Nils Klawitter-Vulnerability management and secure SDLC
Check rate
Experience
Vulnerability management and secure SDLC
DB InfraGO AG
- Successful implementation of vulnerability management with DefectDojo
- Consulting and implementation of technical and process-related aspects of vulnerability management with DefectDojo
- Consulting on the implementation of a secure software development lifecycle
- Skills: Gitlab, DefectDojo, Vulnerability Management, SCA, SAST, DAST, Python, Kubernetes, ArgoCD, Docker, AWS, Azure, Whitesource/Mend, Greenbone
Threat modeling with STRIDE
Festo SE & Co. KG
- Conducted threat and risk analyses (TARA) for industrial products
- Advised the customer on the threat modeling process
- Performed threat modeling according to STRIDE using the Microsoft Threat Modelling Tool
- Skills: STRIDE, TARA, MS Threat Modelling Tool
Application security specialist
ITZBund
- Advised and reviewed development teams on application security and secure coding in a large federal project
- Promoted awareness of a DevSecOps culture, shift-left, and security-by-design principles
- Implemented tools for a secure software development lifecycle
- Skills: AppSec, DevSecOps, SCA, OWASP ZAP, Tekton, Azure DevOps, OpenShift Advanced Cluster Security, OWASP Dependency-Track, Sonarqube
Freelancer in application security and DevSecOps
SecuredBytes
- Application Security (AppSec) and DevSecOps
- Secure Software Development Lifecycle (Secure SDLC)
- Security and cryptographic concepts
- Cryptography engineering, PKI, and cryptographic protocols
Laboratory for secure hardware and software development
Technical University of Lübeck
- Set up a secure software development lifecycle using GitLab for students for practical testing and learning in software engineering
- Implemented CI/CD pipelines with various security tools such as SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and dependency scanners
- Taught threat modeling, risk assessments, and incident management in the practical course
- Skills: Gitlab, SCA, SAST, DAST, TARA, Incident Mangement
Research Associate
Lübeck University of Applied Sciences
- Built and supported a lab for secure hardware and software development
- Teaching in cryptography, secure software development, and IT security
- Research and support for professors in IT security
Development of a Proof of Concept for a Security Application Gateway for Industrial Machines
TRIOVEGA GmbH
- Concept development, requirements definition, and creation of a proof of concept for a security application interface for industrial machines
- Creation of a security concept, software development and related tools, as well as organization of a penetration test for the proof of concept
- Evaluation of feasibility and presentation of the results from the proof-of-concept case study
- Skills: Docker, Podman, embedded systems, Bash, Rust, Python, threat modeling, secure SDLC
Introduction of DevSecOps/AppSec Processes
TRIOVEGA GmbH
- Set up the IT security team in software development
- Developed guidelines for internal and external software projects with regard to the secure software development lifecycle (SSDLC)
- Training and awareness for secure software development
- Evaluation and implementation of a DevSecOps process and tools such as SCA, SAST, DAST, threat modeling, etc.
- Skills: GitLab, secure SDLC, project management, threat modeling, SCA, Dependency-Track
Application Security Engineer
TRIOVEGA GmbH
- Set up the IT security team in software development
- Project management and planning in the area of security-related system development
- Evaluation and introduction of a DevSecOps process and tools
- External consulting and assessment of system/software architectures with regard to IT security
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Education, Manufacturing, Transportation, and Government and Administration.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Product Development, Research and Development, Quality Assurance, and Project Management.
Summary
I am Nils, a committed freelancer specializing in AppSec and DevSecOps. My focus is on securing software and implementing solid security practices in software development.
Skills
- Api Security
- Application Security
- Cloud Security
- Code Audit
- Cryptography
- Dast
- Data Protection
- Devsecops
- Identity And Access Management (Iam)
- Owasp
- Sast
- Sca
- Secure Architecture Design
- Secure Coding Practices
- Secure Sdlc
- Threat Modeling
- Vulnerability Assessment
- Web Application Security
It Security
- Bsi Standard 200 + Basic Security
- Bsi Technical Guidelines
- Iso 2700x
- Owasp
- Nist 800-218
- Owasp (M)Asvs + Standards / Samm
- Cve & Cvss
- Cwe & Cwss
- Common Criteria
- Cis Benchmarks
- Stride
Methods
- Secure Risk Assessments
- Threat Modeling (Stride)
- Code Audits
- Penetration Testing
- Sca
- Sast
- Dast
- Dependency Scanning
- Container Security
- Secure Deployment
- Sboms
- Threat Monitoring
- Vulnerability Management
- Incident Response Management
- Infrastructure Scanning & Hardening
Security Tools
- Owasp Zap
- Sonarqube
- Synk
- Checkmarx
- Veracode
- Gitlab Ci/Cd
- Burp
- Trivy
- Whitesource/Mend
- Greenbone
- Gitlab Sast & Dast
- Owasp Dependency-Track
- Cyclonedx
Programming Languages
- Rust
- Java
- Python
- C
- C#
- Bash
Project Management Methods
- Scrum
- Kanban
- Agile Methods
- V-Model
- Safe
Tools
- Intellij
- Eclipse
- Visual Studio
- Vs Code
- Gitlab
- Ansible
- Terraform
- Github
- Docker
- Podman
- Kubernetes
- Openshift
- Ms Office 365
- Atlassian Jira/Confluence/Bitbucket
Cloud
- Amazon Aws
- Microsoft Azure
- Gcp
Operating Systems
- Linux
- Windows
Languages
Education
University of Lübeck
Master of Science in Computer Science — IT Security and Reliability · Computer Science — IT Security and Reliability · Lübeck, Germany
University of Lübeck
Bachelor of Science in Computer Science — IT Security and Reliability · Computer Science — IT Security and Reliability · Lübeck, Germany
Certifications & licenses
TeleTrust Professional for Secure Software Engineering (T.P.S.S.E.)
TeleTrust e.V.
TeleTrust Information Security Professional (T.I.S.P.)
TeleTrust e.V.
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Nils is based in Lübeck, Germany and prefers 100% remote projects.
Nils speaks the following languages: German (Native), English (Advanced).
Nils has at least 10 years of experience. During this time, Nils has worked in at least 9 different roles and for 7 different companies. The average length of individual experience is 1 year and 1 month. Note that Nils may not have shared all experience and actually has more experience.
Based on recent experience, Nils would be well-suited for roles such as: Vulnerability management and secure SDLC, Threat modeling with STRIDE, Application security specialist.
Nils's most recent position is Vulnerability management and secure SDLC at DB InfraGO AG.
In recent years, Nils has worked for DB InfraGO AG, Festo SE & Co. KG, ITZBund, SecuredBytes, and Technical University of Lübeck.
Nils is most experienced in industries like Information Technology, Education, and Manufacturing. Nils also has some experience in Transportation and Government and Administration.
Nils is most experienced in business areas like Information Technology, Product Development, and Research and Development. Nils also has some experience in Quality Assurance and Project Management.
Nils has recently worked in industries like Education, Information Technology, and Manufacturing.
Nils has recently worked in business areas like Information Technology, Research and Development, and Quality Assurance.
Nils holds a Master in Computer Science — IT Security and Reliability from University of Lübeck and a Bachelor in Computer Science — IT Security and Reliability from University of Lübeck.
Nils has 2 certificates. These include: TeleTrust Professional for Secure Software Engineering (T.P.S.S.E.) and TeleTrust Information Security Professional (T.I.S.P.).
The availability of Nils needs to be confirmed.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 7 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Stanislaus Stelle
Sascha Leitner
Christian Gebhardt
Bernhard Bowitz
Alexander Sänn
Lothar Hinsche
Pierre Gronau
Jens Rehsack
Matthias Steinmann
Federico Leefhelm
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Vulnerability management and secure SDLC
Martin Wilhelmi
Seyed farhad Miri
Alexander Nagy
Tan Pham
Mike Barthel
Nikolaus Betzler
Daniel Jüntgen
Kevin Engelhardt
Markus Willems
Valeri Milke
Nearby freelancers
Professionals working in or nearby Lübeck, Germany
Wolfgang Döbber
Matthias Flöter
Thore Neumann
Dennis Domanski
Niko Schmuck
Arne Zühlke
Neil Scholten
Till Schiementz
Lino Giefer
Serkant Türemiş
