Freelance Security Engineer — Post-Quantum & Applied Cryptography
- Verfügbarkeit einsehen
- 0 Referenzen
- 90€/Stunde
- 41460 Neuss
- Europa
- pt | en
- 15.09.2026
Kurzvorstellung
Geschäftsdaten
Qualifikationen
Projekt‐ & Berufserfahrung
2/2026 – offen
Tätigkeitsbeschreibung
Security reviews of DEX and DeFi protocols before trading capital is exposed: 30+ protocol onboarding evaluations covering smart-contract review, security analysis and risk scoring for trading desks.
Weekly on-call incident handler, triaging and closing roughly 200 security incidents per month using SOAR and detection tooling.
Evaluated and integrated on-chain monitoring, anomaly-detection and smart-contract auditing tooling; hardened smart-contract and node deployments together with trading and engineering teams; set the security policy for internal AI tooling.
Technologies: threat detection, incident response, SOAR, on-chain monitoring, smart-contract auditing, DeFi security, application security, Python.
IT Sicherheit (allg.), Kryptographie, Incident-Management
8/2025 – 12/2025
Tätigkeitsbeschreibung
Implemented hybrid classical-quantum cryptographic protocols combining quantum random number generator (QRNG) entropy with NIST post-quantum algorithms (ML-KEM, ML-DSA).
Validated entropy quality against NIST SP 800-22 and SP 800-90B using TestU01 and Dieharder, and built an HMAC-DRBG profiler aligned with NIST SP 800-90A for cryptographic key generation.
Remote contract engagement.
Technologies: Python, NIST SP 800-22 / 800-90A / 800-90B validation, TestU01, Dieharder, QRNG, ML-KEM, ML-DSA, Git.
IT Sicherheit (allg.), Kryptographie, Python
9/2024 – 7/2025
Tätigkeitsbeschreibung
Implemented a hybrid classical/post-quantum key exchange for the Neuropil protocol framework in C using liboqs, integrating ML-KEM (FIPS 203) and ML-DSA (FIPS 204) while preserving backward compatibility with existing X25519/Ed25519 nodes.
Benchmarked classical against hybrid builds on multi-node test clusters: quantified join-handshake overhead, isolated lattice-operation cost to under 1 ms and confirmed steady-state throughput was unaffected.
Verified byte-level conformance with FIPS 203/204 against the published test vectors and delivered the C implementation together with validation reports. The code is merged and running in pi-lar's production product.
Technologies: C, liboqs, ML-KEM, ML-DSA, hybrid protocol integration, performance benchmarking, Git.
C (Programmiersprache), Kryptographie
Ausbildung
University of Coimbra
Coimbra
University of Coimbra
Coimbra
Über mich
Post-quantum migration and implementation
Cryptographic inventory and crypto bill of materials (CBOM), dependency mapping, and a migration plan against the EU 2026 inventory deadline and BSI's 2030 target for critical infrastructure. Hybrid protocol design, implementation and review: ML-KEM (FIPS 203) and ML-DSA (FIPS 204), TLS 1.3 hybrid key exchange, constant-time review and conformance testing against the published test vectors. For the Neuropil protocol framework at pi-lar GmbH I implemented hybrid classical/post-quantum key exchange while preserving backward compatibility with classical nodes, benchmarked it on multi-node clusters and verified byte-level FIPS conformance. That code is merged and running in production.
Applied cryptography and security engineering
Key and certificate lifecycle, PKI, entropy and RNG validation against the NIST SP 800-90 series, and review of security-critical source code.
Smart contract and DeFi security
At a proprietary trading firm I review DEX and DeFi protocols before trading capital is exposed — over 30 protocol evaluations covering source-code review, attack-surface analysis and risk scoring. I also handle security incidents week to week using SOAR and detection tooling.
AI agent security and governance
Tamper-evident audit trails, policy-as-code enforcement and multi-party approval, with controls mapped to the EU AI Act, DORA, ISO 42001 and SOC 2. I wrote the tamper-evident logging guidance in the OWASP AI Exchange and maintain Asqav, an open-source signed audit-trail layer for AI agents.
Most useful to banks, insurers, trading firms, telecoms and crypto companies. Many consultants can write the migration roadmap; I can also implement and review the cryptography it finds.
MSc Cybersecurity, University of Coimbra. Working languages: English and Portuguese.
Weitere Kenntnisse
Persönliche Daten
- Englisch (Fließend)
- Portugiesisch (Muttersprache)
- Europäische Union
Kontaktdaten
Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.
Jetzt Mitglied werden
