Cybersecurity Experts
in minutes from vetted and available specialists with the power of AI.Hire experts who secure cloud environments, harden endpoints, and respond to incidents across networks, apps, and identity systems. They also support risk reviews, security tooling, and audit readiness, with fast, precise matching to vetted, available freelancers.
Meet FRATCH Experts who have recently used Cybersecurity
Marco Steidel
Last position:
IT Interim Manager & Digitalization Consultant at paarprojekt GmbH
- Project management and consulting services with a focus on IT interim management: digitalization of corporate management, including processes and applications
- Assessment of the entire IT infrastructure, including applications, core processes, and contracts, including cost optimization
- Evaluation and introduction of solutions to support digitalization in the company in the areas of property management, CRM, invoice review and approval processes, smart metering, DMS, and time tracking
- Digitization of file folders and introduction of SharePoint and Microsoft Teams as the central document and communication platform
- Design and delivery of an AI workshop, including rollout of AI tools to increase efficiency and transparency in key business processes
- Creation of training materials and delivery of user training for newly introduced digital processes and solutions
Ornel Franck Wora Yeno
Last position:
Sales Partner at ERGO PRO
- Industry: Insurance, Trade, IT
- Customers & Projects: Consulting and selling insurance and similar services
- Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
- Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports
Matthias Kühnlein
Last position:
Business Owner at AKM
Management of multiple MFA methods for central authentication within a corporate group. Interface between various stakeholders such as support, finance, developers, and security departments. Budget controlling and monitoring of KPIs and SLAs. Review of operational documentation
Andreas Rühl
Last position:
Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting
Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations
Alwin G.
Last position:
IT Interim Manager & AI Strategist
- AI product development: Design of an AI-supported GRC platform to automate compliance processes.
- AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
- IT interim management and strategic consulting
Collin Kempkes
Last position:
Software Architect / Fullstack Developer at Equity Bytes
Built an international e-commerce platform for a multi-vendor marketplace for digital assets from scratch. Designed and operated cloud native architectures at enterprise scale.
- Designed and operated a highly scalable microservice and serverless architecture
- Built the complete cloud infrastructure with Terraform + AWS CDK in AWS
- Provisioned ECS/EKS clusters (Fargate), Application Load Balancers (reverse proxy), and Lambda functions
- Observability & tracing with CloudWatch, DataDog, Prometheus, and Grafana
- End-to-end setup with DataDog (formerly AWS CloudWatch), Prometheus, and custom Grafana dashboards
- Integration of advanced metrics (including ORM mapper) and distributed tracing with Jaeger
- Robust backup and disaster recovery strategies
- RDS Postgres backups and hourly snapshots
- Read-only, asynchronously synchronized replicas with automated master failover in emergencies
- Minute-level rollback capability through versioned Docker images on ECS and Git-based CI/CD pipelines
- Created CI/CD pipelines with GitHub Actions for automated multi-stage deployments (Dev, Testing, Prod)
- Integrated Stripe for international payment processing
- Built a marketplace payment system with multiple parties and payout routines
- Used Algolia for high-performance real-time search of digital assets on the platform
- Federation of services with GraphQL and Hasura
- Later migration to GraphQL Mesh
- Test Driven Development (TDD) - unit, integration, and E2E testing with Jest, Vitest, and Playwright
- Used Next.js / React for modern frontend applications in the nx monorepo
- Enterprise security architecture & access control
- Integration of JWT tokens with Auth0, OAuth, OIDC, IP guards, BOLA protection, and secret vaults
- Authorization concepts with RBAC, ABAC, and native Postgres Row-Level Security (RLS)
- Built internal microfrontends with Retool for fast prototyping and operational business processes
Technologies: ABAC, AWS CDK, AWS CloudWatch, AWS ECS, AWS EKS, AWS Fargate, AWS RDS, AWS S3, Algolia, Auth0, DataDog, Docker, GitHub Actions, Grafana, GraphQL, GraphQL Mesh, Hasura, JWT, Jaeger, Java, JavaScript, Jest, Kotlin, Kubernetes, Monorepo, Next.js, OIDC, Playwright, Postgres, Postgres RLS, Prometheus, RBAC, Redis, Retool, Serverless, Stripe, Terraform, TypeScript, Vitest
Henry Hanau
Last position:
Interim Manager IT-Compliance at Int. Fertigungsunternehmen
- Industry: mechanical engineering, vehicle manufacturing
- Regulations: Data Act
- Project focus: data governance, legally compliant use of machine data, data platforms
- Assigned by: CFO, platform product owner
Successes/Results (early phase):
- Compliance support for the setup of an internal standardized data usage platform based on Databricks.
- Created the basis for the legally compliant and effective use of machine data, including:
- Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
- Technical: consideration of data flows from the platform to users and third parties.
- Organizational: drafting and finalizing the required data usage agreements.
Michael Hohlfeld
Last position:
Project Coordinator (Product Development + SaaS) at Ottobock SE & Co. KGaA
As a project coordinator in development projects (consisting of software and hardware), I was responsible in an advisory role for creating recommendations and organizational framework conditions in the areas of reporting, project scheduling, progress tracking, resource allocation, and results presentation.
- Technology stack: Teams, Azure DevOps, Android
- Keywords: software, hardware, AI, MDM, Kanban, requirements specification, functional specification, SaaS, ergonomics, health, medical device
Rudolf Eggelbusch
Last position:
Datacenter Engineer, Network & Security Administrator at International insurance group
Operation and further development of the network and security infrastructure.
Monitoring, analysis and resolution of network and security incidents.
Cross-department collaboration with other specialist teams for operations, further development and reporting.
Firewall vulnerability analysis.
Firewall rule approvals.
Troubleshooting IP communication issues in the network and firewall infrastructure.
Security-critical IT infrastructure, processing of personal data, compliance with legal regulations.
Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5
Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI
Matthias Schneider
Last position:
Overall Project Coordinator at Bundeswehr Informatik (BWI GmbH)
- PMO lead for Security Clearance 2 (SÜ2) cleared
- Reporting to sub-program management GMN
- System maintenance 25+
- Functional control and coordination of Jira setup
- Preparation of decision papers (e.g. project planning, steering model, communication plans, controlling models, role and responsibility matrices)
- Development of program-wide knowledge management using Confluence, creation of Jira concept
- Development of an access concept for all project tools
- Analyzing existing processes, identifying improvement potential, and designing solutions to increase efficiency and effectiveness
- Development of a concept for introducing automation approaches in existing tools
- Creating intranet articles as project marketing
- Responsible for project governance through reporting and resource planning in the sub-program
- Agile further development of the project method
- Gathering customer requirements (requirements engineering)
- Preparation and support of contract negotiations (7-year term, budget of over 500 million)
Stephan Johne
Last position:
Technical Writer at pro-beam
Technical writer at a special-purpose machine manufacturer for implementing the requirements of the EU-MVO into technical documentation and FMEA moderation. Role: Technical writer and FMEA moderator
Jens Brennscheidt
Last position:
Senior Cyber Security Consultant at Brennscheidt IT Consulting
KEY PROJECTS
Since 05/2023 | Bank | Senior Cyber Security Consultant (external)
- Advising and guiding the system owners in creating and further developing IT security concepts
- Coordinating and tracking the remediation of findings from reviews and audits
- Advising on the implementation of regulatory requirements for information security
10/2023 – 02/2024 | Fintech | Project Manager (external)
- Project management to close various audit gaps in the field of information security
- Conceptual design and implementation of an information security management system based on ISO/IEC 27001
- Creation and further development of ISMS documents and processes
Florian Ripper
Last position:
Global Programme Lead, Ecosystem Separation at Merck Group
Electronics – Surface Solutions | Carve-out of IT, data and system landscape*
Separation of a full business division's IT, data and system landscape following divestment; centrally governed investment envelope in the three-digit m€ range
Laboratory notebook and laboratory analytics platform stream: Palantir Foundry, Snowflake, Signals Notebook, Power BI and connected laboratory instrumentation; site transition completed without interruption to laboratory operations
Decision authority and escalation point for business, IT infrastructure, IT security and vendors; separation executed across globally distributed users and systems, handed over on schedule
Thomas Müller
Last position:
Requirements Engineer (SPC) - ONE.CRM VW Salesforce Solution at CARIAD SE / Diconium Strategy GmbH
- Rework demand, development and operational organizational set up for the Solution Train
- Rework requirement refinement process flow from strategic theme to user story
- Introduction of visualization tools (Canvas) of work dependencies over different requirement levels and Solution Train leadership coaching
Neil Scholten
Last position:
Program Manager & Transformation Architect at Xpertpulse GmbH
- Transition strategic business development: product before customer in <4 months instead of 10
- Transition strategic business development: development cost reduction to plan: 40% (-250 k EUR)
- Executive mentor & coach for CEO & CPO: CEO too busy to improve - portfolio, company structure and strategy
- Executive mentor & coach for CEO & CPO: PO→CPO transition to take over full product responsibility for Lohnpulse
- Interim CIO: scouting / onboarding / handover of general contractor service providers to CPO
- Interim CIO: transition from MVP to a fully operable product by the CPO
Discover over 15,000 top freelancers
Statistics of experts using Cybersecurity
Aggregated from the professional profiles of matched freelancers.
Experience
22 years
Position duration
5.2 years
Positions per freelancer
13
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Professional Services, Banking and Finance
Certification focus areas
Information Technology, Project Management, Quality Assurance
Bachelor's degree or higher
87%
Master's degree or higher
56%
Doctorate
10%
Certifications per freelancer
5
Most common languages
German, English, French
Speak two or more languages
96%
Based on our profile pool as of 6 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts using Cybersecurity
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 6 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Security Scope
Cybersecurity covers the work that protects systems, data, users, and business continuity. It spans prevention, detection, response, and recovery across networks, cloud services, endpoints, applications, and identity layers. Companies bring in specialists when they need clear controls, faster risk reduction, or help after a security event.
Common Work
- Threat modeling and security reviews
- Vulnerability scanning and remediation guidance
- Incident response and log analysis
- Cloud and endpoint hardening
- Policy, audit, and compliance support
Core Tools
Strong professionals work with SIEM, EDR, IAM, and vulnerability management tools, plus firewalls, CSPM, and DLP systems. They also read logs, tune alerts, and connect signals across cloud and on-premise environments. In many teams, knowledge of Zero Trust and NIST-style controls matters as much as tool fluency.
When to Bring One In
Freelance expertise is useful when an internal team is overloaded, a product launch needs security review, or a customer asks for proof of controls. It also helps during M&A, cloud migration, penetration testing prep, and after phishing, malware, or account takeover incidents. If you need focused work without a long hiring cycle, this is a strong fit.
What Good Looks Like
A strong specialist explains risk in plain words and ties it to business impact. They document findings well, prioritize fixes, and work calmly with engineering, IT, and legal teams. You want someone who can secure systems without blocking delivery.
Delivery Areas
Cybersecurity work often covers access control, secure configuration, monitoring, and response playbooks. It can also include web application security, endpoint baselines, email security, and third-party risk reviews. For companies in finance, healthcare, SaaS, and manufacturing, this mix is often central to day-to-day resilience.
Frequently asked questions
Need clarity? These are the questions we hear most often about Cybersecurity.
Cybersecurity covers the controls and practices that protect systems, accounts, data, and operations. In practice, that means prevention, monitoring, response, and recovery across cloud, endpoints, networks, and applications. It is the work that reduces risk before an issue becomes an incident.
Cybersecurity is closely related to information security, often shortened to infosec, but the terms are not identical. Cybersecurity usually focuses more on digital attacks, systems, and technical defenses, while information security also includes policies, governance, and handling of sensitive information. In many companies, the roles overlap heavily.
A strong cybersecurity specialist usually understands cloud platforms, networking, identity systems, and scripting for automation. Familiarity with incident response, risk assessment, and secure architecture is also valuable. For many projects, clear reporting and stakeholder communication matter just as much as technical depth.
Cybersecurity freelancers are useful when you need focused expertise for a short period, such as an audit prep, a security review, or an incident investigation. They also help when your internal team needs backup during a migration or a product launch. The best fit is usually a defined problem with a clear outcome.
Cybersecurity is the broader field, while penetration testing is one method inside it. A penetration testing specialist focuses on finding exploitable weaknesses, but a broader specialist may also handle monitoring, hardening, identity, policy, and response. Companies often need both, depending on the stage of the work.
Much cybersecurity work can be done remotely, especially reviews, monitoring, policy work, and cloud security tasks. On-site work may help during incident response, sensitive infrastructure changes, or situations that require access to restricted systems. Many teams use a mix of remote delivery and occasional on-site sessions.
Look for clear explanations, relevant examples, and a practical way of working. A strong cybersecurity specialist should be able to describe past assessments, the risks they found, and how they helped teams fix them. Good signs also include careful documentation, realistic priorities, and comfort working with both technical and non-technical stakeholders.
Cybersecurity projects often produce risk assessments, hardening checklists, incident reports, remediation plans, and control recommendations. They may also include alert tuning, access reviews, policy updates, and security testing findings. The best deliverables are specific, traceable, and easy for the team to act on.
The average hourly rate of freelancers who have used Cybersecurity in their recent projects is 113 €, which corresponds to a daily rate of about 902 € based on an 8-hour working day.
Of the freelancers who have used Cybersecurity in their recent projects, 87% hold at least a Bachelor's degree, 56% hold at least a Master's degree, and 10% hold a doctorate.
On average, freelancers who have used Cybersecurity in their recent projects have 22 years of professional experience, with a single engagement typically lasting around 5.2 years.
The most common languages among freelancers who have used Cybersecurity in their recent projects are German (99%), English (96%), and French (24%).
The most common industries among freelancers who have used Cybersecurity in their recent projects are Information Technology (89%), Professional Services (56%), and Banking and Finance (47%).
The most common business areas among freelancers who have used Cybersecurity in their recent projects are Information Technology (94%), Project Management (84%), and Operations (64%).
Main locations of FRATCH Experts, who have recently used Cybersecurity
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf 
Dortmund 
Essen 
Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
