Stephan Brandauer, PhD

Co-Founder

Munich, Bavaria, Germany12 yrs 4 mos experience

AI ML PractitionerAI Enabled

Key Highlights

Expert in AI-based IT security solutions.
Strong background in programming language technology.
Proven leadership in CI/CD and DevOps practices.

Stackforce AI infers this person is a Cybersecurity and Automotive Software Engineer with strong expertise in AI and programming languages.

Contact

Skills

Core Skills

Ai-based It SecuritySecurity AnalysisMachine LearningStatic AnalysisStatic Application Security TestingCicdDevopsProgramming Language Design

Other Skills

dockervulnerability remediationproduct lifecycleautomationCI/CDTypescriptPythonGitHub ActionsGoCodeQLJavaScriptNode.jsPostgreSQLOCPPKubernetes

About

I'm working on an AI-based tool to quickly triage security findings from a range of sources. I used to be working on CodeQL (https://codeql.github.com), a tool for building powerful static analysis of programs written in a wide range of languages. I have experience working, as a tech lead and CI/CD lead, in the automotive industry where we delivered an awesome IOT product to B2B customers to help advance e-mobility. I have a PhD in computer science, getting my degree with research in programming language design, implementation, analysis, and synthesis. I started programming when I was fourteen and got my first freelancer job at 18, I like to tinker with digital electronics (hobbyist). I love learning from others, and I love teaching others what I know.

Experience

Maze

Founding Software Engineer

Jun 2025 – Present · 9 mos · Remote

Working on an AI-based IT security platform.
co-built and -designed core parts of the product. Eg.:
extend our large security analysis to also run on docker container images,
add remediation suggestions for vulnerabilities ("how to patch")
in my work, I covered the whole product lifecycle: from early ideation, prototyping, architecture, implementation, ML evaluation to product public release. No frontend, though.

AI-based IT securitysecurity analysisdockervulnerability remediationproduct lifecycle

Career break

Full-time parenting

Feb 2024 – Oct 2024 · 8 mos

Parental Leave

Github

2 roles

Software Engineer Working With Machine Learning, Security, Static Analysis/SAST, Automation, CI/CD

Sep 2022 – May 2025 · 2 yrs 8 mos

Using machine learning models to understand code.
Helped building Copilot Autofix.
Implementation and evaluation of AI products using Typescript, Python, GitHub Actions, Go
Design and build tooling for evaluating ML models
Prompt crafting/prompt engineering

machine learningstatic analysisautomationCI/CDTypescriptPython+2

Software Security Engineer working on Static Analysis

Dec 2021 – Sep 2022 · 9 mos

Working on the CodeQL language libraries for static application security testing (SAST).
Building and applying advanced security analysis tooling to discover vulnerabilities in JavaScript and TypeScript programs.
Understanding and triaging real world security vulnerabilities, and making sure that our product is able to find those bugs and similar ones automatically.

CodeQLstatic application security testingJavaScriptTypeScript

Tng technology consulting

3 roles

Software Engineer, Tech Lead, and CICD/DevOps Lead in e-mobility

Jun 2021 – Nov 2021 · 5 mos

Lead of the "community of practice" on Continuous integration and continuous delivery. Responsible to push CICD and DevOps topics across the organisation, organize regular workshops (voluntary workshop attendance approx. doubled during my tenure), support modernization of infrastructure deployment, etc.
Tech Lead in the automotive industry/e-mobility.
Backend development using Node.js, TypeScript, postgres, OCPP (version 1.6 and 2.0). Delivery using Kubernetes and Google Cloud Run, Terraform, Azure Devops.
Frontend development using React and Redux.

CICDDevOpsNode.jsTypeScriptPostgreSQLOCPP+6

Software Consultant and Tech Lead in e-mobility

Apr 2021 – May 2021 · 1 mo

Tech Lead in the automotive industry/e-mobility. Servant leader, responsible to manage code quality, technical debt, aid with individual learning, facilitate group decisions.
Backend development using Node.js, TypeScript, postgres, OCPP (version 1.6 and 2.0). Delivery using Kubernetes and Google Cloud Run, Terraform, Azure Devops.
Frontend development using React and Redux.

CICDDevOpsNode.jsTypeScriptPostgreSQLOCPP+6

Software Consultant in e-Mobility

Feb 2020 – Mar 2021 · 1 yr 1 mo

Engineer in the automotive industry/e-mobility.
Backend development using Node.js, TypeScript, postgres, React and Redux, OCPP (version 1.6 and 2.0). Delivery using Kubernetes and Google Cloud Run, Terraform, Azure Devops.
Continuous Delivery: I organized workshops, co-designed new processes, co-implemented pipelines to help the team achieve continuous delivery (from 0-2 times per week to several times per day).
Code Quality: I helped the customer improve code quality, eg. by building a custom test tool for automated bug finding that found defects in 44% of endpoints under test.
Business Intelligence&Data Viz: Helped business by initiating and co-implementing a data visualization that affected core business KPIs.

CICDDevOpsNode.jsTypeScriptPostgreSQLOCPP+6

Career break

Full-time parenting

Jan 2019 – Jan 2020 · 1 yr

Uppsala university

Ph.D. Student

May 2013 – Jan 2019 · 5 yrs 8 mos

Work on compilers and programming language design, with a focus on alias control. Alias control has implications for program correctness, performance, garbage collection, and it has connections to functional programming.
My research was both on building language abstractions, as well as on measuring and aliasing "in the wild" by dynamically analysing programs.

compilersprogramming language designalias controldynamic analysis