Jul 2023 – May 2025 · 1 yr 10 mos · Remote

• Led detection engineering initiatives for the Attack Surface Intelligence (ASI) platform, managing research, development, testing, and deployment of detection signatures.
• Architected detection capabilities for critical vulnerabilities and technology fingerprints using customized YAML signatures, NMAP NSE scripts, and protocol-specific banner analysis.
• Developed and maintained a suite of Python-based internal tools that improved vulnerability scanning efficiency and reduced false positives.
• Built a comprehensive vulnerability intelligence collection system monitoring multiple sources for early identification of emerging threats.
• Served as the technical escalation point for detection accuracy issues, resolving complex edge cases and providing detailed technical documentation.
• Led regular collaboration sessions with Insikt Group analysts to improve signature sharing and standardize detection methodologies across teams.
• Applied reverse engineering techniques to analyze security patches for critical vulnerabilities, developing novel detection methods.
• Created detailed technical remediation playbooks for high-risk security issues affecting enterprise technologies, improving customer remediation processes.

Dec 2021 – Jun 2023 · 1 yr 6 mos · Remote

• Evaluated and triaged security vulnerabilities reported through the HackerOne bug bounty program
• Performed comprehensive security assessments for new features and architectural changes
• Collaborated with development teams to implement and enforce secure coding practices
• Contributed to security documentation and refined vulnerability management processes
• Helped maintain and improve the internal security assessment workflow
• Participated in security training sessions and knowledge sharing initiatives
• Conducted vulnerability assessments and provided detailed remediation guidance

Jan 2018 – Dec 2021 · 3 yrs 11 mos · Remote

• Managed and mentored a team of 15 Security Analysts across EMEA region for vulnerability triage operations
• Developed and implemented standardized vulnerability assessment criteria and validation procedures
• Created training materials and conducted technical workshops for security analysts
• Optimized triage workflows resulting in 40% improvement in response times and accuracy
• Served as technical escalation point for complex vulnerability assessments
• Collaborated with program managers to refine security scope and vulnerability disclosure policies

Jan 2016 – Jan 2018 · 2 yrs · Remote

• Performed technical validation of security vulnerabilities across diverse client programs
• Assessed impact and severity of reported security issues using industry-standard frameworks
• Provided detailed vulnerability reproduction steps and remediation guidance to customers
• Maintained communication with security researchers throughout the disclosure process
• Contributed to the development of internal vulnerability assessment guidelines

Feb 2015 – Mar 2017 · 2 yrs 1 mo · Heidelberg, Baden-Württemberg, Germany

Feb 2015 – Aug 2016 · 1 yr 6 mos

• Individual contributor to the Bugcrowd Application Security Engineer Team.
• Providing Security Assessment and Validation of incoming Security Reports for a wide variety of companies
• Main point of focus was the technical validation of Mobile (iOS / Android) Security issues.

Apr 2011 – Dec 2021 · 10 yrs 8 mos · Greater Freiburg Area

• Author of blog.it-securityguard.com.
• Published 32 write-ups on Application Security topics including Reverse Engineering, Mobile App Reverse Engineering, Host discovery and Bug Bounties.
• Average readership of 12.000 unique visits per post
• Offering Pentesting Services to Small-Medium Businesses.
• Including Black Box Penetration Testing and White Box Penetration Testing of Mobile and Web Applications