Cybersecurity Experts in Frankfurt

• Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
• Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
• Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
• Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
• Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
• Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
• Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

• Industry: Insurance, Trade, IT
• Customers & Projects: Consulting and selling insurance and similar services
• Main tasks: Insurance consulting (health insurance, retirement planning, wealth building); commercial services, inside and field sales; sales data analysis and forecasting; customer consulting and support; opening a new sales headquarters for private and business customers; business development & innovation management; business use case development; process optimization; stakeholder management; team leadership and training; preparation and delivery of trainings;
• Technologies used: Microsoft Office 365, Microsoft Teams, Jira, Draw.IO, Camunda 8, Java (8, 17,21,25), Git, Spring Boot, Spring Batch, Spring Data REST, Spring Web, Spring Security, J-Unit, Playwright, Lombock, Vaadin, H2, PostgreSQL (16, 17 18), pgAdmin, Docker, LLMs, JasperSoft Studio, JasperReports

• Electronics – Surface Solutions | Carve-out of IT, data and system landscape*

• Separation of a full business division's IT, data and system landscape following divestment; centrally governed investment envelope in the three-digit m€ range

• Laboratory notebook and laboratory analytics platform stream: Palantir Foundry, Snowflake, Signals Notebook, Power BI and connected laboratory instrumentation; site transition completed without interruption to laboratory operations

• Decision authority and escalation point for business, IT infrastructure, IT security and vendors; separation executed across globally distributed users and systems, handed over on schedule

2nd LoD/Change the Bank (CtB)

• CtB: External consultant and workstream lead for rectifying findings by BaFin following a special IT audit in the 2nd LoD, management of the work package for revising the ICT Risk Management & ICT Asset Classification in accordance with DORA Chapter 2, the processes for structural analysis, protection requirements, and control assessments (4 FTEs).

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

NTT Data Center Replacement – €20m

• Strategy & Requirements: Data Center migration and exit strategy for ING Germany, including definition of project scope, objectives, KPIs and comprehensive requirements across cybersecurity, physical security, regulatory and group-wide strategic standards.
• Regulatory & Risk Governance: Regulatory and supervisory requirements, risk assessments, ECB notification and audit-ready documentation, achieving formal sign-off with no material findings.
• Procurement & Vendor Selection: RFP and selection of Data Center providers, migration specialists and secure transportation partners in cooperation with Procurement and in line with ING Group requirements.
• Commercial & Contractual: Complex contract negotiations with selected providers, coordinating Legal, Procurement, Business, Security, Compliance and Senior Management across both organisations.
• Infrastructure & Data Center Delivery: Data Center fit-out and implementation of base technology, including internal networks, external connectivity, cabling and core services, aligned with required security standards.
• Migration & Transition: End-to-end planning and preparation of application and infrastructure migrations, including environment-specific runbooks and coordination with Release Management, followed by handover to the internal ING organisation for execution; migration execution achieved zero unplanned downtime and no customer impact.
• Financial & Program Control: €20m Program budget with governance of expenditure, forecasts, milestones, dependencies and critical paths, maintaining delivery within approved budget and timeline parameters.

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Conceptual design and implementation of modular AI assistants for sales and business processes in the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP server, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting as well as mentoring in the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Presentation introducing generic A.I. and Large Language Models
• Explanation of legal frameworks (EU AI Act, US CLOUD Act, DSGVO)
• Systematic review of AI tools along the SDLC and holistic systems
• Comparison of on-prem LLMs vs. cloud-based solutions, as well as change management and works council considerations
• Moderation of the discussion and definition of next steps for introducing AI development tools

As a freelance IT lecturer and IT coach, I specialize in teaching individuals concepts like Cloud Computing, Business Intelligence, Python Programming and Agile Frameworks. My goal is to simplify complex technical concepts into practical, actionable knowledge. Through my extensive experience as an IT consultant in various sectors and roles I know about the importance of IT training - for companies and employees alike.

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Working as a freelance ICT journalist for print and online media, as well as a communications consultant for medium-sized German and Dutch IT companies.
• Creating specialist publications, white papers, and journalistic articles on topics such as AI, IT sustainability, climate protection through low-code development, and the introduction of the electronic invoice, etc. (>100 work samples in the original can be viewed at [link])
• Analyzing and reporting on cybersecurity trends, including the NIS-2 directive, Security by Design, and the development of associative computers.
• Conducting expert interviews with specialists and executives on technological innovations such as digital shadows in production and predictive maintenance.
• Numerous publications in trade media such as Wirtschaftsinformatik & Management, IM+io, IT&Production, Digital Business Magazin, eGovernment Computing, etc.

• Close collaboration with development teams to ensure alignment with project objectives
• Assessment of in-scope assets, creation of requirements, and support of the public tender process through the selection of a provider
• Creation and maintenance of UML sequence diagrams to document system interactions
• Extensive use of Agile/Scrum methodology and Spotify model
• Development and implementation of cutover and dress rehearsal plans together with the application managers

• Delivery of ICT / DORA management training under DORA Article 5(4) at various banking institutions

• Teaching the key content of DORA requirements with a focus on ICT risks, third-party risk management, incident and problem management, and the information register

• Deriving implementation measures and recommendations for management and business units