Penetrationtester / IT Security Expert

I’m a freelance penetration tester with 15+ years of experience in offensive security – specializing in web application testing, secure code review, infrastructure pentests, and exploit development.

My work combines hands-on attack techniques with code-level insight and a solid understanding of enterprise environments. I hold both the OSCP (Offensive Security Certified Professional) and the OSWE (Offensive Security Web Expert) certifications, reflecting my ability to work across the entire spectrum of offensive security – from initial access to advanced exploitation.

I’ve also worked several years in Vulnerability Management roles at major banks and insurance companies, which gives me a practical sense of how security findings are processed, prioritized, and remediated in highly regulated environments.

My service focus:

• Advanced web app & API pentests (SSRF, Prototype Pollution, SSTI, etc.)

• Secure code review with exploit-guided validation

• SQLi to RCE chains (e.g. via PostgreSQL UDFs)

• Infrastructure pentests (internal/external, Windows/Linux networks)

• SAP Pentest

• Mobile app security testing (Android/iOS)

• VoIP security assessments (e.g. SIP fuzzing, PBX testing)

• Support for DORA, ISO 27001, and BSI IT-Grundschutz (technical implementation level)

I’m currently available for selected freelance projects – especially where deep technical testing, secure architecture understanding, and regulatory awareness are required.

Feel free to connect or reach out if you're looking for senior-level support in offensive security.