Skip to main content
Top expert badge
Recommended expert
Profile header background

Krisztián K.-Senior Security Engineer

Krisztián K. - Senior Security Engineer - profile avatar
Profile header overlay
Available
Riedstadt, Germany

Check rate

Experience

Mar 2026 - Present

Smart Device Automation

ITZBund

Position summary
Smart Device Automation at ITZBund
Industries
Information Technology
Government and Administration
Business areas
Information Technology
  • Ticket automation for smart devices; SharePoint
  • Python, JavaScript, Java, Gradle
  • CI/CD Git pipeline and secure programming
Jan 2026 - Present

IT Security Automation

ITZBund

Position summary
IT Security Automation at ITZBund
Industries
Information Technology
Government and Administration
Business areas
Information Technology
  • Vulnerability and firewall automation/orchestration; SharePoint
  • Python, Rust, Bash/Shell, PowerShell; Ansible, Git, and APIs
  • Report standardization and automation; ESM ticket automation for firewall/SOC/vulnerability tasks
Apr 2024 - Dec 2025

IT SOC / Vulnerability

ITZBund

Position summary
IT SOC / Vulnerability at ITZBund
Industries
Information Technology
Government and Administration
Business areas
Audit
Information Technology
  • Vulnerability management with Greenbone, Tenable.sc, and Rapid7; scan automation; SharePoint
  • OpenTofu/Terraform, Ansible, Vault, Podman/Docker; compliance audits
  • SOC with Elasticsearch/Graylog; Python/Rust/Bash/PowerShell; Git collaboration
  • PoCs and setup of several vulnerability scanning systems; report automation
Apr 2023 - Feb 2024

Hardening Specialist

BWI / Thales Group

Position summary
Hardening Specialist at BWI / Thales Group
Industries
Aerospace and Defense
Information Technology
Business areas
Information Technology
  • ZCSBw/CIS/NIST/BSI hardening and compliance, Windows/Linux.
  • ZCSBw/CIS/NIST/BSI hardening for Windows/Linux
  • Hardening automation with JSON, PowerShell, Shell/Bash, and Python
  • Linux/Windows golden images, Preseed, kernel compilation, TPM, Microsoft MDT
  • Tenable compliance audit scripting and Rundeck automation
Sep 2022 - Dec 2023

IT Webcheck Team

ITZBund

Position summary
IT Webcheck Team at ITZBund
Industries
Information Technology
Government and Administration
Business areas
Information Technology
  • DAST/penetration testing with Burp Suite, OWASP, and Metasploit; OpenVAS/Nessus; SharePoint
  • Architecture of an automation platform; vulnerability management with OpenVAS/Nessus
  • SOC with Elasticsearch/Graylog; collaborative pentest platform
  • Report standardization, expansion of the pentest approach, and audit support
May 2021 - Mar 2024

IT Network Security Team

ITZBund

Position summary
IT Network Security Team at ITZBund
Industries
Information Technology
Government and Administration
Business areas
Information Technology
  • Firewall automation with Ansible/Python/Perl/Shell; SharePoint
  • Installation and configuration of Cisco Firepower/ASA; Cisco ISE administration
  • API interfaces for Tufin, DDI and BMC Remedy
  • DDoS/attack analysis with Arbor and Graylog analysis
Jan 2021 - Dec 2021
Remote

Penetration Tester

Airbus Space and Defense – NUKOM (NATO)

Position summary
Penetration Tester at Airbus Space and Defense – NUKOM (NATO)
Industries
Aerospace and Defense
Business areas
Information Technology
  • CIS hardening.
Jan 2021 - Dec 2021
Remote

Vulnerability and Penetration Tester

IFI Ingenieurbüro für Industrieanlagen GmbH

Position summary
Vulnerability and Penetration Tester at IFI Ingenieurbüro für Industrieanlagen GmbH
Business areas
Information Technology
  • Vulnerability analysis and web service penetration testing; Nessus, Rapid7, OpenVAS, OWASP.
Nov 2019 - Apr 2021

IT Middleware Team

ITZBund / Statistisches Bundesamt

Position summary
IT Middleware Team at ITZBund / Statistisches Bundesamt
Industries
Information Technology
Government and Administration
Business areas
Audit
Information Technology
  • CIS/NIST hardening, deployment and automation; SharePoint
  • Pentest/audit risk analysis and Splunk log analysis
  • Bash/Python/CLI; JBoss, Tomcat, Apache
Feb 2019 - Oct 2019

IT Cyber Security Consultant

Lufthansa Group

Position summary
IT Cyber Security Consultant at Lufthansa Group
Business areas
Information Technology
  • CIS/NIST hardening management; penetration testing; Microsoft Teams
  • Vulnerability management with Qualys/Tenable.sc; QRadar web/application analysis
  • Patch management, PowerShell report automation and CERT (KeepBlue/Dejablue)
Jan 2019 - Dec 2019
Hybrid

Hardening Consultant

Vodafone Group

Position summary
Hardening Consultant at Vodafone Group
Industries
Telecommunication
Business areas
Information Technology
  • Operating system and web server CIS hardening.
Jun 2018 - Dec 2018

IT Technical Consultant

DB Investment Services

Position summary
IT Technical Consultant at DB Investment Services
Industries
Banking and Finance
Business areas
Information Technology
  • Technical consulting for applications, infrastructure, and security.
  • Oracle WebLogic migration 10→12; ELK/log analysis/SIEM; ActiveMQ/FUSE
  • Code review/SAST-related analysis; DAST/OWASP penetration testing; Tenable.sc; CIS/NIST hardening
  • LAN/DMZ/wireless tests; WLST/Python/Bash/KSH; UC4
Feb 2018 - May 2018

IT Security Penetration Tester

ECB via Airbus MSP

Position summary
IT Security Penetration Tester at ECB via Airbus MSP
Industries
Aerospace and Defense
Business areas
Information Technology
  • IT security penetration testing.
  • OWASP penetration testing and Tenable.sc vulnerability analysis; Microsoft Teams
  • LAN/DMZ/wireless infrastructure tests; ArcSight web/application analysis
  • Mobile application testing
Jan 2017 - Dec 2017
Remote

IT Security Consultant

Deutsche Landesbank (anonymized)

Position summary
IT Security Consultant at Deutsche Landesbank (anonymized)
Industries
Banking and Finance
Business areas
Audit
Information Technology
  • Application/web server, intranet/DMZ audit, vulnerability analysis, and web service audit.
Jan 2017 - Dec 2017
Remote

Web and Vulnerability Tester

STF Group

Position summary
Web and Vulnerability Tester at STF Group
Industries
Fashion
Retail
Business areas
Audit
Information Technology
  • Web and vulnerability audit (reference project).
Mar 2015 - Dec 2017

Technical Consultant

Commerzbank AG

Position summary
Technical Consultant at Commerzbank AG
Industries
Banking and Finance
Business areas
Information Technology
Project Management
  • Operation/integration testing of an API management platform with Axway, MySQL and Cassandra
  • HA infrastructure consulting, setup of production/test environments, deployment/configuration
  • Coordinated online banking penetration tests and introduced ELK log analysis; regexp anomaly detection; Microsoft Teams
  • WebSphere 8.5, Linux/Solaris, Bash/KSH/Perl/Python, HP Service Manager
Jan 2015 - Dec 2015
Budapest, Hungary
Remote

Auditor

Euronet Kft.

Position summary
Auditor at Euronet Kft.
Industries
Banking and Finance
Information Technology
Business areas
Audit
Information Technology
  • CIS Benchmark audit, remote/Budapest.
Jan 2015 - Dec 2015
Remote

Auditor

Imperial Tobacco

Position summary
Auditor at Imperial Tobacco
Industries
Manufacturing
Business areas
Audit
  • Intranet audit, remote/Budapest.
Jan 2015 - Dec 2015
Hybrid

IT Security Engineer

Weir Group PLC

Position summary
IT Security Engineer at Weir Group PLC
Industries
Manufacturing
Business areas
Information Technology
  • Implemented RSA Secured Authentication.
Jul 2014 - Dec 2014

Technical Refresh WebLogic & Java

Deutsche Bank

Position summary
Technical Refresh WebLogic & Java at Deutsche Bank
Industries
Banking and Finance
Business areas
Information Technology
  • Oracle WebLogic 12, WLST/Jython, Java 1.7
  • TeamCity, Sonar (static code analysis), Nexus, Maven; Linux/Solaris; Bash/KSH/Perl; GCM/JIRA
Jan 2014 - Mar 2015

Technical Security & Risk Management

Deutsche Bank

Position summary
Technical Security & Risk Management at Deutsche Bank
Industries
Banking and Finance
Business areas
Information Technology
  • System/infrastructure analysis and architecture; Technical Solution Architecture
  • Security risk assessment, technical coordination of infrastructure integration, and performance optimization
Jan 2014 - Dec 2014
Hybrid

Auditor

T-Systems NyRT.

Position summary
Auditor at T-Systems NyRT.
Industries
Information Technology
Business areas
Audit
Information Technology
  • CIS Benchmark Audit.
Apr 2013 - Dec 2013

Patch & Security Management

BASF

Position summary
Patch & Security Management at BASF
Industries
Chemical
Business areas
Information Technology
  • Security and automation support for middleware/web servers
  • KSH/Bash/Perl automation; Apache/Tomcat, IIS, WebSphere
  • BladeLogic patch/deployment monitoring; SVN; LAMP; AHD ticketing
Jan 2013 - Dec 2013
Hybrid

Auditor

Budapest Mayor's Office (anonymized)

Position summary
Auditor at Budapest Mayor's Office (anonymized)
Industries
Government and Administration
Business areas
Audit
Information Technology
  • DMZ and intranet audit.
Jan 2013 - Dec 2013
Hybrid

Auditor

Proventa AG

Position summary
Auditor at Proventa AG
Industries
Information Technology
Business areas
Audit
Information Technology
  • Web and vulnerability audit (reference project).
Jul 2012 - Apr 2013

Build/Deployment Manager & Software Configuration Specialist

Deutsche Telekom AG

Position summary
Build/Deployment Manager & Software Configuration Specialist at Deutsche Telekom AG
Industries
Telecommunication
Business areas
Information Technology
  • Technical architecture, user/deployment/security concept
  • Apache/Tomcat, Maven/Ant/Groovy; TeamCity/Jenkins/Nexus; Redline RPM
  • Build/deployment and Bash/KSH/Groovy/Jython/XSLT automation; Jira
May 2012 - Jun 2012

Software Configuration Specialist

1&1 Internet AG

Position summary
Software Configuration Specialist at 1&1 Internet AG
Industries
Information Technology
Telecommunication
Business areas
Information Technology
  • OpenXchange test/production support in the middleware area
  • Apache/Tomcat/JBoss, Maven/Ant, Jenkins/Puppet/Nexus, build/deployment
  • Nagios/Nimsoft and LAMP support
Feb 2012 - Feb 2012

Drupal CMS Web Development

calivita.de

Position summary
Drupal CMS Web Development at calivita.de
Industries
Retail
Business areas
Information Technology
Marketing
Product Development
  • Drupal CMS, LAMP, PHP patches and CSS
  • SSL online shop, SEO and MySQL administration
Sep 2011 - Dec 2011

Consultant

Deutsche Telekom AG

Position summary
Consultant at Deutsche Telekom AG
Industries
Information Technology
Telecommunication
Business areas
Information Technology
  • Cloning team; build/deployment automation for IBM MQ and PHP
  • Migration MQ6→MQ7 and MQ7 security concept
  • LAMP, IBM WebSphere MQ, SVN/Git, Maven/Ant/Jenkins/Nexus, RPM/KSH/Bash/Perl, Kanban
Jan 2011 - Feb 2015

CMS Web Development

Danubius Sprach- und Kulturverein Darmstadt e.V.

Position summary
CMS Web Development at Danubius Sprach- und Kulturverein Darmstadt e.V.
Industries
Education
Business areas
Information Technology
Product Development
  • Drupal website for a non-profit children's association: installation, configuration, PHP patches, CSS and MySQL
Jul 2010 - Jul 2011

Software Configuration Specialist

Deutsche Bank AG

Position summary
Software Configuration Specialist at Deutsche Bank AG
Industries
Banking and Finance
Business areas
Information Technology
  • Deployment automation; builds/deployments for IBM MQ and Oracle WebLogic
  • MQ monitoring with Nagios; IBM Tivoli Job Scheduler; incident/problem management
  • Planning/implementation of an MQ cluster; Veritas Cluster; Bash/Perl/Jython/XSLT; Jira/GCM
May 2008 - May 2010

Deployment Consultant

SL Software Consulting / T-Com

Position summary
Deployment Consultant at SL Software Consulting / T-Com
Industries
Information Technology
Telecommunication
Business areas
Information Technology
  • Deployment for more than 16 projects across different OS/architecture platforms
  • Set up cluster, integration, load, and acceptance test environments
  • Config/release/rollout/build/deployment management; WebSphere/JBoss/Tomcat/WebLogic; Solaris/SLES
Jan 2008 - May 2008

Infrastructure & System Analyst

DK Telecom Software Zrt. / RCO Terminal Systeme GmbH

Position summary
Infrastructure & System Analyst at DK Telecom Software Zrt. / RCO Terminal Systeme GmbH
Industries
Information Technology
Telecommunication
Business areas
Information Technology
Project Management
  • WAN architecture for seven European offices
  • Network measurement/management, project management, T1/T2/T3 network and cost planning
Feb 2005 - Dec 2007

Software Developer / 2nd & 3rd Level Support

DK Telecom Software Zrt. / CIDA GmbH

Position summary
Software Developer / 2nd & 3rd Level Support at DK Telecom Software Zrt. / CIDA GmbH
Industries
Healthcare
Information Technology
Business areas
Customer Service
Information Technology
Product Development
Quality Assurance
  • Support for a pharmacy inventory management system with approx. 1,600 customers
  • MS Access, VB6, Linux server administration, Oracle XE on SUSE Linux
  • Hardware/software testing and communications coordination

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Information Technology, Government and Administration, Banking and Finance, Telecommunication, Education, and Healthcare.

Information Technology
Government and Administration
Banking and Finance
Telecommunication
Education
Healthcare
Profile match chart

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology, Audit, Product Development, Project Management, Customer Service, and Quality Assurance.

Information Technology
Audit
Product Development
Project Management
Customer Service
Quality Assurance
Profile match chart

Summary

Senior IT security and infrastructure specialist with many years of project experience in regulated and security-critical environments. Focus areas: security automation, vulnerability management, penetration testing, CIS/NIST/BSI hardening, network and firewall security, middleware, CI/CD, and local and agentic AI systems. Combining deep operations and infrastructure knowledge with software development and automation. Hands-on experience with ITSM-based processes in enterprise and government environments, especially the interaction of incident, change, and remediation processes, as well as structured tracking of technical security measures. Also experienced in API-based integration and automation of ITSM ticketing systems for the automated processing and tracking of security and infrastructure tasks. So far, my focus has been more on Windows-Linux patching, vulnerability management, and automating patch, compliance, and remediation processes with PowerShell, Python, and Ansible than on the production operation of Azure Update Manager itself. I am very familiar from many years of practical experience with the underlying processes, such as patch assessment and prioritization, pre- and post-checks, compliance checks, remediation, reporting, and automated patch workflows, so I can get up to speed with Azure Update Manager quickly.

Skills

  • Security Engineering: Penetration Testing, Vulnerability Management, Compliance Audits, Hardening, Soc/Log Analysis, Risk Analysis
  • Automation & Development: Python, Go, Rust, Bash/Shell, Powershell, Perl, Java, Javascript; Rest Apis; Git; Ci/Cd; Ansible
  • Network Security: Cisco Asa/Firepower, Firewall Orchestration, Cisco Ise, Ddi/Tufin Integration, Ddos/Attack Analysis
  • Ai Security: Local Llms, Ollama, Rag, Mcp, Agentic Ai, Prompt-Injection/Jailbreak Testing, Ai-Assisted Pentesting And Soc Workflows
  • Platforms & Middleware: Linux/Solaris/Windows, Apache, Tomcat, Jboss, Websphere, Weblogic, Ibm Mq, Elk/Elastic, Graylog, Splunk
  • Certifications: Osce, Oscp; Security Clearance U2/Su2 Project Experience

Languages

Hungarian
Native
German
Advanced
English
Intermediate

Education

Oct 2002 - Jun 2005

Universität Pécs

Technical Teaching · Computer Science · Pécs, Hungary

Diploma thesis on students' interaction with a student administration system.

Oct 2000 - Jun 2005

Universität Pécs

Computer Engineering · Cybernetics/Robotics · Pécs, Hungary

Certifications & licenses

Advanced Security Clearance Ü2 under §9 SÜG

Reliability check under §7 LuftSiG

OSCE - Offensive Security Certified Expert

Metasploit Ruby Scripting

Advanced Java (J2EE)

EC Forensic Analysis Basics

Solaris 10 Administration for Experienced UNIX Administrators

Oracle DB Administrator

Microsoft Windows 2000 Administration / Directory Services

Statistics

Experience

Total positions 34
Experience in Information Technology 15.5 y
Avg length 1 y 1 m
Longest experience 4 y 1 m

Global experience

Countries worked in 1 (Hungary)
Primary country Hungary

Expertise

Recent roles Smart Device Automation, IT Security Automation, IT SOC / Vulnerability
Main industries Information Technology, Government and Administration, Banking and Finance
Main business areas Information Technology, Audit, Product Development

Qualifications

Certifications earned 12
Member since
Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Frequently asked questions

Have questions? Find more information here.

Krisztián is based in Riedstadt, Germany and can operate in on-site, hybrid, and remote work models.

Krisztián speaks the following languages: Hungarian (Native), German (Advanced), English (Intermediate).

Krisztián has at least 21 years of experience. During this time, Krisztián has worked in at least 29 different roles and for 28 different companies. The average length of individual experience is 1 year and 8 months. Note that Krisztián may not have shared all experience and actually has more experience.

Based on recent experience, Krisztián would be well-suited for roles such as: Smart Device Automation, IT Security Automation, IT SOC / Vulnerability.

Krisztián's most recent position is Smart Device Automation at ITZBund.

In recent years, Krisztián has worked for ITZBund, BWI / Thales Group, Airbus Space and Defense – NUKOM (NATO), and IFI Ingenieurbüro für Industrieanlagen GmbH.

Krisztián is most experienced in industries like Information Technology, Government and Administration, and Banking and Finance. Krisztián also has some experience in Telecommunication, Education, and Healthcare.

Krisztián is most experienced in business areas like Information Technology, Audit, and Product Development. Krisztián also has some experience in Project Management, Customer Service, and Quality Assurance.

Krisztián has recently worked in industries like Information Technology, Government and Administration, and Aerospace and Defense.

Krisztián has recently worked in business areas like Information Technology and Audit.

Krisztián attended Universität Pécs for Computer Science.

Krisztián has 12 certificates. Among them, these include: Advanced Security Clearance Ü2 under §9 SÜG, Reliability check under §7 LuftSiG, and OSCE - Offensive Security Certified Expert.

Krisztián is immediately available full-time for suitable projects.

Daily rate distribution

0% 25% 50% 75% 100%
10% of experts charge less than €640 per day.
20% of experts charge between €640 and €800 per day.
50% of experts charge between €800 and €960 per day.
10% of experts charge between €960 and €1120 per day.
10% of experts charge €1280 or more per day.
<€640 €640-​800 €800-​960 €960-​1120 €1280+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1000
750
500
250
Rate comparison chart
Daily rate avg. 820 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1000
750
500
250
Rate comparison chart
Median rate 800 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 3 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.