Cloud Security Experts in Berlin

Seyed Farhad M.

Senior Product Security Engineer

Last position:

Senior Product Security Engineer at Delivery Hero

Developed a custom tool using the Mistral 7B LLM to scan, validate, and report security vulnerabilities.
Security tested AI agents, bots, and other LLMs, focusing on prompt injection, model inversion, data poisoning, EDR/AV bypass and evasion techniques, membership inference, model evasion, overfitting to malicious inputs, and contextual manipulation.
Onboarded repositories to SAST solutions for security scanning, implemented secrets scanning, DAST, and SCA, and used ZAP for DAST in CI/CD pipelines.
Delivered security awareness training and developed CTF challenges and training materials to improve developers' security knowledge.
Planned and carried out bi-annual red teaming operations based on the MITRE ATT&CK framework and led internal and external pentests based on the OWASP Top 10 framework for 70+ applications worldwide, resulting in the detection, reporting, and remediation of hundreds of vulnerabilities.
Triaged HackerOne reports.

Tom F.

Project Manager for SOC Service Transition and Introduction of Microsoft Cloud Security Solutions

Last position:

Project Manager for SOC Service Transition and Introduction of Microsoft Cloud Security Solutions at Sonovum GmbH

Analysis of the existing SOC infrastructure and assessment of security operations
Transition to a new operating model including security monitoring, incident response and threat intelligence
Coordination between internal teams, external partners and service providers
Implementation of Microsoft Intune: configuration, compliance policies and BYOD management
Implementation of Microsoft Defender: endpoint and network protection, automated threat detection and incident response
Training of IT security teams and end users
Deployment of Microsoft Sentinel: integration into existing systems, automation of playbooks
Introduction of Conditional Access: policies, MFA, creation of reports and dashboards
Project management from initiation to completion, including change, risk and acceptance management
Project controlling regarding schedules, costs and quality
Requirements management: collection, classification and assessment of IT security requirements

Ali Y.

Principal Product Security Engineer

Last position:

Principal Product Security Engineer at Payrails GmbH

Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.

Muhammad I.

Group Product Manager

Last position:

Group Product Manager at Delivery Hero SE

Strategic portfolio management: Own the product vision and multi-year strategic roadmap for the global InventoryAutomation portfolio. Managed the integration of AI-powered efficiency tools across multiple operating entities, ensuring alignment with complex regulatory and governance standards.
AI/ML impact at scale: Spearheaded mission-critical AI initiatives that automated 70% of global inventory rules. Leveraged predictive modeling to reduce manual errors by 40%, resulting in multi-million euro annual operational savings.
Operational optimization: Defined and tracked high-level success metrics (e.g., CPO). Successfully achieved a 10% reduction in Cost Per Order (CPO) through the deployment of Generative AI assistants and automated financial workflow models.
Executive stakeholder management: Acted as the primary liaison between Product, Engineering, Risk, Compliance, and Finance. Successfully navigated high-stakes negotiations to align disparate global entities on standardized payment protocols.
Team mentorship: Led a cross-functional squad of Data Scientists, Engineers, and Designers, fostering a culture of rapid experimentation and "Responsible AI" deployment.

Vishnu K.

Red Team Engineer (Professional Management Level VI)

Last position:

Red Team Engineer (Professional Management Level VI) at Schwarz Group (Lidl, Kaufland, Stackit)

Developed Red Team infrastructure for real-world attack simulations using Sliver C2 and custom tools
Executed advanced Red Team operations, integrating AI/LLM security research for prompt injection attacks
Conducted comprehensive breach assessment attacks and vulnerability assessments across enterprise infrastructure
Performed root cause analysis and purple team exercises, generating executive-level reports
Lead LLM red teaming initiatives to improve AI model security for GPT-4, Mistral, and internal GenAI models

Jan K.

Consultant for Information Security & Auditor

Last position:

Consultant for Information Security & Auditor at Kopiasonsulting GmbH

Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures

Henryk O.

Security Consultant

Blankenfelde-Mahlow

Last position:

Security Consultant at Daimler AG

Development of a cloud security strategy
Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
Definition of security measures to safeguard cloud solutions
Conducting requirements analyses and defining the scope for cloud security projects
Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks

Franc P.

Sales Director

Last position:

Sales Director at eGovCD GmbH

Developed and implemented sales strategies for eGovCD products
New customer acquisition and key account management
Sales in EMEA for the partner Cloud Security Alliance (CSA, Seattle/USA) in the CRM/ERP area
Over 40 new memberships, multiple membership renewals, and more than 100 cloud security trainings

Tilman M.

PMO Lead