Cloud Security Experts in Berlin

Ali Yazdani

Principal Product Security Engineer

Last position:

Principal Product Security Engineer at Payrails GmbH

Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.

Seyed Farhad Miri

Senior Product Security Engineer

Last position:

Senior Product Security Engineer at Delivery Hero

Developed a custom tool using the Mistral 7B LLM to scan, validate and report security vulnerabilities.
Security tested AI agents, bots, and other LLMs with a focus on prompt injection, model inversion, data poisoning, EDR/AV bypass and evasion techniques, membership inference, model evasion, overfitting to malicious inputs and contextual manipulation.
Onboarded repositories to SAST solutions for security scanning, implemented secrets scanning, DAST, SCA, and utilized ZAP for DAST in CI/CD pipelines.
Engaged in security awareness trainings, developed CTF challenges and training materials to enhance developer security knowledge.
Planned and executed bi-annual red teaming operations based on the MITRE ATT&CK framework and led internal and external pentests based on the OWASP Top 10 framework for 70+ applications worldwide, resulting in detection, reporting, and remediation of hundreds of vulnerabilities.
Triaged HackerOne reports.

Muhammad Intizar

Group Product Manager

Last position:

Group Product Manager at Delivery Hero SE

Strategic portfolio management: Own the product vision and multi-year strategic roadmap for the global InventoryAutomation portfolio. Managed the integration of AI-powered efficiency tools across multiple operating entities, ensuring alignment with complex regulatory and governance standards.
AI/ML impact at scale: Spearheaded mission-critical AI initiatives that automated 70% of global inventory rules. Leveraged predictive modeling to reduce manual errors by 40%, resulting in multi-million euro annual operational savings.
Operational optimization: Defined and tracked high-level success metrics (e.g., CPO). Successfully achieved a 10% reduction in Cost Per Order (CPO) through the deployment of Generative AI assistants and automated financial workflow models.
Executive stakeholder management: Acted as the primary liaison between Product, Engineering, Risk, Compliance, and Finance. Successfully navigated high-stakes negotiations to align disparate global entities on standardized payment protocols.
Team mentorship: Led a cross-functional squad of Data Scientists, Engineers, and Designers, fostering a culture of rapid experimentation and "Responsible AI" deployment.

Vishnu Kv

Red Team Engineer (Professional Management Level VI)

Last position:

Red Team Engineer (Professional Management Level VI) at Schwarz Group (Lidl, Kaufland, Stackit)

Developed Red Team infrastructure for real-world attack simulations using Sliver C2 and custom tools
Executed advanced Red Team operations, integrating AI/LLM security research for prompt injection attacks
Conducted comprehensive breach assessment attacks and vulnerability assessments across enterprise infrastructure
Performed root cause analysis and purple team exercises, generating executive-level reports
Lead LLM red teaming initiatives to improve AI model security for GPT-4, Mistral, and internal GenAI models

Jan Kopia

Consultant for Information Security & Auditor

Last position:

Consultant for Information Security & Auditor at Kopiasonsulting GmbH

Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures

Henryk Orantek

Security Consultant

Blankenfelde-Mahlow

Last position:

Security Consultant at Daimler AG

Development of a cloud security strategy
Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
Definition of security measures to safeguard cloud solutions
Conducting requirements analyses and defining the scope for cloud security projects
Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks

Franc Partzsch

Sales Director

Last position:

Sales Director at eGovCD GmbH

Developed and implemented sales strategies for eGovCD products
New customer acquisition and key account management
Sales in EMEA for the partner Cloud Security Alliance (CSA, Seattle/USA) in the CRM/ERP area
Over 40 new memberships, multiple membership renewals, and more than 100 cloud security trainings

Tom Faulhaber

Project Manager SOC Service Transition and Implementation of Microsoft Cloud Security Solutions

Last position:

Project Manager SOC Service Transition and Implementation of Microsoft Cloud Security Solutions at Sonovum GmbH

Analyzed existing SOC infrastructure and assessed security operations
Transitioned to a new operating model including security monitoring, incident response, and threat intelligence
Coordinated between internal teams, external partners, and service providers
Implemented Microsoft Intune: configuration, compliance policies, and BYOD management
Implemented Microsoft Defender: endpoint and network protection, automated threat detection, and incident response
Trained IT security teams and end users
Deployed Microsoft Sentinel: integration with existing systems, automation of playbooks
Introduced Conditional Access: policies, MFA, and creation of reports and dashboards
Managed project from initiation to closure including change, risk, and acceptance management
Handled project controlling regarding schedule, costs, and quality
Managed requirements: gathering, classifying, and evaluating IT security requirements

Tilman Mürle

PMO Lead