Florian Walter

Co-Founder

Málaga, Andalusia, Spain11 yrs 10 mos experience

Highly Stable

Key Highlights

CVE holder and OWASP contributor
Identified over 300 vulnerabilities in penetration tests
Founded a boutique security consultancy

Stackforce AI infers this person is a Cybersecurity expert with a focus on Application Security and Penetration Testing.

Contact

Skills

Core Skills

CybersecuritySecure Code ReviewPenetration TestingSecurity ResearchApplication SecuritySoftware Engineering

Other Skills

ConsultingSecurity Engineering

About

I'm a recognized CVE holder, OWASP contributor, and experienced software developer. My exceptional ability to deeply understand source code streamlines my efforts in security research and vulnerability assessments. I found and helped to remediate vulnerabilities in open-source software affecting millions of people (such as XSS in Apache Spark).

Experience

T3

Senior Cybersecurity Consultant (Advisor)

Sep 2025 – Present · 6 mos · Remote

Joined T3 as an Advisor to help establish and lead their new Cybersecurity Services department
Supporting enterprise clients in areas such as penetration testing, secure code review, and technical security for AI/ML systems (applying my AppSec and pentesting mindset to the AI domain)
Delivering secure code review and developer security training

Security EngineeringCybersecuritySecure Code ReviewApplication SecurityConsultingPenetration Testing

Leotrace

Founder, Lead Security Consultant

Sep 2025 – Present · 6 mos · Remote

Founded LeoTrace, a boutique security consultancy focused on penetration testing, secure code review, and developer training
Building a community for security-minded professionals to collaborate on secure code review, appsec, pentesting, etc. (https://community.leo-trace.com/about-community)

Security EngineeringCybersecuritySecure Code ReviewApplication SecurityConsultingPenetration Testing

Veracode

2 roles

Principal Penetration Tester

Promoted

Apr 2023 – Sep 2025 · 2 yrs 5 mos · Remote

Promoted from Senior to Principal in April 2025
Performed 50+ penetration tests, identifying 300+ vulnerabilities with 15% rated High or Critical (nearly double the industry average per HackerOne)
Discovered at least one Critical in over one-third of engagements, and one High or Critical in nearly 60%
Won Hack of the Month 20% of the time in a 15-person team
Some of our largest customers asked for me by name to perform their pentests
Conducted web, mobile, desktop, network, and container pentests, as well as cloud security audits
Consistently exceeded performance expectations in annual reviews

Security EngineeringCybersecuritySecure Code ReviewSecurity ResearchApplication SecurityConsulting+1

Senior Application Security Consultant

Nov 2020 – Apr 2023 · 2 yrs 5 mos · Remote

Promoted from Application Security Consultant to Senior in October 2022
Led 1500+ consultations with a customer satisfaction score of 4.89/5 and helped fix 10k+ security flaws
Won the Veracode Way award and joined the President's Club
Provided hands-on, code-level remediation guidance throughout the whole SDLC for flaws identified by Veracode's products (mainly SAST, DAST, SCA)
Analyzed competitor tools to identify false positives/negatives and improve Veracode's accuracy via feedback to Sales & Engineering
Consistently exceeded performance expectations in annual reviews

Security EngineeringCybersecuritySecure Code ReviewSecurity ResearchApplication SecurityConsulting+1

Birkle it

2 roles

IT-Security Analyst (Working Student)

Apr 2019 – Aug 2019 · 4 mos · Greater Munich Metropolitan Area

Supported development teams and evaluated the security of internal web applications and networks.

CybersecuritySoftware EngineeringSecure Code ReviewApplication SecurityPenetration Testing

Software Developer (Working Student)

Apr 2018 – Mar 2019 · 11 mos · Greater Munich Metropolitan Area

Full-stack and DevOps developer (Node.js, Angular, Python)
Automated deployments (reduced our main product's setup time from ~1 hour to a few minutes) and served as Security Champion for internal apps

CybersecuritySoftware EngineeringSecure Code ReviewApplication Security

Career break

Travel

Aug 2017 – Mar 2018 · 7 mos · Australia

Backpacking through Australia and Southeast Asia.

Ozaccom+

IT Developer (Contractor)

May 2017 – Aug 2017 · 3 mos · Greater Brisbane Area

Reimplementation of an event management app:
Reduced the maximum number of clicks for navigation to 3 (was 8 on average before)
Migrated a SOAP consumer from .NET to Node.js, and implemented a PoC in Ionic

Software Engineering

Sdv-it

2 roles

Software Developer (Security)

Promoted

Feb 2017 – Apr 2017 · 2 mos · Nuremberg, Bavaria, Germany

Evaluated the security of an existing REST API and implemented essential HTTP security headers.

CybersecuritySoftware EngineeringSecure Code ReviewApplication Security

Integrated Degree Program

Sep 2012 – Feb 2017 · 4 yrs 5 mos · Nuremberg, Bavaria, Germany

Bachelor of Computer Science in combination with an apprenticeship as a software developer
Overview of diverse IT topics such as administration of Windows and Linux servers, programming in multiple languages, server monitoring and implementation of secure software

CybersecuritySoftware EngineeringApplication Security