Mike Gubser

Since 2025, I have been bundling my expertise in cybersecurity in a dual role as an independent security researcher and strategic consultant. As the founder and Principal Security Consultant of AYSOLI CyberSecurity Gubser in Liechtenstein, I offer highly specialized, vendor-independent consulting and IT security audits. For demanding corporate clients, I conceptualize customized security roadmaps, conduct comprehensive audits and risk analyses, and lead multi-phase projects for the sustainable strengthening of the entire security architecture. In doing so, I simulate real enterprise-level attack scenarios as an active Bug Bounty Hunter and Ethical Hacker (ClawHak). Within the framework of responsible disclosure programs on platforms like HackerOne and BugCrowd, I regularly identify and report critical vulnerabilities in complex web applications and infrastructures. My technical focus is on advanced attack vectors such as API security flaws, business logic flaws, and authentication bypasses within the scope of the OWASP Top 10. For these efficient security reviews, I develop my own automation frameworks and tools. The in-depth understanding of modern attack techniques and zero-day exploits, which I also sharpen through participation in Capture-The-Flag competitions (CTF), flows directly into my strategic consulting. C-level executives thus benefit from highly precise, action-oriented reports and clear concepts for incident response management, combining technological depth with corporate risk management.

Since 2023, I have been working as the Information Security Officer (CISO / Information Security Officer) in public administration in Liechtenstein, holding comprehensive overall responsibility for the information security management of state digital services. In this central role, I proactively shape the cyber resilience of the administration. My strategic tasks include the conception and implementation of comprehensive security awareness programs for state employees, as well as the establishment and continuous development of security policies that strictly adhere to national and international standards. On an operational level, I conduct organization-wide risk analyses and security assessments. I directly apply my offensive expertise by leading internal penetration tests and continuous vulnerability scans. Furthermore, I am responsible for the entire incident response management and, in case of an emergency, control the crisis management protocols to ensure the integrity and availability of the state infrastructure at all times.

In my role as a Security Engineer Professional in public administration in Liechtenstein from 2019 to 2023, my technical focus was on the comprehensive protection of state infrastructure, network security, and system hardening of digital government services. During this time, I designed and managed the company-wide firewall infrastructure based on CheckPoint, Fortigate, and Sophos, and implemented dedicated mail security solutions such as FortiMail and SeppMail. To secure web traffic and application access, I operated highly developed proxy and web security systems, including Citrix Netscaler and Cisco IronPort. A significant part of my daily work involved systematically hardening critical Linux server environments, conducting continuous security reviews and proactive vulnerability management, as well as developing automated security monitoring procedures to detect and isolate threats early on.