Curriculum Vitae
CISO-level security executive with deep technical roots — from writing Amiga antivirus engines to building enterprise security organizations.
Security leader with 37+ years of hands-on and executive experience spanning telecom, finance, manufacturing, software development, and antivirus industries. Track record of building and scaling security organizations from the ground up — from establishing SOCs and CERTs to designing enterprise security frameworks. Rare combination of deep technical expertise (started writing antivirus engines in 1987) and C-level leadership with budget responsibility exceeding €15M and teams of up to 80 people. PhD in malicious code classification. Open-source contributor and builder of security management platforms.
- Created and built the Product Security department from the ground up
- Technical lead for T-Online customer email platform — 10+ million users (SMTP/POP3/IMAP, PHP webmail)
- Technical product lead for VoIP platform and T-One handset (OpenSER, provisioning, billing, customer UI)
- Designed standard tools for security clearance of products
- VoIP (SIP) security research and test suite design
- Implemented caller identification system for misuse detection (Perl, PHP)
- Automation tools for Abuse department, network-based SPAM prevention
- Support of initial Android security evaluation
- Legal consulting including court support (IP data retention)
- Security research on Java 2 Micro Edition (J2ME)
- Created security requirements for secure development — web servers, application servers, databases
- Designed the first T-Mobile CERT including communication platforms
- Penetration testing for web servers, application servers, and databases
- Designed and executed external security audits
- Evaluated security solutions (ISS SafeSuite, Siteprotector, Sanctum AppScan, Spidynamics Webinspect)
- Security QA methods for chip cards; chip-card-based alarming solution (Java prototype, project lead)
- Designed first T-Mobile WLAN offering including security aspects
- Created SLAs for security operations
- Application server research (WebLogic, WebSphere) and security architecture
- Client/server architecture design for eCommerce platform (J2EE, BEA WebLogic 6)
- Java EE development — workflow engine, CI/CVS/VCS structures
- Team lead for eCommerce runtime environment development
- Collaboration platform design with external developers
- Implementation of new detection routines for malicious code
- Design and implementation of macro virus heuristics
- Analysis of new malicious code samples
- Crypto analysis and research on new file formats / parsing logic
- Research on WAP 1.1 security
- Common coding and design work for file system drivers
Languages
Kotlin, Java, Python, Go, JavaScript/TypeScript, Perl, PHP, 68k Assembly
Frameworks
Micronaut, Astro, React, Spring Boot, J2EE/Jakarta EE
Security — Offensive
Penetration Testing, Red Teaming, Bug Bounty, Vulnerability Analysis, Exploit Research, Honeypots
Security — Defensive
SOC/CERT, EDR, SIEM, IAM/PAM, Incident Response, Threat Intelligence, OT Security
Security — Governance
ISO 27001, NIST, OWASP, Risk Management, Compliance, M&A Security, Framework Design
Infrastructure
AWS, Docker, Linux, CI/CD, PostgreSQL, SMTP/IMAP, VoIP/SIP, REST APIs
Malware Analysis
Heuristic Detection, Macro Virus Analysis, File Format Parsing, Crypto Analysis, AV Engine Development
Leadership
Budget €15M+, Teams up to 80, MSSP Management, International Rollouts, Patent Processes