PCI DSS Experts in Frankfurt

Reza N.

Senior IT Security Engineer · Detection & Response · Microsoft Security

Dreieich

Last position:

Senior IT-Security Expert at Teambank AG

Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR

Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK

Prasad T.

Solution Architect / Senior Manager – DTC E-Commerce Platform

Frankfurt

Last position:

Solution Architect / Senior Manager – DTC E-Commerce Platform at BRITA

Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

Simone K.

Consultant

Last position:

Consultant at EPSM (European Association of Payment Service Providers for Merchants)

Stakeholder management and coordination of board meetings
Acquisition of speakers as well as management and moderation of physical and virtual EPSM meetings for members and guests from the payment industry
Organization and coordination of working groups on regulatory topics (DORA, PCI-DSS, AML, PSD3/PSR)
Consulting and representing EPSM on social channels, on the web and at external events and trade fairs

Peter S.

IT Project Manager

Last position:

IT Project Manager at PAS Provider for Hospital

Overall responsibility for managing a clinical digitization project in a regulated hospital environment.

Design and implementation of a patient call and management system (PASO) for the orthopedics department of a large hospital.

Project management, planning, and control
Process analysis and optimization, and managing implementation and rollout
Coordination with clinical departments, IT, and external service providers
Ensuring integration into existing IT and process landscapes

Project scope: 310 person-days, team size: 21 members.

Emil S.

Project Manager

Bad Soden am Taunus

Last position:

IT Project Manager at Eurowings Aviation GmbH

The project aimed to reduce the scope of the annual PCI DSS audit and increase security in credit card payments.
Credit card payments were tokenized and data and business processes adjusted so that no personal data was used in the internal IT infrastructure.
Tools: MS Office, Jira, Confluence, draw.io, Miro, Scrum.
Designed the tokenization of credit card payments.
Clarified necessary changes to the architecture and data model.
Designed and implemented process changes in the call center.
Prepared management documentation on project status, decisions required, risks and escalations.

Leonid R.

Business Analyst | Requirements Engineer (certified) | Requirements Manager

Last position:

IT Business Analyst / Requirements Engineer at S-Payment GmbH / Sparkasse (DSV-Gruppe)

Business analysis of payments for the introduction of Wero EPI in Germany.
Analysis and optimization of merchant processes in the context of acquiring and issuing.
Analysis of interfaces for instant payments.
Analysis of SCT-Inst processes, settlement mechanisms and reporting processes.
Identification and clarification of gaps in merchant processes.
Analysis and documentation of clearing and settlement processes.
OSPlus process analysis and documentation.
Coordination and alignment with scheme management as well as various payment service providers and financial institutions on merchant processes.
Preparation and follow-up as well as active participation in EPI meetings on technical coordination and regulatory topics in payments, including content familiarization and prioritization.
Preparation and documentation of project and steering committees in the EPI environment.
Creation of status reports for the subproject.
Maintenance and structuring of Confluence pages for project documentation.
Coordination and alignment with the issuing teams on individual customer processes as well as aligning with bank processes and acquirer processes in the Wero environment.
Communication with payment service providers regarding merchant and bank processes in the Wero environment.
Organizational support for project management in special tasks in the EPI and Wero environment.
Digital filing and documentation in Confluence and Microsoft Teams.
Planning, implementation and tracking of work packages and steps.
Quality assurance and project control.
Consulting on IT strategy, IT architecture and interface management in the EPI and Wero environment.
Technical environment: Jira, Confluence, XML, JSON, MS Office (Word, Excel, Teams, PowerPoint), SharePoint, Draw.io, Innovator, 3rd-level support, ITIL, creation and updating of software documentation, interface management, OSPlus, Scrum, KYC, payment, European Payments Initiative (EPI), Wero, Microsoft Loop, Instant Payments, SCT-Inst.

Tan P.

DevOps & Fullstack Engineer

Hanau

Last position:

DevOps Engineer in the DevOps Team at Rise-World

Implementation of specified DevOps solutions to automate infrastructure (Terraform, Bicep, CloudFormation, Ansible) on-premises datacenter (Ovirt, Proxmox, Ceph Cluster, MinIO) and private cloud.
Administration, configuration and implementation of CI/CD DevOps pipelines (GitLab, GitFlow) to support development process (Artifactory, Prometheus, Istio, service mesh, Helm Chart, OpenShift (Red Hat Enterprise) / Kubernetes cluster), Red Hat Satellite.
Administration, setup, monitoring and patching of Linux infrastructure based on Red Hat Enterprise for Dev, Test and QA.
Use of Scrum and Kanban methods.
Administration, configuration and implementation of security standards for deploying on Dev, Test, QA and Prod stages of the new ePA applications.
Development of new plugins and add-ons needed on current infrastructure.
Database support.
Data analytics support (Python, Spark, Pandas, Power BI, Splunk Enterprise).
Implementation of best practices for DevSecOps and BizDevOps using GitOps (ArgoCD), Streamlit framework, Semaphore Ansible UI.
Configuration and testing of iperf, uperf, sysbench using benchmark-operator for external source data and IoT/MDM devices, creating reports via ELK / OpenSearch.
Building a new Databricks platform to collect and analyze big data from different sources and IoT devices into Hadoop framework (Python, Pandas, PySpark, Power BI, Apache Airflow).
Building backend data aggregation and processing to automate configuration deployment between different OpenShift clusters and big data framework (Python, Pandas, PySpark, Apache Spark, PostgreSQL, Django 2, Ansible Automation, Jira JSM).
Building a new ML pipeline platform using Kubeflow, TensorFlow, KServe.
Data extraction, transformation and loading from different data sources including structured and unstructured data to analytic DWH / big data cluster using Python, Pandas, Polars, Power BI, Django backend and PostgreSQL.
Setup of new DevOps Test and QA HashiCorp Vault cluster for PKI and IAM.
Configuration and testing of automated patching based on CVSS score, SIEM-integrated CVEs.
Use of Nexpose and InsightVM to scan vulnerability events in network, host, container and application.
Design and implementation of secure and scalable AWS architectures including VPC, EC2, S3, RDS and Route53 and similar setups on Azure and GCP.
Automated system provisioning and deployment using CloudFormation templates.
Configuration of IAM roles, policies and permissions to ensure secure access control.
Patch management, backup automation and disaster recovery setup on AWS infrastructure.
Monitoring and optimization of system performance using AWS CloudWatch and AWS Trusted Advisor.
Support of VMware services (vSphere, Aria, Horizon) and the virtual desktop environment.
Development and maintenance of CI/CD pipelines using Jenkins, GitLab CI/CD and AWS CodePipeline with interface to Nutanix.
Configuration of AWS CloudWatch to monitor application performance and system events.
Planning and execution of migration of on-premises applications to AWS cloud platforms.
Deployment of containerized applications using Docker and Kubernetes in AWS environments.
Deployment of internal software packages between availability zones using AWS CodeDeploy.
Building and deploying ML models using Scikit-learn, XGBoost and Spark MLlib including hyperparameter tuning, model evaluation and production deployment.

Abdullah A.

Technical Program Manager - IT & Corporate Social Responsibility (CSR)

Last position:

Technical Program Manager - IT & Corporate Social Responsibility (CSR) at Maxon Computer GmbH (a Nemetschek Company)

Led cross-functional compliance and IT programs spanning infrastructure, security, legal, and executive stakeholders, ensuring audit readiness and regulatory alignment.
Acted as single point of ownership for IT governance and CSR programs, defining scope, milestones, risks, and success metrics.
Partnered directly with VP of IT as a governance and control counterpart, supporting security incidents, compliance posture (ISO 27001, GDPR, SOC 2), and executive reporting.
Supported organizational readiness for emerging EU regulations, including the EU Cyber Resilience Act (CRA) and EU AI Act, by analyzing regulatory requirements, identifying governance and compliance impacts, and aligning internal policies and control processes.
Designed and scaled data collection and reporting processes for CSR and regulatory reporting across group and subsidiary level.
Drove process improvements and standardization, increasing transparency, predictability, and audit readiness.
Technologies and tools: Office 365 Power BI, MS SharePoint, MS Word, MS Excel, MS Teams, Zendesk, Confluence, JIRA, Vanta.

Falk W.