Cybersecurity Experts in Berlin

Andreas Rühl

Principal Consultant Information Security

Last position:

Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting

Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations

Christian Pestel

Project Manager

Last position:

Project Manager at Kreis Segeberg

WiNOWiG extensions (digitalization & organization)
Project management for the WiNOWiG project (regulatory offenses)
Process optimization and coordination

Patrick Hohensee

Lead Technical Recruiter | Business Partner AWS EMEA

Last position:

Lead Technical Recruiter | Business Partner AWS EMEA at Amazon Web Services (AWS)

Partnered with senior stakeholders across AWS EMEA to drive talent strategy, partner development, and business growth in the cloud ecosystem.
Focus areas:
Collaboration with Sales & Partner Management on Go-to-Market initiatives
Advisory on long-term resource strategy for Cloud, Data, and Security Divisions
Supporting internal innovation teams in scaling AI and automation projects
Result: Contributed to AWS’s expansion in Central Europe by aligning business, technology, and people strategy.

Piet Quade

Managing Partner

Last position:

IT Project Manager at no release

Industry: Publishing, media Project management for the concept of a RAG-based archive access solution: a secure on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio and video archives. Use case evaluation and make-or-buy together with editorial team, archive, and legal department, taking into account copyright, broadcasting law, and the AI Act. Differentiator: practical LLM infrastructure experience from two own productive platforms combined with C-level program management in regulated industries.

Pierre Bernard

Senior Engineering Manager

Last position:

Senior Engineering Manager at Audibene GmbH

Responsibilities:
Collaborate with Product Owner to define functional and technical requirements
Quarterly Roadmap definition with Executives and Product Owner
Fix bug and develop new features in Go and Typescript
Manage and mentor full stack engineering team
System Design in a micro-service environment
Guarantee application security
Improve engineering efficiency and deliverable quality
Support automation with agentic-AI workflow
Achievements:
Improved security and data privacy awareness in the team with workshops around best practices, security measures and attacks types
Conceptualized, designed and successfully released a new real-time chat application for our partners improving partner/company relationship and collaboration efficiency in Go and Typescript
Reduced meeting hours for engineers by restructuring projects preparation workflow in collaboration with product team

Jorge Nuricumbo

Senior AI Engineer | Backend Developer C#/.NET | RAG, LLM Integration, Semantic Kernel | Azure, GCP, AWS

Last position:

Senior Developer at SafeXSmart KI Solutions UG

AI Platform Backend – Senior Developer

Brought in to design and build a backend for an AI platform from scratch, including multi-provider LLM orchestration and real-time infrastructure for AI influencer personas at scale.

Tasks and responsibilities

Architected and implemented a multi-LLM orchestration layer with Semantic Kernel to integrate GPT-4 and other providers for core platform logic and AI influencer personas, reducing model-switching overhead by abstracting provider APIs behind a single interface.
Designed and developed a backend from scratch in C# / .NET 10, including domain modeling with DDD, a versioned RESTful API layer, and cloud infrastructure setup on Azure.
Built a real-time chat infrastructure with Server-Sent Events (SSE), message persistence, and delivery guarantees for live operation of AI influencer personas at scale.
Developed a media management service with integration of cloud object storage for upload and retrieval of influencer-generated content.
Created an integration and unit test suite with data seeding for reliable regression testing across all core platform flows, significantly reducing the production error rate.

Tools and technologies: C#, .NET, ASP.NET Core, Python, TypeScript, MySQL, Semantic Kernel, EF Core, Minimal APIs, LLM Orchestration, Prompt Engineering, Agentic AI, Generative AI, AI-Assisted Engineering, Claude Code, GitHub Copilot, Google Gemini, OpenAI API, Ollama, Redis, Azure, Azure Container Apps, Azure Database for MySQL, Docker, GitHub Actions, Clean Architecture, Vertical Slice Architecture, CQRS, Domain-Driven Design, REST API, xUnit, Integration Testing, Unit Testing, Jira, Confluence, Scrum

Bert Wagner

IT Consultant, Program / Project Manager, IT Architect

Last position:

IT Consultant, Program / Project Manager, IT Architect at Self-Employed

Consulting and project management in IT projects
Data and process analytics, evaluation, reporting, optimization, dashboards
Program leadership, project leadership
Strategic consulting
Rollout, cutover (design, automation, planning)
IT infrastructure, IT system architecture, ITIL
Process and application management
ITSM, IT security, data protection, IAM
BPNM
MDM

Kerstin Glawinski

IT Security Officer with TÜV Rheinland certified qualification

Last position:

Information Security Consulting at CAS AG

Unnikuttan Velamkudy Vijayan

Managing Director (Co-Founder)

Last position:

Managing Director (Co-Founder) at AathmaSignals

Spearheading investor outreach and partnership development as founding MD, building the business case and technical narrative needed to attract initial funding and strategic collaborators in the digital health space
Designing multi-agent AI systems for autonomous biosignal analysis, orchestrating LLM-based reasoning pipelines with domain-specific medical context to enable intelligent, clinical decision support

André Beran

External Attack Surface Assessment & Cybersecurity Readiness Checks

Last position:

External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH

Conducting cybersecurity readiness checks based on an in-house assessment methodology
Analyzing the external attack surface using the Graydaxe EASM platform
Assessing maturity levels and deriving prioritized recommendations for action

Flamur Abdyli

Fractional Chief Information Security Officer

Last position:

Fractional Chief Information Security Officer at VR Smart Guide GmbH

Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
Implement continuous monitoring solutions to detect and respond to threats in real time.
Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
Collaborate with project teams to address findings and ensure that security risks are managed effectively.
Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
Facilitate a culture of security awareness throughout the organization through training and regular communication.
Lead security initiatives that align with the organization’s long-term strategic goals.
Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

Daniel Suszczynski

Engineering Leader & AI-Assisted Developer

Last position:

Engineering Leader & AI-Assisted Developer at Independent · Building with AI

Building a full-stack e-commerce product using AI-assisted development, deliberately returning to hands-on engineering to validate how AI changes software development workflows and team dynamics.
Exploring VP Technology, Head of Engineering, and Director of Engineering opportunities where hands-on AI experience meets organisational scaling expertise.
Open to advisory conversations on AI-augmented engineering teams, technology strategy, platform architecture, and organizational design.
No registered business. No commercial activity.

Qaiser Abbasi

Freelance Lead DevOps Engineer

Last position:

Freelance Lead DevOps Engineer at Schwarz Gruppe Produktion

Bootstrapping a CloudOps team and building a multi-cloud provider backend for a low-code Internal Developer Platform (IDP) with env zero
Introducing user story mapping, ADRs, milestones, and backlog management
Designing and developing core APIs, setting up CI/CD pipelines, OpenTofu/Terraform scripts
Representing and communicating the team with third-party stakeholders (e.g. env zero)
(Cross-)team coaching on DevOps, software design, Terraform, Golang, and agile practices

Patricia Afonso Alemany

Head of Operations

Last position:

Head of Operations at StratifAI GmbH

Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

Bertrand Rothen

Interim IAM Product Owner (Identity Management)