11/11/2026 updated
Premium member
100 % availableIndustrial Cybersecurity for Manufacturers, Connected Product Companies & Critical Infrastructure
Sofia, Bulgaria
Worldwide
Masters DegreeAbout me
As Managing Partner at Defendara, I lead client communication and coordinate our consultants’ projects in OT/ICS cybersecurity, IoT and embedded security, CRA, NIS2, IEC 62443, ISO 27001, vulnerability management, product security, workshops and training.
NIS 2Incident ResponseGap AnalysisISO/IEC 27001Cyber-physical SystemsVulnerability ManagementIEC 62443Iso/iecSafety Critical SystemsCyber Threat AnalysisTechnical AssuranceIT Security SolutionsIoT Security
Defendara is a European cybersecurity consultancy with senior specialists bringing 20+ years of experience in industrial cybersecurity and critical infrastructure projects across Europe. We support industrial companies, product manufacturers, system integrators, and infrastructure operators, connecting engineering, cybersecurity, and regulatory requirements.
Our team includes native German speakers, and we work with clients in both German and English.
Our expertise covers:
• OT/ICS cybersecurity: security assessments, gap analysis, risk assessment, security requirements, network segmentation, security architecture, and practical remediation planning for industrial environments.
• IoT and embedded security: cybersecurity requirements for connected products, device security, secure updates, threat modeling, and security throughout the product lifecycle.
• Cyber Resilience Act (CRA): product scope assessment, readiness reviews, gap analysis, cybersecurity risk assessment, technical documentation, vulnerability handling, and preparation for reporting obligations.
• IEC 62443: industrial automation and control system security, security programs, risk assessments, zones and conduits, and requirements for asset owners, service providers, and product manufacturers.
• NIS2 and information security: cybersecurity governance, risk management, policies, supplier security, incident management, and alignment with ISO/IEC 27001 and ISO/IEC 27005.
• Managed product security: ongoing support with vulnerability management, Software Bills of Materials (SBOMs), security advisories, coordinated vulnerability disclosure, and product security processes.
• Incident preparedness: incident response planning, reporting procedures, tabletop exercises, and coordination between technical, management, and compliance teams.
• Workshops and training: tailored sessions on OT/ICS cybersecurity, CRA, NIS2, IEC 62443, product security, and vulnerability management. We adapt the content to management, engineering, product development, and security teams. Formats include awareness training, practical workshops, scenario discussions, and incident response tabletop exercises.
Our consultants understand the constraints of industrial environments: long equipment lifecycles, legacy systems, limited maintenance windows, operational availability, and the relationship between cybersecurity and safety. We help clients translate security requirements into achievable actions that fit their products, systems, and operations.
We work as an external consultancy or alongside internal teams, providing specialist expertise for defined projects, workshops, training programs, and ongoing B2B engagements.
Experience
Professional experience10+ years
Freelancer since2006
Languages
EnglishFluent
exali Professional Liability badge
The exali Professional Liability badge is a trusted mark for freelancers and service providers. It confirms that the freelancer carries professional liability insurance meeting exali's high standards — a symbol of reliability and professionalism.
Valid until: 02/01/2029