Freelancer profile translated to English.

Description

Security all-rounder for SOC, SIEM, Detection Engineering, and Zero Trust. I conceptualize and build (hybrid) SOCs, bring structure to existing setups, and accompany projects from architecture to operational implementation.

Languages

German
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Zwickau (up to 50km)

Zero Trust – Government & Defense
Security Architect
PUBLIC SAFETY
January 2025 - Today (1 year and 7 months)
Zero Trust Architecture: Design and technical specification of a Zero Trust target architecture according to NIST SP 800-207
SOC Integration: Technical conception and implementation of the integration of a Security Operation Center into a Zero Trust architecture
IAM: Design and implementation of Identity and Access Management workflows with Keycloak
Platform & Operations Architecture: Conception, setup, and operation of secure container and virtualization platforms (Kubernetes, VM-based infrastructures) with a GitOps approach
Kubernetes Zero Trust SIEM IAM Security Operations Center
Regulatorisches Umfeld (DORA, KAIT/VAIT)
SOC / SIEM Engineer
BANKING AND INSURANCE
March 2024 - December 2024 (9 months)
Nürnberg, Germany
SOC Engineering: Participation in the setup and further development of SOC structures in regulated financial environments
SIEM Use Case Engineering: Development of detection use cases based on MITRE ATT&CK
Compliance-driven Monitoring: Derivation of regulatory requirements (DORA, KAIT/VAIT) into technical monitoring and logging concepts
Operational Enablement: Creation of playbooks and incident response processes for SOC operations teams
SIEM DORA
Enterprise Automotive
SIEM & Threat Detection Engineer
AUTOMOBILE
March 2024 - December 2024 (9 months)
Nürnberg, Germany
Enterprise SIEM Consulting: Support in the design and optimization of a SIEM architecture based on Microsoft Sentinel for an international automotive group
Threat Detection Engineering: Development and evaluation of detection use cases for enterprise IT and OT-related environments
SOC Process Design: Support in defining SOC processes, escalation paths, and operating models
Stakeholder Consulting: Technical coordination with security, IT, and compliance teams on the client side
SIEM Security Operations