Co-Founder of PS Positive Security GmbH, a Berlin-based IT security consultancy and research collective.Check https://positive.security for more information and contact me if you're looking for experts to assess your company's security and help improve it!

- Developed side project into SRLabs' first commerical SaaS product (https://autobahn.security) while building and leading a team of ~15 engineers to eventually take over- Lead and executed client and research projects end-to-end- Managed a team of security professionals and software developers (hiring, reviews, ensuring happiness)

Performed a wide range of technical assessments and blue team support for diverse and demanding clients in various industries. Few selected projects: - Red Team Assessments for critical infrastructure (e.g. energy providers) - IT Maturity Assessments (technical tests and interviews) for several large insurance companies - DSL, cable and FTTH access Red Teaming in several European countries for a global telco - Incident response for a South African enterprise - Payment terminal testing, payment protocol design and DRM hacking for an Indian telco - Continuous security testing for a successful fintech startup (Android/iOS/API pentest, AWS review) - Smart contract review and ICO website pentesting for multiple initial coin offeringsPublished research: - 2019: Hacking Smart Speakers - 2018: Introducing deep, global internet scans - 2017: Hacking IP Cameras (through firewalls) - 2016: Hacking travel booking systems - 2015: Hacking EC payment terminals and protocols

- Research on video codec and radio protocol fuzzing and support for client projects- Presented workshop "Advanced Fuzzing with AFL" at Chaos Communication Camp 2015

Teaching information security foundations, web security and embedded systems hacking to developer and security teams.

Bachelor's project co-op between Hasso Plattner Institute and DB Systel GmbH.Design and development of a cloud based stress testing environment for distributed database systems.

Part of the teaching team for the openHPI "Security on the Internet" MOOC course with >10k participants.Helped with content and community support, lectured on email encryption and developed web apps asking students to send/receive PGP encrypted mails for extra points.

Research on IPv6 security as part of the IPv6 Security Solutions Lab. Fuzzing of IP stacks and attacks on CGA (cryptographically generated addresses).