Cybersecurity professional with hands-on experience in security research, offensive security, network and protocol analysis, and the assessment of connected and industrial systems.
I enjoy understanding how systems work beneath the surface, identifying where security assumptions can fail, and documenting findings in a way that is useful to both technical and non-technical teams.
- Security testing and vulnerability assessment
- Network traffic and protocol analysis
- Active Directory and Windows Security
- Web application security
- OT/ICS and connected-device security
- Python-based analysis and security automation
- Technical research and security documentation
I currently work in cybersecurity research involving smart-grid technologies and connected energy devices.
My work includes analyzing device communication, authentication mechanisms, firmware and update processes, web interfaces, and proprietary or standardized protocols. This experience has strengthened my ability to investigate unfamiliar systems, design practical security tests, analyze network behavior, and communicate technical findings clearly.
- B.Sc. in Computer Science from THU (Technische Hochschule Ulm)
- Professional experience in cybersecurity research, offensive security, network analysis, and connected systems.
- Academic focus on information security, penetration testing, digital forensics, and information security management.
- Background in journalism and investigative media work, strengthening my approach to research, source verification, evidence analysis, and clear technical communication
A documented Active Directory security assessment covering discovery, credential access, lateral movement, domain compromise, Golden Ticket abuse, AD CS misconfigurations, Kerberos delegation, and Sliver C2.
The project connects exploitation evidence with attack-path reasoning, security impact, detection opportunities, and mitigation.
Structured web application security assessments covering OAuth authorization flows, HTTP Host header trust, password-reset poisoning, and file-upload validation.
The reports focus on testing methodology, vulnerable behaviour, evidence, root cause, impact, and remediation.
Selected penetration-testing and digital-forensics write-ups covering web authorization weaknesses, packet analysis, credential exposure, Linux privilege escalation, file carving, and archive recovery.
A Python command-line tool that checks cybersecurity Markdown repositories for publication risks and documentation-quality problems.
It detects exposed authentication material, lab flags, sensitive file types, broken relative links, unclear evidence descriptions, oversized command output, missing scope documentation, and contradictory validation statements. The project includes configurable rules, structured output, automated tests, and GitHub Actions CI.