Python Experts in Stuttgart

• Task Engineering: Evaluating Coding Agents.
• Asset Creation: Building realistic task environments using datasets and files in German. Crucially, these assets must remain in the target language to genuinely measure multilingual handling.
• Prompting & Translation: finding failure points where AI does not work, in German.
• Implementation & Verification: Supporting the development of robust solutions (reference implementations) and write highly reliable, deterministic verifier scripts (using rubric-based judging only when strictly necessary).
• Calibration & Execution: Analyze execution logs and calibrate task difficulty (Easy to Very Hard) using standard Terminal-Bench run configurations against various model tiers (Haiku, Opus).
• Quality Assurance: Participation in a rigorous, 4-layer human quality control process (creation, human review, calibration review, and audit) alongside automated LLM-based checks to ensure fairness, grammatical accuracy, and benchmark integrity.
• Linguistic Review: Reviewing AI benchmark tasks across Hindi, Arabic, Japanese, Chinese, Czech and Turkish.

• Analysis of the existing CAN communication between microcontrollers
• Analysis of the sensors used and the measured values collected
• Planning the CAN messages for transmitting the measured values
• Iterative adjustment of the microcontroller code to the new CAN messages
• Cross-compilation from x64 to arm64

• Advised the executive team on the strategy, architecture, and development of an AI-powered Product Security Operations Center (PSOC); a cybersecurity operating system for software-defined cyber physical connected systems.
• Provided strategic guidance on product vision, regulatory alignment, and market positioning, supporting capabilities across threat intelligence, vulnerability management, compliance automation, and autonomous product security.

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Development and introduction of operational processes
• Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
• Introduction of a workshop on IaC (Infrastructure as Code)
• Professional consulting for the project's security concept (ISMS)
• Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
• Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
• Analysis and resolution of incidents and system outages
• Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
• Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
• Consulting on Ansible deployments and infrastructure automation
• Consulting on building a scalable system in the cloud (AWS / Azure)
• Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi

Responsibility for commercial finance in Central Europe (DACH and Poland), reporting to the EMEA Commercial Finance Director. Monthly financial reporting, forecasting, and variance analysis, evaluation of promotions and special campaigns, management of planning processes including budgeting, as well as preparation of QBR materials up to CFO level. Took over functional leadership in the finance team after the mandate holder was unavailable.

Designed and developed an AI-powered automation platform using n8n to analyze social media niches, identify target audiences, and automate marketing strategy generation. The solution combined AI agents, workflow orchestration, and data analysis to automate research processes and generate data-driven insights.

• Designed and implemented complex automation workflows using n8n
• Developed AI-powered analysis agents for market and audience research
• Integrated multiple APIs and AI services into automated workflows
• Built automated market, competitor, and target audience analysis pipelines
• Leveraged Large Language Models (LLMs) for information summarization, classification, and prioritization
• Containerized and deployed the platform using Docker

Technologies: n8n, AI Agents, OpenAI APIs, Prompt Engineering, LLMs, Docker, Linux, REST APIs, Webhooks

• Automated Python-based analysis of test script repositories
• Built a SQLite database for signal and value tracking
• Identified critical discrepancies with ad-hoc SQL queries
• Technologies: Python, SQLite, Excel/ODBC

• Founded Latence to commercialise runtime safety patterns from HALO as a deployable product.
• Built end-to-end as single technical founder with open-source stack on NVIDIA ecosystem.
• Developed TRACE: real-time safety layer for knowledge agents and RAG pipelines with groundedness scoring, prompt-attack detection, GDPR redaction, context compression, audit-ready traces.
• Developed vLLM Factory: production inference framework on vLLM with custom Triton kernels and 12 parity-validated plugin models, achieving up to 11.7× throughput vs vanilla PyTorch.
• Developed ColSearch: single-node multi-vector late-interaction retrieval engine with Rust SIMD and fused CUDA, achieving 3.12× FastPlaid geomean QPS on BEIR-8 and a 1.58-bit quantized lane 6.4× smaller than FP16.
• Developed llm-opt: LLM compression research framework with hierarchical importance, structured pruning, tabu search, knowledge distillation.

• Teaching German literature and linguistics

• Technical lead of diagnostics activities for eDCT transmissions and drive systems in the area of hybrid (HEV), mild-hybrid (MHEV), and plug-in hybrid vehicles (PHEV)
• Responsibility for the development and validation of DTC strategies (OBD / EOBD) for markets in North and South America and the EU
• Coordination between interdisciplinary teams (system development, software, safety, calibration, after-sales)
• Creation and maintenance of diagnostic specifications (DID, DTC matrix, snapshot, freeze frame) according to STLA standards
• Support with troubleshooting, validation tests, EOL processes, and internal audits
• Technical interface to suppliers (Bosch, Valeo, etc.) in the area of actuators, sensors, and electric pumps
• Creation of diagnostic RFQ

• Implementing applications with Kotlin and Ktor as microservices
• Using MongoDB in the MongoDB Atlas cloud
• Asynchronous communication of services via Google Pub/Sub
• Using Kotest and MockK for unit tests
• Developing an administration frontend with TypeScript, React and Express.js
• Provisioning environments in GCP using Terraform
• Implementing CI/CD processes with GitHub Actions
• Operating scalable production and test environments in GCP with Kubernetes, Helm and Flux CD
• Monitoring environments with Prometheus and Grafana
• Providing BI data in the Google BigQuery data warehouse

• Lead Product Owner for 4 development teams
• Leading and coordinating a greenfield project with parallel implementation of core components by independent teams; managing dependencies and resources
• Establishing a data lakehouse approach, including analysis of data volumes and future requirements as part of a cloud migration (best-of-breed approach)
• Responsible for requirements analysis, selection, and piloting of a LIMS/ELN system, supported by advising decision-makers and managing external vendors
• Introducing and managing an OpenWeb UI and Azure OpenAI-based RAG system to support knowledge extraction and data-driven analyses
• Setting up, configuring, and managing Jira projects, as well as developing project-specific workflows and automations
• Implementing classic Scrum processes with all ceremonies and taking on the Scrum Master role for all involved teams
• Assisting in hiring through interviews and assessments from a product owner's perspective
• Making key architectural decisions, including selecting the platform for the data lakehouse (Databricks) and the strategic integration of LIMS and analytics platforms