Cybersecurity Experts in Berlin

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

• WiNOWiG enhancements (digitalization & organization)
• Project management for the WiNOWiG project (regulatory offenses)
• Process optimization and coordination

• Partnered with senior stakeholders across AWS EMEA to drive talent strategy, partner development, and business growth in the cloud ecosystem.
• Focus areas:
• Collaboration with Sales & Partner Management on Go-to-Market initiatives
• Advisory on long-term resource strategy for Cloud, Data, and Security Divisions
• Supporting internal innovation teams in scaling AI and automation projects
• Result: Contributed to AWS’s expansion in Central Europe by aligning business, technology, and people strategy.

• Responsibilities:
• Collaborate with Product Owner to define functional and technical requirements
• Quarterly Roadmap definition with Executives and Product Owner
• Fix bug and develop new features in Go and Typescript
• Manage and mentor full stack engineering team
• System Design in a micro-service environment
• Guarantee application security
• Improve engineering efficiency and deliverable quality
• Support automation with agentic-AI workflow
• Achievements:
• Improved security and data privacy awareness in the team with workshops around best practices, security measures and attacks types
• Conceptualized, designed and successfully released a new real-time chat application for our partners improving partner/company relationship and collaboration efficiency in Go and Typescript
• Reduced meeting hours for engineers by restructuring projects preparation workflow in collaboration with product team

AI Platform Backend – Senior Developer

Brought in to design and build a backend for an AI platform from scratch, including multi-provider LLM orchestration and real-time infrastructure for AI influencer personas at scale.

Tasks and responsibilities

• Architecture and implementation of a multi-LLM orchestration layer with Semantic Kernel to integrate GPT-4 and other providers for core platform logic and AI influencer personas, reducing model-switching overhead by abstracting provider APIs behind a single interface.
• Design and development of a backend from scratch in C# / .NET 10, including domain modeling with DDD, a versioned RESTful API layer, and cloud infrastructure setup on Azure.
• Built a real-time chat infrastructure with Server-Sent Events (SSE), message persistence, and delivery guarantees for live operation of AI influencer personas at scale.
• Developed a media management service with integration of cloud object storage for upload and retrieval of influencer-generated content.
• Created an integration and unit test suite with data seeding for reliable regression testing across all core platform flows, significantly reducing production error rates.

Tools and technologies: C#, .NET, ASP.NET Core, Python, TypeScript, MySQL, Semantic Kernel, EF Core, Minimal APIs, LLM Orchestration, Prompt Engineering, Agentic AI, Generative AI, AI-Assisted Engineering, Claude Code, GitHub Copilot, Google Gemini, OpenAI API, Ollama, Redis, Azure, Azure Container Apps, Azure Database for MySQL, Docker, GitHub Actions, Clean Architecture, Vertical Slice Architecture, CQRS, Domain-Driven Design, REST API, xUnit, Integration Testing, Unit Testing, Jira, Confluence, Scrum

• Consulting and project management in IT projects
• Data and process analytics, evaluation, reporting, optimization, dashboards
• Program leadership, project leadership
• Strategic consulting
• Rollout, cutover (design, automation, planning)
• IT infrastructure, IT system architecture, ITIL
• Process and application management
• ITSM, IT security, data protection, IAM
• BPNM
• MDM

• Development of a Target Operating Model for integrated hardware, firmware and software delivery.
• Establishment of a PDMO governance model with clear roles, responsibilities and decision rights.
• Improvement of portfolio and delivery transparency for senior management and executive management.
• Integration of a stage-gate product development process with agile software delivery.
• Redesign of release, quality, change and prioritization processes.
• Development of a scalable tooling and reporting architecture for Jira and PPM systems.

• Creating guidelines
• Conducting Business Impact Analyses (BIA), assessing risks, and identifying time-critical business processes
• Process management
• Creating emergency plans and crisis management plans, including cyber response and IT emergency plans with special consideration of a cyberattack
• Conducting awareness trainings
• Planning and carrying out tests and exercises
• Developing tailor-made solutions to reduce risks and ensure business continuity

Industry: Publishing, media Project management for the concept of a RAG-based archive access solution: a secure on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio and video archives. Use case evaluation and make-or-buy together with editorial team, archive, and legal department, taking into account copyright, broadcasting law, and the AI Act. Differentiator: practical LLM infrastructure experience from two own productive platforms combined with C-level program management in regulated industries.

• Teaching content on content marketing strategy, planning, implementation, and performance measurement.
• Training in storytelling, tools, and the use of Artificial Intelligence.
• Leading courses for hundreds of participants.

• Conducting cybersecurity readiness checks based on an in-house assessment methodology
• Analyzing the external attack surface using the Graydaxe EASM platform
• Assessing maturity levels and deriving prioritized recommendations for action

• Spearheading investor outreach and partnership development as founding MD, building the business case and technical narrative needed to attract initial funding and strategic collaborators in the digital health space
• Designing multi-agent AI systems for autonomous biosignal analysis, orchestrating LLM-based reasoning pipelines with domain-specific medical context to enable intelligent, clinical decision support

• Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
• Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
• Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
• Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
• Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
• Implement continuous monitoring solutions to detect and respond to threats in real time.
• Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
• Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
• Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
• Collaborate with project teams to address findings and ensure that security risks are managed effectively.
• Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
• Facilitate a culture of security awareness throughout the organization through training and regular communication.
• Lead security initiatives that align with the organization’s long-term strategic goals.
• Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
• Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.