$ whoami

Security engineering
from Switzerland.

Hands-on experience on both sides: defensive as a security analyst and offensive in testing systems the way an attacker would.

CyberSec Swiss logo – Defensive & Offensive Security Engineering

// Experience

Expertise

Security Analysis blue

Monitoring and triage, incident analysis, threat intelligence, correlating indicators across sources.

Offensive Security red

Penetration testing, reconnaissance and attack surface analysis, vulnerability assessment – turning findings into fixes.

Security Engineering build

Hardening, identity & access (Keycloak/OIDC), TLS, secrets handling, audit trails.

OSINT intel

Collecting and correlating open-source data with provenance and source rating.

// Open Source

Projects

OOF – Open OSINT Framework

Self-hosted OSINT investigation platform: ~85 tools behind one web interface, a case graph with provenance, and a separate data server so the operator never holds case data. Guided installer included.

  • ~85 tools
  • Case graph
  • Self-hosted
  • AGPL-3.0
Repository →

// Tooling

Stack

Offensive

  • Burp Suite
  • Nmap
  • Metasploit
  • Nessus
  • Nuclei
  • sqlmap
  • Wireshark
  • OWASP Top 10

Defensive

  • Splunk / SPL
  • Microsoft Defender XDR
  • Microsoft Sentinel
  • KQL
  • Velociraptor
  • MISP
  • MITRE ATT&CK

// Contact

Let's talk about your security.

For penetration tests, security reviews or OSINT work, just send an email.