Heading the Product Security Team in Telefónica. Establishing a modern, agile and open-minded culture of security with the goal to advance and mature the security qualities of Telefónica’s products and services with strong focus on cloud development. Emphasizing on security culture and awareness as the main driver for change. Adapting to new development concepts instead of being the compliance blocker while evaluating and advising on adequate security concepts and controls.

Establishing the general principles and awareness for secure development principles across the organization as part of the BizDevOps program. Later being incorporated into general principles of Telefónica’s cloud program.

Founding Member and community member of the Threat Modeling Connect community which has the ambition to train and adapt the concept of Threat Modeling as an open community. Regularly contributing by articles and support to community members.

Founding member of the SAP Open Source Office (OSPO), acting as Security Officer in OSPO board. Strengthening Open Source incorporation in general development process (inbound process) as well as initiating and leading outbound contributions for Security (SAP Fosstars, Eclipse Steady) and articles for secure development concepts with and for Open Source.

Establishing and co-leading SAP’s global DevSecOps program for transforming the security governance framework and its development process for latest cloud development principles. Streamlining processes, security tooling and processes across SAP development organizations (S4HANA, SAP Concur, SAP Ariba, …). Revamping Software Threat Modeling methodology and processes for secure development with Open Source.

Heading the SAP Business Security Team responsible for SAP’s On-Premise ERP and associated products. Acting as central security advisor to German-speaking SAP user group (DSAG) and internal customers for secure configuration of the SAP Business Suite. Striving secure code practices and policies within SAP with a strong focus on Open Source Security. Prototyping Security concepts and methodologies (e.g. Threat Modeling) as well as building up security awareness within the organization.

Leading the secure development project for the SAP NetWeaver platform as part of the SAP Business Suite delivery 2010 and 2011 in a co-functional role of security architect and project lead.

Participating in strategic board project for establishing a Sustainability Suite for SAP in the role of a software architect and project lead. Outcome was SAP’s first Carbon-Footprint pilot later enhanced by SAP Carbon Footprint acquisition.

Developer for SAP NetWeaver Frontends and SAP Developer Studio (Eclipse-based), contributing plug-ins to Eclipse Foundation.