Open to Cloud Security opportunities in Germany

Secure the cloud.
Enable the team.

Cloud security engineering with a bias toward useful guardrails, measurable detection, and infrastructure that developers can trust.

Explore selected work Get in touch
security_context.yml

profile: cloud_security_engineer

location: Germany / EU

default: secure_by_design

signal: ● systems_online

03security domains
∞learning mindset
Cloud security✦Detection engineering✦DevSecOps✦Identity architecture✦Cloud security✦Detection engineering

01 / What I focus on

Security that makes
momentum possible.

01

Cloud foundations

Designing landing zones, identity boundaries, logging, and policy guardrails that scale with the organization.

  • AWS / Azure
  • IAM
  • Policy as code
02

Detection & response

Turning cloud telemetry into useful signals, triage playbooks, and response workflows that reduce uncertainty.

  • SIEM
  • Threat detection
  • Incident response
03

Secure delivery

Embedding security checks into CI/CD so teams find issues early without slowing down delivery.

  • GitHub Actions
  • IaC scanning
  • Supply chain

02 / Selected work

Proof over promises.

Sample case studies for the portfolio. Replace these with your own labs, assessments, and measurable outcomes.

01

Cloud governance · AWS

Guardrails without friction

A reference landing zone that combines least-privilege access, centralized audit trails, and preventive controls with a clear developer path.

Discuss the approach
02

Detection engineering · CloudTrail

From noisy logs to signals

A detection pack for suspicious identity activity, with tested hypotheses, severity context, and response notes for an on-call team.

Discuss the approach
03

DevSecOps · GitHub Actions

Security in the pull request

A lightweight pipeline for secrets, dependencies, infrastructure, and container checks with actionable developer feedback.

Discuss the approach

03 / My approach

Clear thinking.
Practical outcomes.

Good security engineering is not a gate at the end of delivery. It is a set of well-designed decisions that help a team move with confidence.

I work from threat models and real operational constraints, then turn them into controls people can understand, automate, and improve. The goal is a safer system and a stronger engineering culture.

Start a conversation
  1. 01
    Understand the system

    Map assets, identities, data flows, and the risks that matter to the business.

  2. 02
    Reduce the blast radius

    Prefer small, composable controls over brittle security theatre.

  3. 03
    Make the secure path easy

    Build feedback loops and defaults that work with the team, not against it.

Have a meaningful security problem?

Let's make the cloud
safer to move fast in.

[email protected]