Incident Response Experts in Berlin

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

OpsWorker turns Kubernetes alerts into root-cause analyses, on top of the monitoring a team already runs. I lead the technical side: the agent architecture, the AWS infrastructure it runs on (fully inside EU regions), and the engineering decisions behind it, read-only in the cluster by default, human in the loop for judgment. The stack underneath: Amazon Bedrock and Bedrock AgentCore, agents built with the Strands Agents SDK, the Claude and OpenAI APIs, and the Kubernetes API.

• Senior program director and enterprise architect with nearly 30 years of operational experience in HR, ERP, security, risk management, finance, PLM and SLM.
• Expertise in IT program and project management, engineering, process management and organizational development.
• Experience working for the world leader in service management software, rail transportation and a leading tier 1 automotive supplier.
• Subject matter expertise in finance, automation processes, logistics, ERP and PLM and integration, including related end-to-end lifecycle data management and enterprise architecture.
• Specializes in managing large and complex engagements, programs and projects from demand, idea and strategy to operation, including stakeholder and change management.
• Expertise areas: HR, ERP, SecOps, integrated risk management, supply chain and operations, finance, SLM, product strategy, lifecycle management, shared services, IT and PLM.
• Industry experience in technology, tier 1 automotive, transportation and logistics, manufacturing, high technology and software industries, banking and insurance, and railway.
• Experience with SecOps (security incident response and vulnerability management), digital portfolio management, integrated risk management, service portfolio management and business continuity planning.
• Experience defining and designing integrated risk management including security and operations (response plans), CMDB initiatives and shared service implementations.
• Implemented integrated risk management including digital business continuity plans, disaster recovery plans, digital maturity assessments and security risk registers.
• Technology skills include SAP, HR, time and attendance, ERP, PLM, ALM, ITSM and CAD systems.
• Experience with cloud-based services and master data management.
• Familiar with TOGAF, IT4IT, SAFe and PPM.
• Project client exposure to companies such as Siemens, BMW, Daimler, BASF, Bayer, Bosch, DHL, DB Schenker, ServiceNow, Bombardier, KION, Johnson Controls, Schaeffler, Deutsche Telekom, SAP, FEMSA, CEMEX, Nestlé, Heineken, Air France/KLM, Airbus, Vodafone, Majorel, Virgin Trains, Equinor, ASML and Volvo.
• Holds a master’s degree in informatics and a bachelor’s degree in applied economics.

• Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
• Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
• Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
• Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
• Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
• Implement continuous monitoring solutions to detect and respond to threats in real time.
• Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
• Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
• Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
• Collaborate with project teams to address findings and ensure that security risks are managed effectively.
• Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
• Facilitate a culture of security awareness throughout the organization through training and regular communication.
• Lead security initiatives that align with the organization’s long-term strategic goals.
• Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
• Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

• Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
• Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
• Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
• Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
• Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
• Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers

• Shipped Memorable, a production iOS app using on-device CLIP-based semantic photo search. Owned the full stack: Core ML conversion, local inference pipeline, App Store release, and post-launch iteration.
• Built a practical AI deployment framework that covers workflow redesign, use-case prioritization, system integration, eval planning, and human-in-the-loop controls.
• Conducting AI use-case discovery and advisory conversations with professionals in legal, tax, and real estate sectors.

• Led the end-to-end delivery of a SAP Supply Chain Management (SCM / TD / SD) ERP programme, covering project initiation, detailed requirements gathering, operating model definition, system design, build, testing, cutover, and global Go Live across Europe, Asia, and North America. Ensured the ERP solution supported key supply chain, manufacturing, and planning operations to enable future business growth.

• Conducted cross-functional workshops with Supply Chain, Procurement, Planning, Manufacturing, and Logistics teams to capture business requirements, define the future operating model, and map end-to-end system design. Consolidated over 150 requirements into structured documentation aligned with SAP standards.

• Shaped solution design and vendor engagement during the early discovery phase, supporting selection of best-fit technology partners and ensuring the system design covered production planning, inventory management, warehousing, logistics, and supply chain forecasting.

• Managed D365 configuration and troubleshooting, ensuring alignment with business processes and resolving integration issues between D365, SAP SCM modules, and surrounding systems.

• Supported Grain data model changes to lead ingestion of planning data into Snowflake and Footprint, enabling enterprise reporting and analytics development.

• Managed scope, timelines, risks, and dependencies across international teams spanning Europe, Asia, and the US, maintaining integrated project plans, issue logs, and executive reporting to drive stakeholder alignment and delivery momentum.

• Enabled the integration of AI-powered demand forecasting tools into supply chain planning processes, improving forecast accuracy, inventory turnover, and operational decision-making across multiple regions.

• Led SIT, UAT, and data migration phases, including design of test scenarios, defect triage management, and coordination of test execution to validate supply chain and manufacturing workflows prior to deployment.

• Delivered detailed cutover planning, business readiness activities, and hypercare support, ensuring a smooth and coordinated Go Live and full operational handover to business teams.

• ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
• Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
• Preparation for OWASP penetration test, incident response plan, risk analysis
• DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
• Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM

• Developed Red Team infrastructure for real-world attack simulations using Sliver C2 and custom tools
• Executed advanced Red Team operations, integrating AI/LLM security research for prompt injection attacks
• Conducted comprehensive breach assessment attacks and vulnerability assessments across enterprise infrastructure
• Performed root cause analysis and purple team exercises, generating executive-level reports
• Lead LLM red teaming initiatives to improve AI model security for GPT-4, Mistral, and internal GenAI models

• Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures

• Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks

• Conducting red teaming processes, including penetration tests and security analyses for companies

• Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)

• Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX

• Advising companies in critical infrastructures on information security and compliance with the IT Security Act

• Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)

• Integrating data into monitoring tools (Prometheus, Grafana)

• Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management

• Security assessments and penetration testing of IT and network architectures

• Analyzed existing SOC infrastructure and assessed security operations

• Transitioned to a new operating model including security monitoring, incident response, and threat intelligence

• Coordinated between internal teams, external partners, and service providers

• Implemented Microsoft Intune: configuration, compliance policies, and BYOD management

• Implemented Microsoft Defender: endpoint and network protection, automated threat detection, and incident response

• Trained IT security teams and end users

• Deployed Microsoft Sentinel: integration with existing systems, automation of playbooks

• Introduced Conditional Access: policies, MFA, and creation of reports and dashboards

• Managed project from initiation to closure including change, risk, and acceptance management

• Handled project controlling regarding schedule, costs, and quality

• Managed requirements: gathering, classifying, and evaluating IT security requirements

• Built out backend services in Golang, TimeScaleDB, and GCP, handling 10K+ reads concurrently.
• Migrated from RedPanda to a local service written in Golang, reducing latency and business cost.
• Added A/B testing using Open Replay to analyze customer behavior along with performance.
• Collaborated with marketing and firmware teams to successfully launch the MVP on time to pitch to potential customers.
• Streamlined testing and deployments by creating GitHub Actions to check for failing tests and lint errors, and deploying both staging and production releases efficiently.