About Me
I am currently pursuing a B.Sc. in Cyber Security at the University of Applied Sciences Mannheim, with a strong interest in cryptography, infrastructure, and offensive security.
After developing BASF’s internal platform for quantitative risk management from the ground up, I have now transitioned to penetration testing at ERNW in Heidelberg.
My current focus is on building a solid technical foundation through systematic training and real pentests.
Experience
ERNW - Penetration Tester
Sep 2025 - present, Heidelberg
- Developing own project in security hardening & hardening automation
- Focus on Web Security Academy, with the goal of becoming Burp Suite Certified Practitioner
- Regularly partaking in penetration tests, sometimes even as technical project-lead
BASF - Lead Architect, Cyber Security Risk Intelligence Platform
Jan 2023 - Aug 2025, Ludwigshafen
- Led the architecture and implementation of BASF’s internal quantitative cyber risk platform
- Designed modular metric systems, cost-benefit models, and ML-powered automation pipelines
- Initiated platform use as a potential testbed for post-quantum cryptographic evaluations (e.g. NIST PQC candidates)
- Delivered scalable internal tooling and infrastructure across global teams (China, Singapore, Spain, US)
- Drove secure software design decisions and supported engineers across cybersecurity and development units
ITK Engineering - Software Engineering working student
Jan 2022 - Dec 2022, Rülzheim
- Developed internal software as part of an international team
- Gathered experience with larger enterprise codebases, working in SCRUM and Secure Coding
Freelance - Developer & IT-Support
Jan 2019 - Dec 2021, Ludwigshafen
Built websites, small-scale software, maintained IT infrastructure
Examples:
Education
Cyber Security B.Sc.
2023 - present, Mannheim University of Applied Sciences
Mathematics B.Sc.
2022 - 2023, Karlsruhe Institute of Technology
Before that, i graduated my Abitur in Ludwigshafen with a GPA of 1.1 and four distinctions.
Focus & Highlights
Lots of what i do and learn i document here on this website.
I love cryptography, CTF challenges, i love to automate in a considered manner.
Let's go over some of my recent projects.
CERN Whitehat Challenge
Mar - Jun 2025
Certified participant in CERN’s real-world penetration test program.
- Selected for the CERN Whitehat Challenge, conducting security assessments under strict ethical guidelines
- Developed Cherry Picker, a reconnaissance tool leveraging entropy filtering, TTL clustering, and cloud targeting - the idea's still in it's infant shoes because i can't find the time to complete it
- Focused on web enumeration & OSINT
Forensic Log Tracker - Open-Source Tool
Modular logging framework for digital forensic casework.
- Developed a CLI tool for documenting and verifying forensic investigations
- Implements cryptographic GPG signing and hash verification
- Provides legally consistent documentation in German legal language
- Used in university-level forensic training at Hochschule Mannheim
- Supports Markdown reporting, dry-run documentation, and structured evidence tracking