Skip to main content
Top expert badge
Recommended expert
Profile header background

Rupesh Kumar S.-IT Baseline Compliance Consultant

Rupesh Kumar S. - IT Baseline Compliance Consultant - profile avatar
Profile header overlay
Oberlunkhofen, Switzerland

Check rate

Experience

Feb 2023 - Present
Zürich, Switzerland

IT Baseline Compliance Consultant

Consultant

Position summary
IT Baseline Compliance Consultant at Consultant
Industries
Information Technology
Business areas
Audit
Information Technology
  • Verified baseline compliance against MAS audit findings
  • Developed technical architecture concepts for 30 technologies to create hardening standard artifacts
  • Identified and developed automation opportunities for given technologies based on CIS
  • Developed standard baseline configurations based on internal security standards
  • Responsible for developing Cloud Native Application Protection Platform (CNAPP) architecture artifacts based on the Azure cloud platform
  • Responsible for RFQs and RFPs for different CNAPP solutions (Qualys Total Cloud, CrowdStrike, Azure Security Center)
  • Supported compliance verification and validation through automated scripts for a sample population of IT devices and instances
  • Responsible for the full vulnerability management lifecycle using Nexpose, including remediation, reporting, and integrating results with Splunk, HPSM, and Tableau
  • Supported MAS audits
Sep 2022 - Jan 2023
Beringen, Switzerland

Lead Consultant

Syntegon Packaging Systems AG

Position summary
Lead Consultant at Syntegon Packaging Systems AG
Industries
Manufacturing
Business areas
Information Technology
Project Management
  • Led a team of 30 offshore and onshore security analysts in transitioning and transforming an on-prem solution to Azure cloud, with multiple technology rollouts, including CrowdStrike, Azure Security, and Qualys
  • Migrated Symantec security technologies to O365 EDR for data center and corporate IT devices
  • Integrated ICS devices with CrowdStrike across the complete security landscape
  • Developed a rollout plan and supported the smooth onboarding of Microsoft security technologies to replace legacy security tools
  • Provided a security dashboard for the complete security intelligence landscape using Kenna
  • Responsible for the full vulnerability management lifecycle, including remediation and reporting using Qualys
  • Integrated security devices with the RSA Archer GRC tool to build a risk and governance landscape
Feb 2020 - Sep 2022
Munich, Germany

Cyber Security Consultant

Railsbank Technologies GmbH

Position summary
Cyber Security Consultant at Railsbank Technologies GmbH
Industries
Banking and Finance
Information Technology
Business areas
Information Technology
Operations
  • Delivered IT security projects: crypto zone infrastructure (HSM, KMS)
  • Developed technical architecture artifacts for a DLP solution using Azure ATP and O365 EDR
  • Designed crypto zone architecture focused on integrating cloud and on-prem HSM solutions as a service with AWS Cloud HSM, Azure Dedicated HSM, and Cryptomathic Crypto Services
  • Conducted IT security operations, including code-base NSG reviews and MDR solutions
  • Responsible for the full vulnerability management lifecycle, remediation, and reporting for internal and external (ASV) scans using Nessus
  • Transitioned from on-prem to Azure cloud, migrating from Symantec to Defender
  • Consulted on and architected leading-edge IT security solutions to support Railsbank cloud infrastructure and developed a CI/CD pipeline with security gates
  • Implemented infrastructure provisioning strategies focused on automation, high availability, and scalability, while providing ongoing consultation on cloud security topics
  • Delivered security architecture on Azure and AWS
  • Supported audits for PCI, ISAE, and ISO 27001
Jan 2019 - Jan 2020
Munich, Germany

Lead Information Security Architect

Wirecard Service Technologies GmbH

Position summary
Lead Information Security Architect at Wirecard Service Technologies GmbH
Industries
Banking and Finance
Business areas
Audit
Information Technology
Operations
  • Delivered IT security projects, including DDoS solution implementation and a bot mitigation tool
  • Developed technical architecture artifacts for a DLP solution using Netskope
  • Served as a member of the IT architecture board, working closely with principal and enterprise architects on complex global deliverables
  • Designed crypto zone architecture focused on integrating cloud and on-prem HSM solutions as a service
  • Consulted on and architected leading-edge IT security solutions to support hybrid cloud infrastructure
  • Implemented infrastructure provisioning strategies focused on automation, high availability, scalability, and data center redesign
  • Delivered security architecture integrating Cisco ACI with F5
  • Conducted IT security operations, including automated firewall changes, AD, and SIEM (LogRhythm, Splunk)
  • Responsible for the full vulnerability management lifecycle, remediation, and reporting for internal and external (ASV) scans using Qualys
  • Implemented the CIS benchmarking standard at the infrastructure level
  • Conducted vulnerability assessments, risk assessments, and gap analyses
  • Conducted web application and network layer penetration testing
  • Integrated the Qualys vulnerability tool with Azure Security Center and the Archer GRC tool
  • Implemented custom search queries using Search Processing Language (SPL)
  • Conducted firewall reviews and static code analysis on applications
  • Supported audits for BaFin, PCI, ISAE, and ISO 27001
Sep 2018 - Dec 2019
Munich, Germany

Senior Information Security Analyst

Wirecard Service Technologies GmbH

Position summary
Senior Information Security Analyst at Wirecard Service Technologies GmbH
Industries
Banking and Finance
Information Technology
Business areas
Audit
Information Technology
  • Delivered IT security projects, including Cisco ACI integration with Palo Alto FW and VMware
  • Delivered security architecture for Cisco ACI
  • Conducted IT security operations, including firewall changes, AD, and SIEM (LogRhythm, Splunk)
  • Defined and managed the implementation of PCI DSS compliance
  • Responsible for the full vulnerability management lifecycle, remediation, and reporting for internal and external (ASV) scans
  • Implemented the CIS benchmarking standard at the infrastructure domain level
  • Conducted vulnerability assessments, risk assessments, and gap analyses
  • Conducted web application and network layer penetration testing
  • Managed RFIs for integrating third-party applications with PCI applications
  • Defined KPI requirements and implemented dashboards on Qualys with other vendor products via API (Remedy)
  • Implemented custom search queries using Search Processing Language (SPL)
  • Conducted firewall and application reviews
  • Supported audits for BaFin, PCI, ISAE, and ISO 27001
Oct 2016 - Aug 2018
Munich, Germany

Information Security Analyst

Wirecard Technologies GmbH

Position summary
Information Security Analyst at Wirecard Technologies GmbH
Industries
Banking and Finance
Business areas
Information Technology
Quality Assurance
  • Defined and managed the implementation of PCI DSS compliance
  • Responsible for end-to-end vulnerability management, remediation and reporting for internal and external scans (ASV) and benchmarking using Qualys
  • Conducted vulnerability and risk assessments
  • Performed penetration testing of web applications, mobile apps, IoT devices and NFC devices
  • Managed RFIs for integrating third-party applications with PCI applications
  • Conducted firewall reviews and static code analysis reviews
  • Coordinated external penetration testers for external and internal penetration tests and remediation activities
  • Participated in the full PCI DSS audit lifecycle, including information gathering, evidence provision, remediation activities, compensating controls, ROC and AOC
Mar 2015 - Sep 2016
Munich, Germany

IT Security Administrator

Wirecard Technologies GmbH

Position summary
IT Security Administrator at Wirecard Technologies GmbH
Industries
Banking and Finance
Information Technology
Business areas
Information Technology
Operations
Project Management
  • Delivered IT security projects, including Cisco ACI integration with Palo Alto FW and NFC payments
  • Delivered security architecture for Cisco ACI
  • Conducted IT security operations, including firewall changes, AD and SIEM
  • Administered HSM and key management with SafeNet and Thales
  • Implemented infrastructure hardening standards based on PCI, NIST and CIS
  • Managed access control, including AD and User-ID access management in Palo Alto FW
  • Administered SIEM: QRadar and LogRhythm, including migration from QRadar to LogRhythm
  • Supported audits for BaFin, PCI and ISAE
Sep 2013 - Feb 2015
Munich, Germany

Junior IT Security Administrator

Wirecard Technologies GmbH

Position summary
Junior IT Security Administrator at Wirecard Technologies GmbH
Industries
Banking and Finance
Information Technology
Business areas
Information Technology
  • Delivered IT security projects, including AD User-ID integration with Palo Alto FW
  • Delivered security architecture, including proxy integration and SIEM implementation
  • Conducted IT security operations, including firewall changes, AD and SIEM
  • Administered HSM and key management with SafeNet and Thales
  • Managed access control, including AD and User-ID access management in Palo Alto FW
Jan 2013 - Sep 2013
Munich, Germany

Linux System Administrator

Novalnet AG

Position summary
Linux System Administrator at Novalnet AG
Industries
Information Technology
Business areas
Information Technology
  • Designed and configured high-availability network infrastructure and system configurations
  • Administered and maintained firewalls
  • Defined and managed the implementation of PCI DSS compliance
  • Prepared PCI Self-Assessment Questionnaire
  • Remediated web servers based on vulnerabilities identified in PCI ASV scan reports
  • Configured load balancing with Linux Virtual Server
  • Configured database redundancy architecture
  • Updated and maintained the disaster recovery plan
  • Conducted vulnerability assessments and penetration testing using Nexpose
Mar 2010 - Dec 2012
Munich, Germany

Security Engineer

Uniscon GmbH

Position summary
Security Engineer at Uniscon GmbH
Industries
Information Technology
Business areas
Information Technology
  • Implemented high-availability clustering for web servers
  • Administered sealed cloud proxy architecture
  • Provided and documented detailed reports on security flaws and fixes
  • Conducted and reviewed security risk assessments
  • Administered firewalls and load balancing
  • Designed and implemented an application-based intrusion detection system for sealed cloud architecture
  • Designed and implemented a continuous improvement model for defence
  • Set up a VPN network and provided access for work-from-home users
  • Administered intrusion detection and prevention systems (AlienVault)
Aug 2007 - Dec 2008
Hyderabad, India

Project Coordinator/Co-Founder

G Logic Technologies Pvt Ltd

Position summary
Project Coordinator/Co-Founder at G Logic Technologies Pvt Ltd
Industries
Information Technology
Telecommunication
Business areas
Information Technology
Project Management
Quality Assurance
  • Supported offshore Android, BREW and Symbian development and testing projects for Qvantel Technologies, Finland
  • Trained and guided employees on platforms such as GSM, GPRS and UMTS and technologies such as BREW, Symbian and Android
  • Guided employees in improving in-house testing and application development in line with 3GPP, GCF and OMA standards
  • Provided project members with detailed information about the design and testing phases of the project lifecycle
May 2006 - Jun 2007
Munich, Germany

Test System Operator

Cetecom GmbH

Position summary
Test System Operator at Cetecom GmbH
Industries
Telecommunication
Business areas
Quality Assurance
  • Performed SIM, SIM Application Toolkit, RF and Bluetooth testing on GSM and GPRS devices
  • Conducted Java application testing using ORGA iT3, ANITE SAT8 and ANITE RAMS test systems
  • Managed the database of test case results in line with GCF certification requirements
  • Performed RF system calibration and reporting using ANITE RAMS
  • Worked with vendors (Agilent, Anritsu, ORGA) on technical setup issues
Jun 2001 - Oct 2004
Hyderabad, India

Network Administrator/Co-Founder

Excel Media Private Ltd

Position summary
Network Administrator/Co-Founder at Excel Media Private Ltd
Industries
Media and Entertainment
Business areas
Information Technology
  • Worked in network operations as part of the TAC team, providing L1 and L2 technical support
  • Administered firewalls, routers and switch configurations
  • Consulted with network users to resolve technical issues
  • Diagnosed hardware and software problems and replaced defective components
  • Ran and configured network cables, troubleshot connectivity issues, created users and configured related settings

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Information Technology, Banking and Finance, Media and Entertainment, Telecommunication, and Manufacturing.

Information Technology
Banking and Finance
Media and Entertainment
Telecommunication
Manufacturing
Profile match chart

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology, Audit, Operations, Quality Assurance, and Project Management.

Information Technology
Audit
Operations
Quality Assurance
Project Management
Profile match chart

Summary

  • Good spoken and written communication skills, good presentation and management skills.

  • Innovative, analytical thinker, goal-oriented, adaptive, flexible, proactive.

Skills

  • Cryptographic Standards: Pki, X.509, Ldap, Ssl, Kerberos, Ipsec
  • Security Devices: Smartcards, Biometric Devices, Tpm, Hsm (Thales, Safenet)
  • Databases: Mysql, Mariadb, Percona Xtradb
  • Siem: Security Onion, Alienvault, Qradar, Logrhythm, Splunk
  • Scripting Languages: Bash, Python
  • Operating Systems: Linux (Ubuntu, Opensuse, Backtrack, Rhel), Microsoft Windows
  • Networking Protocols: Tcp/Ip, Lan/Wlan, Ipsec, Ssh, Gsm, Gprs, Cdma, Umts, Ble, Nfc
  • Security Tools: Wireshark Network Analyzer, Nessus, Qualys, Rapid 7, Metasploit, Intrusion Detection System Using Snort, Aide, Apparmor
  • Administration: Cisco 2900, 2960, Juniper Ssg 320, 350, Linksys Vpn Rv-082, Zywall 2000, Palo Alto
  • Web Servers: Apache, Nginx
  • Project Management: Itil V3
  • Security Standards: Mas, Pci-Dss, TÜV, Owasp, Sans, Itil, Iso 27001, Isaca

Languages

Marathi
Native
English
Advanced
German
Intermediate

Education

Feb 2008 - Mar 2010

University of Applied Sciences

Master of science in engineering in advanced security engineering · Advanced Security Engineering · Kapfenberg, Austria

Certifications & licenses

AWS Security Speciality

CEH

Fundamentals Of Transaction Processing

Visa

Statistics

Experience

Total positions 13
Experience in Information Technology 15.5 y
Avg length 1 y 9 m
Longest experience 3 y 9 m

Global experience

Countries worked in 3 (Germany, Switzerland, India)
Primary country Germany

Expertise

Recent roles IT Baseline Compliance Consultant, Lead Consultant, Cyber Security Consultant
Main industries Information Technology, Banking and Finance, Media and Entertainment
Main business areas Information Technology, Audit, Operations

Qualifications

Highest degree Master
Certifications earned 5
Member since
Last update
Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Frequently asked questions

Have questions? Find more information here.

Rupesh Kumar is based in Oberlunkhofen, Switzerland.

Rupesh Kumar speaks the following languages: Marathi (Native), English (Advanced), German (Intermediate).

Rupesh Kumar has at least 22 years of experience. During this time, Rupesh Kumar has worked in at least 13 different roles and for 10 different companies. The average length of individual experience is 2 years and 9 months. Note that Rupesh Kumar may not have shared all experience and actually has more experience.

Based on recent experience, Rupesh Kumar would be well-suited for roles such as: IT Baseline Compliance Consultant, Lead Consultant, Cyber Security Consultant.

Rupesh Kumar's most recent position is IT Baseline Compliance Consultant at Consultant.

In recent years, Rupesh Kumar has worked for Consultant, Syntegon Packaging Systems AG, and Railsbank Technologies GmbH.

Rupesh Kumar is most experienced in industries like Information Technology, Banking and Finance, and Media and Entertainment. Rupesh Kumar also has some experience in Telecommunication and Manufacturing.

Rupesh Kumar is most experienced in business areas like Information Technology, Operations, and Audit. Rupesh Kumar also has some experience in Quality Assurance and Project Management.

Rupesh Kumar has recently worked in industries like Information Technology, Banking and Finance, and Manufacturing.

Rupesh Kumar has recently worked in business areas like Information Technology, Audit, and Operations.

Rupesh Kumar holds a Master in Advanced Security Engineering from University of Applied Sciences.

Rupesh Kumar has 5 certificates. Among them, these include: AWS Security Speciality, CEH, and CISSP.

Rupesh Kumar will be available full-time from November 2026.

Daily rate distribution

0% 25% 50% 75% 100%
30% of experts charge less than €800 per day.
20% of experts charge between €800 and €1200 per day.
40% of experts charge between €1200 and €1600 per day.
10% of experts charge €1600 or more per day.
<€800 €800-​1200 €1200-​1600 €1600+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1200
900
600
300
Rate comparison chart
Daily rate avg. 1035 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1200
900
600
300
Rate comparison chart
Median rate 1100 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 15 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.