Nmap Experts in Germany

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

• Linux server migrations: Planning and implementation of the migration with SLES Linux Deployment of VMs in VMware 8.0
• Guiding colleagues in configuring Linux VMs in vSphere Auto Deploy
• Application operations: Ensuring the smooth operation of applications on the migrated servers
• Operations manuals: Revising existing operations manuals, adding to them and creating new ones when required
• Reviewing service offerings: Adjusting and optimizing the service offering of external service providers
• Logistics SW, RedHat Linux, Ansible, Confluence / Jira

• Work within time-critical operating procedures; coordinate issues with customers, partners and central support.
• Maintain reliable handovers and concise incident communication when service, equipment or routing issues occur.

• Stabilized the cross-site workplace/printer rollout and transferred it into reliable operational processes. Ongoing hospital operations, new naming conventions, new print servers in a different AD structure, Kerberos dependencies, management systems and inconsistent inventory data.
• Took over technical workstreams and escalated risks at an early stage. Interface between IT operations, project organization, internal employees and external service providers; independently responsible for critical technical workstreams without formal overall project management.
• Fully consolidated the central master/rollout data. Correlated serial number, MAC, IP, location and old/new device references from several sources and established them as a shared working basis for rollout, follow-up work, location and toner processes.
• Technically stabilized the printer rollout. 717 devices in the consolidated rollout scope, including 431 replacement devices; 114 documented deviations. Controlled, created or validated around 2,000 printer/queue objects.
• Proposed Location B as an independent work package and managed it technically. Consolidated 216 old devices into 88 new devices; implemented this in around 10 working days with 1-2 external technicians. Prepared ClearPass, TXT/mapping and ORBIS offset topics in parallel.
• Made several thousand existing TXT/VBS client assignments suitable for bulk migration. Defined old/new mapping, new print servers, Follow-Me, queue, suffix and tray logic; developed checking/correction logic for incorrect manual names.
• Built and productively verified cross-domain FollowMe. Used the historical username attribute to map between the old and new AD domains; stopped further expansion when data quality was no longer reliable.
• Developed the technical approach for hardware/queue reconciliation. Correlated standard lists, print server objects and real devices using IP/SNMP; defined rules for MAC, serial number, IP, location, toner, trays, keep/remove/rename, duplicates and rollback.
• Built AI-assisted automation under time pressure. Developed and stabilized PowerShell/XML tools with independently developed process, data and validation logic, test cases, logging, DryRun/guardrail approaches, error analysis and live validation.
• Designed an HTTP/web platform as a target architecture that was not introduced into production. Technically designed ASP.NET Core 8, .NET Worker, SQLite and PowerShell 5.1 for job control, target/actual comparison, logging/audit, recovery, queueing and locking.
• Operationalized toner, location and operational processes. Consolidated TA-Cockpit location data; established toner/order logic with prioritized run lists; supported Follow-Me, duplex and Scan2Mail pilots.
• Worked out the KRITIS/emergency topic in detail. Structured and visualized printer operations during power/infrastructure failures, coordinated internally and supported the integration into the emergency concept.
• Coordinated the workplace/IGEL client rollout with 1.200+ thin clients from a technical and operational perspective. Prepared the project from 11/2025 and continued it from mid-09/2026. Technically reviewed and structured the process from unpacking and labeling/inventory to setup; handed over operational unpacking/label coordination to a colleague so several employees could work in parallel.
• Personally prepared around 120 thin clients for production. Together with a technical colleague, primarily responsible for finding a solution for automated IGEL-OS-12 installation; productive automation is currently still open.
• Saved around 83 hours of manual ClearPass data entry. Created a PowerShell/import script for ClearPass and demonstrably saved the network colleague around 83 hours of manual entry for 1.200 thin clients; at the same time, significantly reduced the risk of manual errors.
• Supplied formal project management with technical results. Operational results, technical feasibility, process structure and status from the responsible workstreams serve as an important basis for steering by the official project manager.
• Documentation & handover. Documented rollout, AQrate, TA-Cockpit and automation processes, conducted training and tested, configured and prepared around 25 digital medical carts for operation.

• Planned and carried out black-box adversarial testing of traffic-sign computer-vision pipelines; created a threat model and attack-surface analysis for safety-critical scenarios
• Built a programmable hardware proof of concept using a holographic POV fan and a repeatable test harness to run real-time experiments and gather evidence for vulnerability assessment
• Measured misclassification across lighting, distance, and angle, achieving up to 90% untargeted misclassification; delivered reproduction steps, PoCs, and prioritized mitigations, and documented limitations and residual risk

• Developed a custom tool using the Mistral 7B LLM to scan, validate, and report security vulnerabilities.
• Security tested AI agents, bots, and other LLMs, focusing on prompt injection, model inversion, data poisoning, EDR/AV bypass and evasion techniques, membership inference, model evasion, overfitting to malicious inputs, and contextual manipulation.
• Onboarded repositories to SAST solutions for security scanning, implemented secrets scanning, DAST, and SCA, and used ZAP for DAST in CI/CD pipelines.
• Delivered security awareness training and developed CTF challenges and training materials to improve developers' security knowledge.
• Planned and carried out bi-annual red teaming operations based on the MITRE ATT&CK framework and led internal and external pentests based on the OWASP Top 10 framework for 70+ applications worldwide, resulting in the detection, reporting, and remediation of hundreds of vulnerabilities.
• Triaged HackerOne reports.

• Completed 25+ hands-on labs focusing on digital forensics, incident response, and advanced threat hunting techniques.
• Earned top-tier badges in malware analysis, enterprise log analysis, and threat intelligence gathering.
• Developed specialised skills in forensic report writing and evidence collection methodologies to support incident investigations.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Worked on FPGA enhanced network encryption device with secure boot, TPM2.0 and smart card integration for BSI approved usage with Post Quantum Cryptography
• Developed and audited Linux drivers
• Collaborated using GitLab, Gerrit, Confluence and Jira
• Technologies: C, C++, Secure Boot

• Performed security assessments and penetration testing on Microsoft AI models for text, image, and video generation.
• Conducted prompt injection attacks through diverse input vectors, including crafted text, steganographic images, and manipulated visual elements (e.g., varying opacity and embedded content).

Supervised the course Software Engineering for Bachelor students and delivered lectures.

• Created as-is network documentation for a Bechtle customer
• Analyzed existing configurations and adjusted them
• Advised on Fortinet and Check Point products
• Troubleshot complex routing, switching and application issues
• Tools: MS Azure, FortiManager, Cisco Nexus & Catalyst, Cisco WLAN Controller, Citrix Netscaler SD-WAN, MS Visio, Checkpoint VSX, Wireshark