic Siem, Wazuh, Opensearch, Siem Use Case Development, Correlation Rules, Mitre Att&Ck, Sigma Rules, Log Source Integration, Dsm Parsing, Log Analysis, Log Consolidation, Log Forwarding, Siem Dashboards, Baselining, Siem Migration, Soc Operations, Threat Hunting, Monitoring
Ids & Incident Response: Suricata, Security Onion, Ids Rule Tuning, Darktrace, Darktrace Email Security, Incident Response, Playbook Development
Endpoint & Network Security: Sentinelone, Crowdstrike, Cybereason, Cynet, Visionone, Microsoft Defender, Ndr/Xdr/Edr/Mdr, Antivirus, Netskope, Cloudflare, Cloudflare Area 1, Zero Trust
Cloud & Identity: Azure Cloud, Azure Entra Id, Aws, Aws Cloudtrail, Aws Cloudwatch, Iam, Rbac, Active Directory, Microsoft 365, Sharepoint, Nextcloud, Virtual Machines
Development & Data: Secure Development (.Net/C#), Rest Api, Sql (Mysql, Oracle Sql, Microsoft Sql), Gitlab, Github, Power Bi, Data Engineering (Etl, Data Warehouse, Data Lake), Lobster Data, Data Integration
Tools: Egrc Systems (Grasp, Ms-Lds), Confluence, Jira, Ticketing Systems (Otrs, Tanss, Zammad)
Operating Systems & Networking: Linux (Red Hat Enterprise Linux, Ubuntu), Windows, Macos, Tcp, Udp, Routing, Dhcp, Dns, Firewall, Vpn
Standards: Iso 27001, Bsi It-Grundschutz, Itil, Tisax (Vda Isa), Din Spec 27076
Regulations: Nis 2, Dora, Bait, Pci-Dss (Including 4.0), Kritis
Isms & Risk: Vulnerability Management, Risk Analysis, Security Needs Assessment, Isms Development, Security Governance, Incident Management & Risk Management, Tara (Threat Analysis & Risk Assessment), Incident Expertise (Bsi), Emergency And Recovery Plans
Audits & Documentation: Audit Preparation, Certification Audits, Security Concepts And Policies, Recertification Of Monitoring And Logging Concepts
Project Management: Project Leadership And Project Coordination (Poc, Replacement Of Security Systems, Implementation Of Standards And Certifications), Training And Employee Onboarding
Languages
Certifications & licenses
Cloud Security (Azure, AWS)
Ethical Hacking Essentials
IT Security Concepts
Microsoft Sentinel
NIS 2 / Incident Management & Risk Management
Software Developer
IHK
Splunk / SIEM / SOC
BSI Incident Expert / BSI IT-Grundschutz
BSI
Statistics
Experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Willy is based in Eisenach, Germany.
Willy speaks the following languages: German (Native), English (Advanced).
Willy has at least 10 years of experience. During this time, Willy has worked in at least 7 different roles and for 1 company. The average length of individual experience is 1 year and 7 months. Note that Willy may not have shared all experience and actually has more experience.
Based on recent experience, Willy would be well-suited for roles such as: IT Security Consultant, External Information Security Officer (ISB), IT Security Consultant & ISB.
Willy's most recent position is IT Security Consultant.
In recent years, Willy has worked for HackerOne.
Willy is most experienced in industries like Transportation, Information Technology, and Professional Services. Willy also has some experience in Banking and Finance, Government and Administration, and Automotive.
Willy is most experienced in business areas like Information Technology, Research and Development, and Audit. Willy also has some experience in Business Intelligence and Product Development.
Willy has recently worked in industries like Information Technology, Transportation, and Professional Services.
Willy has recently worked in business areas like Information Technology, Research and Development, and Audit.
Willy has 10 certificates. Among them, these include: Cloud Security (Azure, AWS), Ethical Hacking Essentials, and ISO 27001 / TISAX.
Willy will be available full-time from November 2026.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 3 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Bernhard B.
Pierre G.
Christian D.
Nikolaus B.
Federico L.
Daniel J.
Reza N.
Christian F.
Alexander S.
Mahmoud Q.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a IT Security Consultant
Christian E.
Jin-Ho Y.
Erkan Y.
Andreas F.
Mike B.
Rudolf E.
Stephan S.
Baris E.
Sven T.
Benito E.
Nearby freelancers
Professionals working in or nearby Eisenach, Germany
Matthias K.
Norbert H.
Matthias S.
Norbert F.
Marina K.
Fred S.
Christian L.
Sai K.
Dirk W.
Yannick S.
