CORE ACTIVITIES:• In charge of the central penetration testing process for all companies of the UnionInvestment Group• Rollout of a central cross provider meta vulnerability management process in thefull-outsourcing IT landscape and the company itself including the necessarytool landscape – that is the practical execution of my master thesis topic• Monitor and control external providers in regards to IT security – Responsibilityfor two external providers• In-house consulting in matters of IT security – Responsibility for two depart-ments (domestic and abroad)• Security automation using Python, Splunk, Demisto• Detect and defend against attacks (Incident response)• In charge of IT security standards and best practice documents• Analyze and assess IT security risks• Interdisciplinary teamwork with IT architects, application managers, technicalinformation security managers, internal customers, providers and process ow-ners• Accreditation of new software, cloud products and providers relating to IT se-curity• Design of IT security measures and supporting the implementation in variousIT security projects• Broaden the scope of trainings offered to the employees in the role of TechnicalInformation Security Manager• Active participation in the implementation of an Information Security Manage-ment System into the IT security and IT risk management processes includingthe digitization of the highly collaborative penetration test management process• Management of up to 4 external employees and co-management of several wor-king students, interns and trainees

CORE ACTIVITIES:• Orchestration of several external penetration test service providers and manage-ment of an external employee to orchestrate the conduction of penetration tests• Technical assessment of vulnerability findings• Establishment of an application vulnerability scanning process• Optimization and automation of the penetration testing and vulnerability ma-nagement process• Writing the master thesis on the topic of vulnerability management• Creation of new IT security standards and best practice documents

CORE ACTIVITIES:• Orchestration of several external penetration test service providers and manage-ment of an external employee to orchestrate the conduction of penetration tests• Technical assessment of vulnerability findings• Establishment of an application vulnerability scanning process• Optimization and automation of the penetration testing and vulnerability ma-nagement process• Creation of new IT security standards and best practice documents

CORE ACTIVITIES:• Software development of a Dynamic Application Security Testing Frameworkfor the SAP specific context• Development of vulnerability test cases and exploit proof of concepts for SAPspecific vulnerabilities• Penetration testing on customers’ premises • Responsible for two working students