Greenbone Experts in Germany
matched in minutes from over 15,000 CVs with vetted, available specialists.Hire experts who run Greenbone scans, tune OpenVAS and GVM setups, and turn findings into clear remediation work. They handle policy design, scheduled assessments, reporting, and integration with your security process, with fast, precise matching from vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used Greenbone
Vicenco Kenk
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Alicja Wilczek
Last position:
Integrated security and emergency documentation for a 24/7 logistics company at Medium-sized logistics company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, vulnerability management policy, business resilience programme, risk governance plan
- Consolidation into an integrated emergency handbook (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table, and a formal approval structure
- Review of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with documented compensating control
- Review and documentation of NIS2 and HinSchG applicability, including the legal reasoning for non-applicability
Enrique Gallardo
Last position:
Security Architect at Capgemini
I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.
André Beran
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
Nils Klawitter
Last position:
Vulnerability Management and Secure SDLC at DB InfraGO AG
- Successfully implemented vulnerability management with DefectDojo
- Advised on and implemented technical and procedural aspects of vulnerability management with DefectDojo
- Provided guidance on implementing a secure software development lifecycle
- Skills: GitLab, DefectDojo, Vulnerability Management, SCA, SAST, DAST, Python, Kubernetes, Argo CD, Docker, AWS, Azure, WhiteSource/Mend, Greenbone
Hendrik Belitz
Last position:
Lecturer at Front and Fullstack Development Lecturer
- Teaching JavaScript, HTML, CSS, React, NodeJS, MongoDB, MariaDB, and Express
- Designing and preparing lessons
- Classroom teaching and one-on-one coaching
Krisztián Korcz
Last position:
IT-Soc/Vulnerability at ITZBund
- Vulnerability management (Greenbone, Tenable SC, Rapid7)
- Automation of vulnerability scans
- OpenTofu (Terraform)/Ansible/Vault/Podman/Docker
- Compliance audit
- SOC (ElasticSearch, Graylog)
- Python/Rust/Bash/Shell/PowerShell
- Git collaboration
- Report standardization and automation
- POC for several vulnerability scanning systems
- Setup of vulnerability scanning system
Daniel Jüntgen
Last position:
Information Security Consultant
- Enhanced quality assurance of documents, processes and required evidence in preparation for the upcoming KRITIS audit 2025.
- Reviewing and commenting on all relevant documents.
- Advising authors and document owners on inquiries and during the creation process.
- Supporting departments with IT security inquiries.
- Used tools/Frameworks MS Office, SharePoint, Jira, Confluence, ISO27001+, NIS-2 (EU 2022/2555), B3S (Statutory Health & Private Health Insurance), BSIG / IT-SIG 2.0, BSI-KritisV, BSI-C5, BSI Baseline Protection (200-2, 200-4), ServiceNow, RCE (EU 2022/2557), SGB, GDPR
Stephan Selnerat
Last position:
IT-Security Manager at Large industrial corporation with multiple international locations
- Planning and managing all projects in the context of IT security
- Establishing a Cyber Security Incident Response procedure according to ISO/IEC 27035
- NIS2 readiness: impact analysis, planning and implementation of NIS2 compliance
- Management reporting based on KPIs
Discover over 15,000 top freelancers
Statistics of experts using Greenbone
Aggregated from the professional profiles of matched freelancers.
Experience
20 years
Position duration
2.2 years
Positions per freelancer
15
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Manufacturing, Professional Services
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
83%
Master's degree or higher
33%
Certifications per freelancer
10
Most common languages
German, English, Spanish
Speak two or more languages
100%
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using Greenbone
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
What Greenbone covers
Greenbone is used for vulnerability management and security scanning across servers, network devices, web-facing systems, and internal assets. It helps teams find weaknesses before attackers do and track what still needs remediation.
Common aliases
Searchers often use Greenbone, GVM, and OpenVAS when they mean the same ecosystem. Greenbone is the vendor name, while GVM and OpenVAS appear in project discussions, older setups, and day-to-day security work.
Typical deliverables
- Scan policies and credentialed scan setup
- Asset grouping and scan scheduling
- Vulnerability reports with clear priorities
- Remediation guidance for technical teams
- Re-scans to confirm fixes and reduce noise
Tooling and ecosystem
Strong professionals know the Greenbone Security Assistant, scanner appliances, feed updates, and report formats. They also work with Linux, networking basics, certificates, and integrations into ticketing or monitoring workflows.
When companies bring in experts
Teams look for freelance help when scans return too much noise, feeds need maintenance, or a new environment must be onboarded quickly. In Germany, this often comes up in mixed-language teams that want clear reporting for both local staff and global security groups.
What strong specialists do
- Separate real risk from false positives
- Adapt scans to fragile or segmented environments
- Document findings in a way operations teams can use
- Keep Greenbone stable through updates and routine checks
- Align scans with security, compliance, and patching work
Frequently asked questions
Need clarity? These are the questions we hear most often about Greenbone.
Greenbone is used to scan systems for known vulnerabilities and turn the results into a remediation plan. It is common in security operations, compliance checks, and regular infrastructure reviews where teams need a repeatable view of exposure.
Greenbone is the broader ecosystem and vendor name, while OpenVAS and GVM are names many people still use around the scanner stack. In practice, companies usually care less about the label and more about whether the specialist can configure scans, interpret findings, and keep the setup maintained.
A strong Greenbone specialist usually understands Linux, TCP/IP, credentials, certificates, and how scanners behave in segmented networks. Reporting matters too, because the real value comes from turning scan output into actions for patching and hardening.
For Greenbone, a specialist can start with a clear asset list, network scope, and access rules. More complex environments need details on critical systems, scan windows, and any hosts that must be handled carefully to avoid disruption.
Yes, Greenbone work is often done remotely because most tasks are configuration, scheduling, reporting, and result review. In Germany, on-site time only becomes useful when network access, sensitive segments, or local coordination make hands-on setup easier.
If Greenbone keeps reporting the same issues without useful prioritization, or if scans are too noisy to trust, the setup likely needs tuning. Another warning sign is when teams cannot explain which findings are actionable and which are expected in context.
Look for someone who can explain scan policy choices, show how they reduced false positives, and describe how findings were handed over to remediation teams. A good Greenbone expert documents scope, constraints, and next steps clearly, not just the scan results.
Greenbone can support ongoing vulnerability management when scans, feed updates, and retests are part of a steady routine. It works best when the specialist also helps define ownership for fixes and follow-up, so findings do not sit idle.
The average hourly rate of freelancers in Germany who have used Greenbone in their recent projects is 103 €, which corresponds to a daily rate of about 827 € based on an 8-hour working day.
Of the freelancers in Germany who have used Greenbone in their recent projects, 83% hold at least a Bachelor's degree and 33% hold at least a Master's degree.
On average, freelancers in Germany who have used Greenbone in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 2.2 years.
The most common languages among freelancers in Germany who have used Greenbone in their recent projects are German (100%), English (100%), and Spanish (33%).
The most common industries among freelancers in Germany who have used Greenbone in their recent projects are Information Technology (100%), Manufacturing (78%), and Professional Services (78%).
The most common business areas among freelancers in Germany who have used Greenbone in their recent projects are Information Technology (100%), Project Management (100%), and Operations (78%).
Main locations of FRATCH Experts, who have recently used Greenbone
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
