Resume

Cloud & container platforms

Experience

1. 2019–today Senior Security Analyst, Cloud Security Team ERNW Enno Rey Netzwerke GmbH · Heidelberg

   Security assessments and penetration tests of large enterprise environments, these days mostly cloud and Kubernetes. I'm part of ERNW's cloud security team and have reviewed a lot of cloud accounts and container platforms, for several DAX 10 companies among others. I've led scenario-based red-team assessments of cloud and container platforms and co-teach Offensive Kubernetes Security 101.

   • Senior Security Analyst since November 2026, before that security analyst and penetration tester.
   • Pentests of networks, desktop and web applications, containers and multi-cloud setups.
   • Led scenario-based red-team assessments of cloud and container platforms.
   • Research on automating assessments in Azure and Kubernetes and on improving our pentest techniques.
   • Heavy user of AI agents, mostly to build automations for my assessments.
   • Trainer at TROOPERS and HM Training Solutions (Offensive Kubernetes Security 101).

   Joined after a half-year career break, backpacking through South East Asia.

   ernw.de ↗

2. 2017–2019 Junior Security Consultant (Penetration Tester) Context Information Security · Bad Nauheim

   21 months delivering security assurance services for some of the world's most successful organisations, as team member and occasionally as team lead: web applications and web services, external and internal networks, .NET and Java thick clients, CIS-aligned build and configuration reviews (Windows, *nix, Cisco IOS) and tightly scoped, legally compliant scenario-based attack simulations.

   contextis.com ↗

3. 2015–2017 Student Research Assistant, R&D AGT International · Darmstadt

   Two years of research on privacy-enhancing technologies for Internet of Things applications; wrote my master's thesis here (an end-to-end privacy architecture for IoT).

   agtinternational.com ↗

4. 2015–2015 Student Research Assistant, Secure Software Development Fraunhofer SIT · Darmstadt

   Three months improving a dashboard that visualises security issues of software projects.

   sit.fraunhofer.de ↗

5. 2013–2014 Web Developer Kleewald GmbH · Frankfurt am Main

   Eleven months at a start-up building web applications for the finance and legal domains (PHP, HTML5, CSS3, jQuery, MySQL).

6. 2013–2013 Software Engineering Intern TÜV Rheinland Taiwan · Taipei

   A 4.5-month internship between bachelor's and master's: automated RF test procedures with Agilent VEE and built a small Android marketing app.

   tuv.com ↗

7. 2010–2013 IT Consultant Univativ GmbH · Darmstadt

   Alongside my studies: several small projects as IT consultant and web developer, e.g. for Merck KGaA.

   univativ.de ↗

8. 2009–2010 IT Administrator Studierendenwerk Mainz · Mainz

   Four months between civil service and university: network expansion, hardware and software roll-outs, POS system maintenance.

   studierendenwerk-mainz.de ↗

Education

1. 2013–2017 M.Sc. IT Security TU Darmstadt

   Master's programme in IT security. Thesis: an end-to-end privacy architecture for the Internet of Things (with AGT International).

2. 2010–2013 B.Sc. Computer Science TU Darmstadt

   Graduated after six semesters. Thesis: a user study on visualising privacy-critical messages in online social networks.

3. 2005–2008 Technical Assistant for Computer Science, Abitur Berufliches Gymnasium Mühlhausen

   Higher-education entrance qualification with majors in data processing and mathematics, plus the state-certified technical assistant qualification.

Skills

Publications · Teaching

Publications → Teaching →

A detailed CV in PDF is available on request.