Managing Partner

• Oct 2021 - Present

Head of Security Delivery

• Jul 2018 - Oct 2021

- Part of Group Security’s Management Team at Swisscom- Led a team of Security Consultants and Security Engineers (20 direct reports)- The Security Delivery Team supports teams within Swisscom and its subsidiaries with the following services: > Security Consulting > Security Engineering > Security Business Support > Security Training/Coaching > Security Assessments (Threat Modelings, Penetration Tests) > Risk Management- Responsibility for different Security Initiatives at Swisscom > DevSecOps > Security Automation > Security Service Desk

Senior Security Consultant / Senior Security Engineer

• Sep 2016 - Jun 2018

- Designed and introduced DevSecOps at Swisscom: > Supporting and coaching other team members about DevSecOps > Managing company-wide Security Guild (100+ people) > Organisation of events (CTFs / Workshops) with up to 80 participants > Security Training > Security Automation Services (e.g., SAST, DAST, ...) > Secure CI/CD pipelines- Responsibility for Mobile Security & Blockchain Security- Security Consulting & Security Engineering- Support and execution of Security Audits (Penetration Tests, Threat Models)- Core Know-how in: > Secure Software Development, Application Security, Penetration Testing, Mobile Security, Network Security, Blockchain, Cryptography

Senior Software Engineer

• Sep 2013 - Aug 2016

- Security Team at Swisscom Innovations- Responsibilities > Backend Development (C, C++, Python/Django) > Mobile Application Development (Android, iOS) > Desktop Application Development (Mac, Windows) > Blockchain Technologies & Development > Secure Architecture/Design > Linux System Administration / Hardening > Vulnerability Management

Software Engineer

• Sep 2010 - Aug 2013

- R&D, Security- Lead developer of the Secure Smartphone solution > Android development (low and high level) > Android hardening (low and high level) > Porting the Android Open Source Project (AOSP) to different devices > C development > Security implementations - R&D, Security- Lead developer of the Secure Smartphone solution > Android development (low and high level) > Android hardening (low and high level) > Porting the Android Open Source Project (AOSP) to different devices > C development > Security implementations

Software Engineer

• Sep 2008 - Apr 2010

- Java development- JavaEE development- MSSQL Server - Java development- JavaEE development- MSSQL Server

Administrative Employee

• Aug 2004 - Oct 2006

Apprentice

• Aug 2001 - Aug 2004