System Engineer, System Vertrieb Alexander

Elastic SOC team — internal tooling, security rules, and customer consulting.

• Develop internal tooling for the Elastic SOC team

• Develop and maintain security detection rules

• Consult with customers on their Elastic SOC deployments

Associate Engineer Cyber Analytics & Defense, fernao magellan

Engineer developing a new platform operation service

• Maintain and develop the platform operation service (Kubernetes, GitHub Workflows)

• Developed automated checks against Elastic environments

• Wrote SPL searches and custom search commands (Python)

• Administered customers' Elastic Cloud deployments with Terraform

Working Student, Guardsquare

• Prototyped a dependency-detection feature for iOS AppSweep (Python, C++)

• Detected statically linked libraries in compiled iOS apps and traced each symbol to its origin

• Automated building a library repository and extracting the required metadata

Working Student, Controlware

• DevOps for the SOC team's TheHive infrastructure

• Built an incident importer for EDR platforms MS Defender, SentinelOne, and Cortex XDR

• Built AutoSOC, auto-resolving trivial MS Defender incidents, and MailTextGenerator for templated incident emails

• Introduced a fault-resilience decorator adopted across the team's Python tools

Research Assistant, Fraunhofer AISEC

• Contributed to an LLVM-based memory safety tool (C++, Python)

• Developed proofs of concept for anti-Control-Flow-Integrity exploitation techniques

Student Tutor, Chair of IT Security, TUM

• Taught weekly tutorials accompanying the IT Security lecture

• Presented and taught the fundamentals of IT security to classes of 5–25 students

Technical University of Munich, Master of Science in Informatics

Focus on security and computer architecture.

• Thesis: Congestion Control for Application Flows on Shared QUIC Connections Explored methods for lower-latency real-time communication, adding a stream prioritization mechanism

Technical University of Munich, Bachelor of Science in Informatics

Minor in Mathematics.

• Thesis: Forkever A GDB-like debugger and memory, allowing for creating checkpoints. Used by students of the binary exploitation course

Multimedia University, Cyberjaya, Exchange Semester -- Malaysia

CJD Königswinter, Abitur

Risotto: A Dynamic Binary Translator for Weak Memory Model Architectures

Guided research: Improved emulation of the x86 cmpxchg instruction on ARM by introducing a new CAS instruction to QEMU's TCG that lowers to the appropriate ARM instruction.

10.1145/3567955.3567962 (ACM ASPLOS 2023)