01.10.2025 aktualisiert
AK
100 % verfügbar
Cyber Security Engineer
Schoenefeld, Deutschland
Weltweit
Bsc(Hons) University of Reading - Computer Science and AISkills
Amazon Web ServicesArchitekturdesignAutomatisierungMicrosoft AzureBusiness To BusinessCloud ComputingCloud-SicherheitInformationssicherheitKryptographieLinuxKryptographische ProtokolleHIPAAInfrastrukturISO / IEC 27001Python
Security Architecture, Security Strategy, Threat Modeling, STRIDE, DREAD, EoP Poker, Risk Management, Risk Analysis, Cloud Security, Infrastructure Security, AWS Security, Azure Security, Hybrid Cloud, Secure Architecture Design, Software Security, Application Security, OWASP Top 10, CWE-25, Cloud-Native Security, Vulnerability Management, Security Governance, Compliance Frameworks, SOC 2, HIPAA, ISO 27001, GDPR, Reverse Engineering, Binary Analysis, ELF, x86_64, ARM64, Binary Ninja, Cryptography, Key Management, Encryption Protocols, Cryptographic Attacks, Security Automation, Python 3, Golang, Shell Scripting, DevSecOps, Compliance Automation, Security Policy Design, Secure Software Supply Chain, Security Audits, Technical Leadership, Stakeholder Communication, Product Security, Internal Security Audits, B2B Security Consulting, Rust, C17, Linux Kernel Internals, Memory Allocators, Linux Namespaces, Linux Capabilities, Syscall Hardening
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2022
Sprachen
DeutschGrundkenntnisseEnglischverhandlungssicherGriechischMuttersprache
Projekthistorie
- Designed, implemented, and communicated annual security strategy roadmaps aligned with tangible business objectives (e.g., market expansion, multiple compliance certifications). Acted as the primary point of contact for external auditors and vendors, representing Product Security, often in tandem with Legal.
- Established security-focused SOPs across Engineering, Technical Support, and Professional Services to ensure consistent, risk-aware operations company-wide.
- Introduced and applied STRIDE threat modeling to identify and mitigate design-level risks early in the SDLC, significantly reducing downstream remediation costs.
- Defined and expanded technical guardrails for cloud and software services; verified security posture through internal audits and continuous assessment.
- Designed and deployed SCA, SAST, and DAST security tooling in CI/CD pipelines, proactively identifying and mitigating vulnerabilities before production. Championed widespread use of compiler binary exploitation protections, effectively downgrading or eliminating memory corruption vulnerabilities.
- Led successful security initiatives for bolstering implementing cryptographic measures and access controls to protect data at rest and in transit.
1. Vulnerability assessment of Web Applications / APIs, leading to elimination of critical and
high vulnerabilities before 3rd party verification.
2. Introduced threat modelling and architectural review of applications, leading to early
elimination of security defects.
3. Provider of security consultancy services to product teams.
high vulnerabilities before 3rd party verification.
2. Introduced threat modelling and architectural review of applications, leading to early
elimination of security defects.
3. Provider of security consultancy services to product teams.
1. Enabled SCA across all verticals for scanning of Docker containers, leading to greater
security confidence in basic software building blocks.
2. Threat modelling and creation of Risk Register for Machine Learning teams, allowing
usage of GDPR sensitive data for ML training.
3. Security consulting services to various software engineering teams.
security confidence in basic software building blocks.
2. Threat modelling and creation of Risk Register for Machine Learning teams, allowing
usage of GDPR sensitive data for ML training.
3. Security consulting services to various software engineering teams.