What I do

Security & Compliance

ISMS design and implementation, Zero Trust & IAM, PKI and certificate management, secrets management, server hardening (CIS/BSI), GDPR, and healthcare IT security (TI/gematik).

DevSecOps & Infrastructure

Security-integrated CI/CD pipelines (SAST/DAST), Docker, Infrastructure as Code, Linux, nginx/Apache. Security that lives in the delivery process, not in a PDF.

Development

PHP (Laravel, Symfony), JavaScript (Vue.js, Node.js), relational database design, REST APIs. I’ve been the developer on the other side of the security review. It shows in how I write requirements.

Web & CMS

WordPress architecture and plugin development, technical SEO, e-commerce. This site runs on the same discipline I advise. Check the response headers.

Credentials

CISSP

Certified Information System Security Professional

CCSP

Certified Cloud Security Professional

CSSLP

Certified Secure Software Lifecycle Professional

CSG

quality and care. I love all your products.”

ISACA Germany Chapter (2022)

CCNA

Cisco Certified Network Associate

(2017)

B.Sc.

Electronics and Communication Engineering

Otto Damascus University (2012)