$ whoami
Security engineering
from Switzerland.
Hands-on experience on both sides: defensive as a security analyst and offensive in testing systems the way an attacker would.
// Experience
Expertise
Security Analysis blue
Monitoring and triage, incident analysis, threat intelligence, correlating indicators across sources.
Offensive Security red
Penetration testing, reconnaissance and attack surface analysis, vulnerability assessment – turning findings into fixes.
Security Engineering build
Hardening, identity & access (Keycloak/OIDC), TLS, secrets handling, audit trails.
OSINT intel
Collecting and correlating open-source data with provenance and source rating.
// Open Source
Projects
OOF – Open OSINT Framework
Self-hosted OSINT investigation platform: ~85 tools behind one web interface, a case graph with provenance, and a separate data server so the operator never holds case data. Guided installer included.
- ~85 tools
- Case graph
- Self-hosted
- AGPL-3.0
// Tooling
Stack
Offensive
- Burp Suite
- Nmap
- Metasploit
- Nessus
- Nuclei
- sqlmap
- Wireshark
- OWASP Top 10
Defensive
- Splunk / SPL
- Microsoft Defender XDR
- Microsoft Sentinel
- KQL
- Velociraptor
- MISP
- MITRE ATT&CK
// Contact
Let's talk about your security.
For penetration tests, security reviews or OSINT work, just send an email.