Senior Security Specialist
Zurich University of Applied Science
Keywords
Skills
Python
Django, Celery
Go, Java, C#
Git
PostgreSQL
AWS, Azure
Ansible, Terraform
SonarQube, Snyk
Application Security
Penetration Testing
DevOps
Django, Celery
Go, Java, C#
Git
PostgreSQL
AWS, Azure
Ansible, Terraform
SonarQube, Snyk
Application Security
Penetration Testing
DevOps
Project history
01/2019
-
12/2021
- Technical project management for a project on automated security testing as part of a joint venture with Scanmeter.io
- Development of an engine for automated detection of access control vulnerabilities in web applications (implemented in Python)
- Development of an engine for asset discovery (implemented in Java)
- Led the internal security team responsible for performing penetration tests and security reviews of application infrastructure
- Performed source code analysis with SonarQube (.NET)
- Implemented DevSecOps components (container scanning, dependency scanning)
09/2018
-
12/2018
Application Security Consultant
SEC Consult AG
- Performed code audits (Python, Java, C#)
- Held secure coding workshops with a focus on web security
- Advised a startup in the hybrid cloud space on secure architecture
03/2016
-
08/2018
IT Security Consultant
Warth & Klein Grant Thornton AG
- Developed a security audit reporting tool (implemented in Python and Django)
- Performed network penetration tests of Windows and Linux environments (black box, white box, assumed breach)
- Performed penetration tests of web applications following OWASP methodology
- Advised clients on AWS security
04/2012
-
02/2016
Freelancer
Holtzbrinck Publishing Group
- Developed web application components (Python, Django, Angular)
- Administered Linux systems
- Supported analysis of economic data for weekly research publications
- Covered technology topics for online and print media
Local Availability
Available worldwide
