Krisztián K.-Senior Security Engineer

Check rate
Experience
Smart Device Automation
ITZBund
- Ticket automation for smart devices; SharePoint
- Python, JavaScript, Java, Gradle
- CI/CD Git pipeline and secure programming
IT Security Automation
ITZBund
- Vulnerability and firewall automation/orchestration; SharePoint
- Python, Rust, Bash/Shell, PowerShell; Ansible, Git, and APIs
- Report standardization and automation; ESM ticket automation for firewall/SOC/vulnerability tasks
IT SOC / Vulnerability
ITZBund
- Vulnerability management with Greenbone, Tenable.sc, and Rapid7; scan automation; SharePoint
- OpenTofu/Terraform, Ansible, Vault, Podman/Docker; compliance audits
- SOC with Elasticsearch/Graylog; Python/Rust/Bash/PowerShell; Git collaboration
- PoCs and setup of several vulnerability scanning systems; report automation
Hardening Specialist
BWI / Thales Group
- ZCSBw/CIS/NIST/BSI hardening and compliance, Windows/Linux.
- ZCSBw/CIS/NIST/BSI hardening for Windows/Linux
- Hardening automation with JSON, PowerShell, Shell/Bash, and Python
- Linux/Windows golden images, Preseed, kernel compilation, TPM, Microsoft MDT
- Tenable compliance audit scripting and Rundeck automation
IT Webcheck Team
ITZBund
- DAST/penetration testing with Burp Suite, OWASP, and Metasploit; OpenVAS/Nessus; SharePoint
- Architecture of an automation platform; vulnerability management with OpenVAS/Nessus
- SOC with Elasticsearch/Graylog; collaborative pentest platform
- Report standardization, expansion of the pentest approach, and audit support
IT Network Security Team
ITZBund
- Firewall automation with Ansible/Python/Perl/Shell; SharePoint
- Installation and configuration of Cisco Firepower/ASA; Cisco ISE administration
- API interfaces for Tufin, DDI and BMC Remedy
- DDoS/attack analysis with Arbor and Graylog analysis
Penetration Tester
Airbus Space and Defense – NUKOM (NATO)
- CIS hardening.
Vulnerability and Penetration Tester
IFI Ingenieurbüro für Industrieanlagen GmbH
- Vulnerability analysis and web service penetration testing; Nessus, Rapid7, OpenVAS, OWASP.
IT Middleware Team
ITZBund / Statistisches Bundesamt
- CIS/NIST hardening, deployment and automation; SharePoint
- Pentest/audit risk analysis and Splunk log analysis
- Bash/Python/CLI; JBoss, Tomcat, Apache
IT Cyber Security Consultant
Lufthansa Group
- CIS/NIST hardening management; penetration testing; Microsoft Teams
- Vulnerability management with Qualys/Tenable.sc; QRadar web/application analysis
- Patch management, PowerShell report automation and CERT (KeepBlue/Dejablue)
Hardening Consultant
Vodafone Group
- Operating system and web server CIS hardening.
IT Technical Consultant
DB Investment Services
- Technical consulting for applications, infrastructure, and security.
- Oracle WebLogic migration 10→12; ELK/log analysis/SIEM; ActiveMQ/FUSE
- Code review/SAST-related analysis; DAST/OWASP penetration testing; Tenable.sc; CIS/NIST hardening
- LAN/DMZ/wireless tests; WLST/Python/Bash/KSH; UC4
IT Security Penetration Tester
ECB via Airbus MSP
- IT security penetration testing.
- OWASP penetration testing and Tenable.sc vulnerability analysis; Microsoft Teams
- LAN/DMZ/wireless infrastructure tests; ArcSight web/application analysis
- Mobile application testing
IT Security Consultant
Deutsche Landesbank (anonymized)
- Application/web server, intranet/DMZ audit, vulnerability analysis, and web service audit.
Web and Vulnerability Tester
STF Group
- Web and vulnerability audit (reference project).
Technical Consultant
Commerzbank AG
- Operation/integration testing of an API management platform with Axway, MySQL and Cassandra
- HA infrastructure consulting, setup of production/test environments, deployment/configuration
- Coordinated online banking penetration tests and introduced ELK log analysis; regexp anomaly detection; Microsoft Teams
- WebSphere 8.5, Linux/Solaris, Bash/KSH/Perl/Python, HP Service Manager
Auditor
Euronet Kft.
- CIS Benchmark audit, remote/Budapest.
Auditor
Imperial Tobacco
- Intranet audit, remote/Budapest.
IT Security Engineer
Weir Group PLC
- Implemented RSA Secured Authentication.
Technical Refresh WebLogic & Java
Deutsche Bank
- Oracle WebLogic 12, WLST/Jython, Java 1.7
- TeamCity, Sonar (static code analysis), Nexus, Maven; Linux/Solaris; Bash/KSH/Perl; GCM/JIRA
Technical Security & Risk Management
Deutsche Bank
- System/infrastructure analysis and architecture; Technical Solution Architecture
- Security risk assessment, technical coordination of infrastructure integration, and performance optimization
Auditor
T-Systems NyRT.
- CIS Benchmark Audit.
Patch & Security Management
BASF
- Security and automation support for middleware/web servers
- KSH/Bash/Perl automation; Apache/Tomcat, IIS, WebSphere
- BladeLogic patch/deployment monitoring; SVN; LAMP; AHD ticketing
Auditor
Budapest Mayor's Office (anonymized)
- DMZ and intranet audit.
Auditor
Proventa AG
- Web and vulnerability audit (reference project).
Build/Deployment Manager & Software Configuration Specialist
Deutsche Telekom AG
- Technical architecture, user/deployment/security concept
- Apache/Tomcat, Maven/Ant/Groovy; TeamCity/Jenkins/Nexus; Redline RPM
- Build/deployment and Bash/KSH/Groovy/Jython/XSLT automation; Jira
Software Configuration Specialist
1&1 Internet AG
- OpenXchange test/production support in the middleware area
- Apache/Tomcat/JBoss, Maven/Ant, Jenkins/Puppet/Nexus, build/deployment
- Nagios/Nimsoft and LAMP support
Drupal CMS Web Development
calivita.de
- Drupal CMS, LAMP, PHP patches and CSS
- SSL online shop, SEO and MySQL administration
Consultant
Deutsche Telekom AG
- Cloning team; build/deployment automation for IBM MQ and PHP
- Migration MQ6→MQ7 and MQ7 security concept
- LAMP, IBM WebSphere MQ, SVN/Git, Maven/Ant/Jenkins/Nexus, RPM/KSH/Bash/Perl, Kanban
CMS Web Development
Danubius Sprach- und Kulturverein Darmstadt e.V.
- Drupal website for a non-profit children's association: installation, configuration, PHP patches, CSS and MySQL
Software Configuration Specialist
Deutsche Bank AG
- Deployment automation; builds/deployments for IBM MQ and Oracle WebLogic
- MQ monitoring with Nagios; IBM Tivoli Job Scheduler; incident/problem management
- Planning/implementation of an MQ cluster; Veritas Cluster; Bash/Perl/Jython/XSLT; Jira/GCM
Deployment Consultant
SL Software Consulting / T-Com
- Deployment for more than 16 projects across different OS/architecture platforms
- Set up cluster, integration, load, and acceptance test environments
- Config/release/rollout/build/deployment management; WebSphere/JBoss/Tomcat/WebLogic; Solaris/SLES
Infrastructure & System Analyst
DK Telecom Software Zrt. / RCO Terminal Systeme GmbH
- WAN architecture for seven European offices
- Network measurement/management, project management, T1/T2/T3 network and cost planning
Software Developer / 2nd & 3rd Level Support
DK Telecom Software Zrt. / CIDA GmbH
- Support for a pharmacy inventory management system with approx. 1,600 customers
- MS Access, VB6, Linux server administration, Oracle XE on SUSE Linux
- Hardware/software testing and communications coordination
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Government and Administration, Banking and Finance, Telecommunication, Education, and Healthcare.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Audit, Product Development, Project Management, Customer Service, and Quality Assurance.
Summary
Senior IT security and infrastructure specialist with many years of project experience in regulated and security-critical environments. Focus areas: security automation, vulnerability management, penetration testing, CIS/NIST/BSI hardening, network and firewall security, middleware, CI/CD, and local and agentic AI systems. Combining deep operations and infrastructure knowledge with software development and automation. Hands-on experience with ITSM-based processes in enterprise and government environments, especially the interaction of incident, change, and remediation processes, as well as structured tracking of technical security measures. Also experienced in API-based integration and automation of ITSM ticketing systems for the automated processing and tracking of security and infrastructure tasks. So far, my focus has been more on Windows-Linux patching, vulnerability management, and automating patch, compliance, and remediation processes with PowerShell, Python, and Ansible than on the production operation of Azure Update Manager itself. I am very familiar from many years of practical experience with the underlying processes, such as patch assessment and prioritization, pre- and post-checks, compliance checks, remediation, reporting, and automated patch workflows, so I can get up to speed with Azure Update Manager quickly.
Skills
- Security Engineering: Penetration Testing, Vulnerability Management, Compliance Audits, Hardening, Soc/Log Analysis, Risk Analysis
- Automation & Development: Python, Go, Rust, Bash/Shell, Powershell, Perl, Java, Javascript; Rest Apis; Git; Ci/Cd; Ansible
- Network Security: Cisco Asa/Firepower, Firewall Orchestration, Cisco Ise, Ddi/Tufin Integration, Ddos/Attack Analysis
- Ai Security: Local Llms, Ollama, Rag, Mcp, Agentic Ai, Prompt-Injection/Jailbreak Testing, Ai-Assisted Pentesting And Soc Workflows
- Platforms & Middleware: Linux/Solaris/Windows, Apache, Tomcat, Jboss, Websphere, Weblogic, Ibm Mq, Elk/Elastic, Graylog, Splunk
- Certifications: Osce, Oscp; Security Clearance U2/Su2 Project Experience
Languages
Education
Universität Pécs
Technical Teaching · Computer Science · Pécs, Hungary
Diploma thesis on students' interaction with a student administration system.
Universität Pécs
Computer Engineering · Cybernetics/Robotics · Pécs, Hungary
Certifications & licenses
Advanced Security Clearance Ü2 under §9 SÜG
Reliability check under §7 LuftSiG
OSCE - Offensive Security Certified Expert
Metasploit Ruby Scripting
Advanced Java (J2EE)
EC Forensic Analysis Basics
Solaris 10 Administration for Experienced UNIX Administrators
Oracle DB Administrator
Microsoft Windows 2000 Administration / Directory Services
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Krisztián is based in Riedstadt, Germany and can operate in on-site, hybrid, and remote work models.
Krisztián speaks the following languages: Hungarian (Native), German (Advanced), English (Intermediate).
Krisztián has at least 21 years of experience. During this time, Krisztián has worked in at least 29 different roles and for 28 different companies. The average length of individual experience is 1 year and 8 months. Note that Krisztián may not have shared all experience and actually has more experience.
Based on recent experience, Krisztián would be well-suited for roles such as: Smart Device Automation, IT Security Automation, IT SOC / Vulnerability.
Krisztián's most recent position is Smart Device Automation at ITZBund.
In recent years, Krisztián has worked for ITZBund, BWI / Thales Group, Airbus Space and Defense – NUKOM (NATO), and IFI Ingenieurbüro für Industrieanlagen GmbH.
Krisztián is most experienced in industries like Information Technology, Government and Administration, and Banking and Finance. Krisztián also has some experience in Telecommunication, Education, and Healthcare.
Krisztián is most experienced in business areas like Information Technology, Audit, and Product Development. Krisztián also has some experience in Project Management, Customer Service, and Quality Assurance.
Krisztián has recently worked in industries like Information Technology, Government and Administration, and Aerospace and Defense.
Krisztián has recently worked in business areas like Information Technology and Audit.
Krisztián attended Universität Pécs for Computer Science.
Krisztián has 12 certificates. Among them, these include: Advanced Security Clearance Ü2 under §9 SÜG, Reliability check under §7 LuftSiG, and OSCE - Offensive Security Certified Expert.
Krisztián is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 3 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Smart Device Automation
Nearby freelancers
Professionals working in or nearby Riedstadt, Germany
