Splunk Experts in Hamburg

Mahmoud Q.

Information Security & GRC Expert

Last position:

Information Security & GRC Expert at GLG (Gerson Lehrman Group)

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

Franziska K.

Transformation Management

Last position:

Business Analyst at ALH Group

VALUE ADDED:

The structured analysis and further development of business requirements and processes is driving the modernization of contract administration in a focused manner. Complex business matters and dependencies are made transparent, optimization potential is identified, and transferred into scalable solution approaches that enable as much straight-through processing as possible. This creates clearer and more efficient processes as well as reliable decision-making and implementation foundations for business departments, architecture, and development.

Development of business requirements and processes for the further development and modernization of contract administration
Creation and further development of business concepts, process descriptions, and decision-making documents for implementing new and optimized processes
Analysis of existing processes and identification of optimization potential to simplify and scale processes
Structuring of complex business matters in a dynamic project environment to ensure transparency and traceability for all involved
Identification and clarification of business dependencies and interfaces, especially in interaction with adjacent systems and departments
Contribution to business target models and development of solution approaches for new, scalable processes that also enable straight-through processing
Leadership and moderation of business workshops to coordinate and further develop requirements with internal stakeholders from business departments, architecture, and development
Prioritization of business topics and requirements for targeted implementation
Support with testing, reviews, and quality assurance, including the creation and coordination of business test cases to verify the implemented solutions
Use of SharePoint and Kanban to document and manage tasks

Rolf G.

Developer & Designer

Last position:

Developer & Designer at Sicherheitsbehörden

Migration of a case management system with numerous interfaces to other systems from Spring and Activiti to a Java JEE application
Further development toward a cloud application
Consulting, development, requirements analysis, specification and design
Coordination with upstream and downstream systems
Data modeling, programming and implementation
Support with code reviews and ensuring clean code in the PL/SQL context
Documentation in Confluence
Troubleshooting of PL/SQL applications, including log analysis, session tracing and performance profiling
Optimization and tuning measures in the PL/SQL environment
Knowledge transfer and onboarding of new employees
Use of Jira for task management, progress tracking and sprint planning

Enrique G.

Data Security

Last position:

Security Architect at Capgemini

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

Cornelius H.

Solution Architect

Last position:

Solution Architect at STIHL

Remodeling of the system architecture for an Azure-based platform aimed at rapid development of new functionalities
Modeling of a staging concept for the fulfillment of diverse customer and QA needs
Creation of requirements for, and oversight of, a proof-of-concept supplier project for a Flutter app with highly advanced BLE functionalities
Comparison of multiple observability platforms for feasibility and requirements fit within the project environment
Creation of a mobile app architecture based on domain-driven architecture
Position of technical advisor and accountable solution architect for two development teams
Execution of architecture reviews and alignment of changes with architectural expectations
Skills & Technologies: Microsoft Azure , App Services, NodeJS Mono-repository, microservice architecture, domain driven design, self contained systems, requirements engineering, CI/CD, DevOps, API design, solution architecture

Alexander W.

Freelance Head of Development / Strategy Consultant

Last position:

Freelance Head of Development / Strategy Consultant at LabMaker GmbH

Consulting on a wide range of open science hardware projects in the fields of electronics, mechatronics, and optoelectronics
Comprehensive system analysis and DFM optimization of a novel open hardware miniaturized two-photon microscope
Exchange with scientists from renowned academic institutions to align the customer’s work in the best possible way
Production coordination with local and international partners for PCB assembly, CNC machining, and optics
Process analysis for product design, production planning/execution, product lifecycle, and product data management
Coaching employees from all departments on the requirements that complex technical products place on business processes
Development of a comprehensive PLM & PDM concept tailored to the needs of development and manufacturing
Initiating intensive and direct cross-departmental exchange to identify improvement potential
Planning shopfloor layout improvements with the production team and supporting the implementation process
Quick onboarding of two new English-speaking colleagues in technical product management and development
Ad-hoc and in-depth training of employees in the use of software tools such as KiCad or Autodesk Inventor
Consulting on long-term development into a scalable, even stronger partner for the open science hardware community

Adrian H.