IT-Forensiker ISO/IEC 17024 (Dekra) & ISO 27001 Auditor | Microsoft Security Advisor

1/2026 – 3/2026

Retained as a specialized IT Forensics and Incident Response expert to investigate a complex corporate data breach and executive identity fraud attempt.

Conducted advanced forensic preservation of digital evidence and created legally admissible, court-ready documentation using cryptographic chain-of-custody standards.

Developed proactive defensive frameworks against synthetic media, including AI Penetration Testing and Deepfake Defense protocols to mitigate CEO-fraud vulnerabilities.

Outcome: Successfully identified the breach vector, secured data integrity, and hardened the client’s identity infrastructure against next-gen AI attack vectors.

IT-Sicherheitsberater

2/2025 – 8/2025

Architecture Advisory: Acted as the lead strategic advisor during a major global ERP migration to Microsoft Dynamics 365 Business Central, ensuring "Security & Compliance by Design."

Zero-Trust Strategy & Governance: Designed a comprehensive Zero-Trust framework and identity governance strategy, mapping complex corporate access structures into Microsoft Entra ID, Defender, and Purview.

Cross-Functional Process Mapping: Bridged the gap between procurement, IT infrastructure, and legal departments to translate strict global regulatory mandates (REACH, RoHS, CBAM) into automated ERP data models and tamper-proof logging processes.

Risk & Vendor Management: Advised C-level management on risk mitigation regarding data loss prevention (DLP) and structured secure tenant isolation rules for third-party supplier integrations.

Outcome: Successfully aligned the global cloud infrastructure with international compliance standards, securing all critical enterprise ERP touchpoints across five global subsidiaries without disrupting operational workflows.

Certified Information Security Manager

2/2024 – 12/2024

Strategic Advisory & GTM: Acted as the lead external consultant for a premier Swiss Managed Auditing & SOC provider, driving their enterprise security consulting architecture across the DACH region.

SIEM/SOAR Architecture Consulting: Advised enterprise clients on migrating to and optimizing Microsoft Sentinel, designing advanced detection rules, and automating incident response workflows (SOAR) to reduce Mean Time to Detect (MTTD).

Cross-Platform Security Integration: Formulated strategic Blue-Teaming concepts by aligning Microsoft Security stacks (Defender for Endpoint/Cloud, Entra ID) with the provider's centralized SOC monitoring infrastructure.

Compliance & Framework Mapping: Guided corporate security teams in structuring their SOC logging and retention policies to meet strict European regulatory mandates (such as NIS2, DORA, and Swiss DPA).

Outcome: Enabled the Swiss provider to successfully onboard four multi-national enterprise clients in Germany and Austria by delivering high-end, audit-ready Microsoft Sentinel architectures.

Cyber Security, Security Operations Center (SOC)