We predict and protect.

A bank needed to meet DORA requirements and gain real-time visibility into security events.

Designed and deployed a SIEM platform (Elastic Security + XDR), built detection use cases and SOC processes, and delivered encryption, key management, hardening, Active Directory and endpoint security as part of a DORA gap analysis.

A regulator-ready, observable security platform with documented SOC processes.

A federal disaster-response programme needed an automated, secure delivery platform on-premises.

Built a CI/CD pipeline (GitLab CI) with GitOps (ArgoCD), Kubernetes deployments via Helm, cluster provisioning with Ansible (RBAC, volumes, operators) and container hardening.

Reproducible, hardened deployments and a self-service delivery workflow.

A global pharma group needed a secure data-integration blueprint across many sources.

Designed an IT architecture blueprint on Denodo, implemented custom policies, and led integration proofs of concept covering identity management, OAuth2/OIDC, Active Directory and RBAC under strict security requirements.

A governed, secure data-virtualization layer for the enterprise.

An industrial group needed to secure its Azure cloud usage and align processes to recognised frameworks.

Ran Azure cloud security audits, wrote cloud security policies and aligned information-security processes to BSI, ISO 27001 and NIST CSF, including an evaluation app and Azure reporting.

Clear cloud guardrails and a defensible, framework-aligned security posture.

An insurer needed to consolidate logs from on-prem, Kubernetes, OpenShift and AWS into one platform.

Integrated diverse log sources into a streaming-based platform (Elasticsearch, Logstash, Kibana, Kafka, NiFi) and realised SIEM use cases together with the SOC.

Unified visibility and actionable detection across hybrid infrastructure.

Business-critical integration platforms required ISO-27001-grade security governance.

Acted as project security manager using an ISO-27001-certified assessment process (PSA), supported audits and pentesting, joined the honeypot team and built the public 'Sicherheitstacho' threat map (React / WebGL).

Consistent, auditable security across critical platforms, plus a public threat-intelligence showcase.