• Developping Python scripts using the TenableOne REST-API, Delopment of a Python Script parsing TenableSC Scan Coverage using Tenable REST-API
• Onboarding of Network Scans and Tenable Agents into the existing process/connection of Agents to Tenable One

BlackBox Assessment of Internet reachable Assets, only IPAdresses provided.

• Identified and assessed cybersecurity risks related to operational technology (OT) and IT infrastructure.
• Delivered risk evaluation and mitigation recommendations aligned with industry standards.
• Collaborated with stakeholders to improve security posture and support regulatory compliance.. pplied threat modeling methodologies to uncover vulnerabilities in processes and systems.

Source Code Review of Java-based Webapplication developped with SpringBoot.

Source Code Review of the NextJS-based Webapplication.

Source Code Review of the Java based REST-API developped with SpringBoot.

Analysis of the current configuration fo the Azure/EntraID cloud environment using an administrative account.

External BlackBox Pentest of a Mendix based Webapplication.

Analysis of a Java JSF based Webapp with mutilple tenants.

• Whitebox and Blackbox Penetrationtests of Web- and Mobile-Applications from planning to reporting
• Source Code Review of Java/Springboot/PHP/DotNet/NodeJS based Web-Applications and REST-APIs
• Source Code Review and Penetrationtests of Kotlin/Java/Objective-C/ReactNative based Android and IOS Applications
• Supporting the SOC in Incident-Management, Red-Team Assesment of the network from perspective of a compromised employee VPN-account

BlackBox Pentest of an Android based 3DSecure MFA Bank-transaction mechanism, writing of custom Frida Scripts for Analysis.

• Source code Rview of the SpringBoot
• Testing for OWASP Web Top 10 Vulnerabilities, combined Whitebox/Blackbox Approach

• Onboarding of AWS Cloud Vulnerability Scanning of 160 VPCs using Tenable.IO,Analysis and Reporting of vulnerable Systems with Tenable.SC
• Managing the end-to-end vulnerability lifecycle from discovery to closure developing and implementing KPI and metric reporting related to VM, implementing processes, capabilities and techniques for vulnerability management and security testing.
• Development of Python Code parsing Nessus Scan Results 
• Maintenance of the Tenable.SC and Nessus Agent Vulnerability Scanning Infrastructure, Performing Vulnerability Scans with TenableIO and Qualys
• Serving as an escalation point on issues, dependencies and risks related to vulnerability scanning                                                                                                               
• Technical Integration of a Vulnerability Management Platform (Risksense) including communication with different Stakeholders for CMDB and BMC Remedy, Handover to operating teams

• Onboarding of AWS Cloud Vulnerability Scanning of 160 VPCs using Tenable.IO,Analysis and Reporting of vulnerable Systems with Tenable.SC, Managing the end-to-end vulnerability lifecycle from discovery to closure, developing and implementing KPI and metric reporting related to VM
• implementing processes, capabilities and techniques for vulnerability management and security testing
• Development of Python Code parsing Nessus Scan Results
• Maintenance of the Tenable.SC and Nessus Agent Vulnerability Scanning Infrastructure
• Performing Vulnerability Scans with TenableIO and Qualys Serving as an escalation point on issues, dependencies and risks related to vulnerability scanning Technical Integration of a Vulnerability Management Platform (Risksense) including communication with different Stakeholders for CMDB and BMC Remedy, Handover to operating teams

• Source code based analysis of secure Communications and data storage, logic attacks against client and server

• Performing Attacks as a VoLTE subscriber to analyze what the SIEM can monitor, CallerID spoofing, SIP Fuzzing
• SIM Card Sharing Attack
• Attacks on SIP Registration

• Reverse-Engineering of the local Database Encryption
• Extraction of Encryption-Keys during Runtime by using custom Frida-Scripts

• Analysis of Permissions
• ASReproat/Kerberos Attacks

• Source Code Review and Webapplication Pentest of a Corona Contact Tracing App
• Analysis of Nodejs based Javascript Backend Code
• Whitebox Pentest of the Mobile App?s REST API
• Whitebox Pentest of the Management Webapplication

• Analysis of the Kotlin and Swift Source Code

• Source Code Review of a NodeJS/GraphQL based (Video-) Collaboration Webapplikation
• Combined White-/Blackbox Approach with full Source Code also running in a Docker based Test Environment

• BlackBox Webapplikation and Infrastructure Pentest of an ATM Management System, including PHP Source Code Audit

• Blackbox Penetrationtesting of an IOS Application including REST-API and Webfrontend for a Consulting Company