23.09.2026 aktualisiert
100 % verfügbar
Cybersecurity Engineer | Product Security | CRA | TARA | Threat Modeling | Risk Analysis
Mannheim, Deutschland
Mannheim +50 km
PhD in Information Systems (Cybersecurity), Magna cum laudeÜber mich
Cybersecurity Engineer with a PhD in Information Systems, focused on threat modeling, risk analysis and Product Security. Experienced in security analysis of connected systems and TARA, with knowledge of CRA, ISO/SAE 21434 and IEC 62443.
Skills
Threat Modeling and Security Analysis
Background in structured threat analysis of networked and distributed systems, including identification of attack surfaces, threat scenarios, security risks, and potential mitigation approaches.
Threat Analysis and Risk Assessment (TARA)
Knowledge of TARA methodology and ISO/SAE 21434 principles. Applied these concepts in a self-developed Automotive TARA case study covering asset identification, attack paths, risk evaluation, security objectives, and mitigation strategies.
Security Risk Assessment
Background in analyzing security risks, attack scenarios, security implications, and trade-offs in complex networked and distributed systems.
Security Requirements and Mitigation
Knowledge of deriving security requirements and mitigation strategies from identified threats and risks, supported by security analysis work and a self-developed Automotive TARA case study.
Product Security and Security-by-Design
Knowledge of Product Security, Security-by-Design, and secure development concepts, with a current professional focus on cybersecurity for connected and cyber-physical products.
Cyber Resilience Act (CRA)
Knowledge of key Cyber Resilience Act requirements and their relevance to Product Security, secure development, vulnerability handling, and connected products.
ISO/SAE 21434
Knowledge of automotive cybersecurity and TARA concepts based on ISO/SAE 21434. Applied the TARA methodology in a self-developed practical automotive cybersecurity case study.
IEC 62443
Knowledge of IEC 62443 concepts for industrial and product cybersecurity, particularly IEC 62443-4-1 and IEC 62443-4-2.
ISO/IEC 27001
Knowledge of ISO/IEC 27001 concepts, including information security risk management, security controls, and ISMS principles.
Security Architecture Analysis
Knowledge of analyzing system and communication architectures from a cybersecurity perspective, including attack surfaces, trust relationships, security risks, and mitigation approaches.
Cryptography and Secure Communication
Research background in cryptographic mechanisms, secure key exchange, trust management, privacy-preserving mechanisms, and secure communication in dynamic and distributed environments.
Network Security
Academic, research, and teaching background in network security, communication protocols, distributed systems, and cybersecurity.
Connected and Cyber-Physical Systems
Background in security analysis of distributed and connected systems, with knowledge of security concepts relevant to embedded and cyber-physical environments.
Security Documentation and Communication
Strong background in documenting security analyses and technical findings and communicating cybersecurity concepts through research, teaching, and supervision.
Programming
Python and C++ in research, teaching, and academic contexts.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2026
Sprachen
DeutschgutEnglischverhandlungssicherPersischMuttersprache
Projekthistorie
Performed structured threat modeling and security assessments of networked systems, identifying attack surfaces, evaluating risks, and deriving mitigation strategies. Assessed cryptographic key exchange approaches for dynamic and opportunistic environments and documented security implications and trade-offs. Guided and coordinated student projects involving security analysis, supporting planning, execution, and technical evaluation.
Parental leave period.
Conducted attacker-oriented threat analysis of protocols with focus on privacy risks, trust models, and misuse scenarios. Analyzed system-level security implications of routing, tracking, and cooperation mechanisms in distributed environments. Applied security analysis principles to complex, distributed and safety-relevant systems with similarities to cyber-physical environments. Supported security-focused teaching and supervised student work emphasizing structured analysis and documentation quality.