25.03.2026 aktualisiert

**** ******** ****
100 % verfügbar

Ethical Hacker, Senior Penetration Tester (zertifiziert)

Dachau, Deutschland
Nur Remote
Unternehmens- und IT-Sicherheit (B.Sc.)
Dachau, Deutschland
Nur Remote
Unternehmens- und IT-Sicherheit (B.Sc.)

Profilanlagen

CV_Michael_Niewöhner_EN.pdf
CV_Michael_Niewöhner_DE.pdf
Presentation_Niewoehner.pdf

Skills

AndroidPenetration TestingAnwendungssicherheitChemiePartnerschaftenCloud-SicherheitInformationssicherheitBeratungLinuxE-CommerceElektrizitätsversorgungsunternehmenEmbedded SystemsFinanzenEthical HackingFirmwareMedizinische VersorgungVersicherungenIphone AppsIt Service ManagementKali LinuxMaschinenbauOWASPEinzelhandelReverse EngineeringSicherheit von WebanwendungenSicherheitstestsSoftwareentwicklungSpeditionMitre Att&ckInternet Of ThingsRechnerarchitekturLogistikprozesse
Über mich
Mit der Hacker-Mentalität im Blut löse ich Probleme auf unkonventionelle Weise und und vermittle meine Kunden die Sicht aus den Augen eines Angreifers. Als Experte für Hardware-, Firmware- und Embedded-Hacking tauche ich tief in die Welt der Bits und Bytes ein, um Sicherheitsprobleme zu finden, die tief im Verborgenen schlummern.
Cyber Security im Team
Ich arbeite eng mit meinem langjährigen Kollegen Daniel Querzola zusammen. Gemeinsam haben wir in der Vergangenheit Offensive-Security-Abteilungen für Beratungsunternehmen aufgebaut, mit einem starken Fokus auf Qualität. Heute unterstützen wir weiterhin unsere Kunden mit tiefem technischen Fachwissen und unserer Erfahrung, um ihre Widerstandsfähigkeit in allen Aspekten der Cybersicherheit zu stärken.
Partnerschaften
Durch unsere umfangreiche berufliche Erfahrung haben wir ein breites Netzwerk von IT-Experten und Partnerunternehmen in verschiedenen Spezialgebieten etabliert, das es uns ermöglicht, ganzheitliche Unterstützung zu bieten und sicherzustellen, dass alle Bedürfnisse unserer Kunden effizient und umfassend erfüllt werden.
Services
  1. Penetration Testing
  2. Ethical Hacking
  3. Red Teaming
  4. Reverse Engineering (Software, Firmware, Hardware)
  5. Security-by-Design

Core Expertise
  1. Linux Exploitation
  2. Embedded / Hardware / IoT Hacking
  3. Reverse Engineering / Binary Exploitation
  4. In‑Depth Penetration Testing
  5. Corporate / Enterprise Network
  6. Perimeter
  7. Client Security
  8. Web & Mobile Applications
  9. Software & Firmware
Über 350 Erfolgreiche Penetration Test Projekte (2015 ‑ heute)
  1. Hohe Erfolgsquote
  2. Mindestens ein "high" Finding in 3/4 aller Applikationsprüfungen
  3. Rechteerhöhung zum Domänenadministrator in 90% aller full-scope Pentests
  4. Mindestens eine Sicherheitslücke "high" in 100% aller embedded Penetrationstests
  5. Branchen
  6. Finanzsektor
  7. Maschinenbau
  8. Pharmaindustrie
  9. Energieversorger
  10. Chemie
  11. IT Service Provider
  12. Produzierendes Gewerbe
  13. E‑Commerce
  14. Logistik/Spedition
  15. Gesundheitswesen
  16. Öffentlicher Sektor
  17. Versicherungen
  18. Softwareentwicklung
  19. Hotels
  20. Groß- und Einzelhandel
  21. und weitere

Berufs- und Vermögensschadenhaftpflicht-Versicherung
Hiscox IT FREELANCER
3 Mio. € Vermögensschäden
3 Mio. € Personen- und Sachschäden

Erfahrung

Berufserfahrungmehr als 10 Jahre
Freelancer seit2024

Sprachen

DeutschMutterspracheEnglischverhandlungssicher

Projekthistorie

Penetration Testing for Cyber Defense Center

International, highly diversified industrial corporation, HQ Germany

Industrie und Maschinenbau

  • Penetration testing / red teaming / offensive security for internal clients
  • Open source intelligence (OSINT)
  • Supporting tasks

Critical Infrastructure Pentests for Energy Supplier (annually)

Energy Supplier

Energie, Wasser und Umwelt

  • Audit preparation & planning
  • Deep‑dive corporate network penetration test to evaluate office and control room infrastructure technically
  • Municipal utilities themselves are energy suppliers and thus part of critical infrastructure (classified "KritIS" in Germany)
  • Conducting regular penetration tests and supporting the implementation of economically viable measures to significantly reduce the risk of successful attacks, as well as to meet the corresponding regulatory requirements.

Various Pentest Projects for Financial Institutions

various financial institutions

Banken und Finanzdienstleistungen

  • Initiation, planning, and execution of various pentest projects
  • Infrastructure Pentests: Perimeter, network transitions/segregation, Windows and Linux servers
  • Physical security of institutions or self‑service areas: access control systems, video surveillance, security of network access (especially in self‑service and reception areas)
  • Client security: Privilege escalation, AV evasion, lateral movement within internal networks
  • Applications: Testing of internal and external web applications following the complete OWASP WSTG
  • Awareness: social engineering and phishing attacks
  • Creation of detailed test reports with documentation of technical details and customer‑specific recommendations

Various Embedded/Hardware/IoT Penetration Tests

various
  • Analytical check of best practices in secure embedded engineering
  • Offensive verification of security measures covering all aspects including hardware, firmware, software, connected services / APIs, applications
  • Whitebox/Greybox/Blackbox approach
  • Reverse engineering on all levels (hardware, firmware, communication, ...)
  • Establishment of security‑by‑design strategy and processes
  • Selected projects:
    • Control and telemetry system for worldwide second largest elevator manufacturer
    • White‑label Smart Home gateway and devices for German Hardware store
    • Smart self‑checkout cash terminal for retail store
    • Smart continuous glucose monitoring device for big asian healthcar manufacturer (see eHealth certification)
    • Automotive control system for German car manufacturer
    • Access control and alarm systems for multiple companies
    • Electronic door lock for German bank
    • Siemens SPS in energy supplier environment
    • Car multimedia interface

Over 350 Successful Penetration Tests Conducted

various
Industries
Financial Sector, Mechanical Engineering, Pharmaceutical & Medical
Technology, Energy Suppliers, Chemicals, IT, Manufacturing, E‑Commerce,
Logistics/Shipping, Healthcare, Government Agencies, Insurance, Software
Development, Hotels, Wholesale and Retail, and more.

High Success Rate
  • Achieved domain administrator in over 90 % of all full‑scope internal penetration tests
  • Identified at least one vulnerability rated "high" in over 3/4 of all application pentests
  • At least one vulnerability rated "high" in 100 % of all embedded pentests

eHealth Certification and Pentest

Medical device manufacturer
  • Support for FDA certification for medical device manufacturer
  • Analysis of legal and regulatory requirements
  • FDA draft guidance and 510(k) submission scope
  • UL 2900 cybersecurity standard for medical devices
  • NIST 800 series for security, privacy, and risk management
  • ISO 62304 and 14971 via AAMI TIR‑57 for medical devices
  • Analysis of both development and residual risks
  • Review and penetration testing of software, interfaces, and hardware
  • Reverse engineering of hardware and firmware
  • Assisting the client in establishing a security‑by‑design strategy and applying for FDA certification

Information Security Management System (ISMS)

Public transportation sector

Öffentlicher Dienst

  • Definition of the specific scope of the ISMS
  • Confidentiality, integrity, and availability are the targeted core objectives
  • Existing policies and guidelines must be taken into account
  • The ISMS must be understandable by every employee, regardless of their training and role
  • Certification according to ISO/IEC 27001 passed without deviations
  • Successful integration of critical infrastructure (KritIS) into the scope

From Webshop to Domain Compromise

German mechanical engineering company

Industrie und Maschinenbau

  • Initial scope: Web application pentest based on OWASP WSTG
  • Identified remote code execution vulnerability, followed by local privilege escalation on webserver
  • Scope was extended to include lateral movement
  • Exploited vulnerability in database server outside DMZ to gain foothold in internal network
  • Abused weak Windows domain configuration to elevate privileges to domain administrator
  • Time from zero to hero: 48h

Cyber Security Maturity Assessment in Aviation Industry

Aviation company

Sonstiges

  • Initial Cyber Security maturity analysis based on the standards of the Center for Internet Security (CIS) and the National Institute of Standards and Technology (NIST)
  • Identification of necessary measures to mitigate existing issues
  • Development of a roadmap inclusive of management action plans/ recommendations and project packages to achieve the target maturity level
  • Regular reporting and presentation of the maturity level to executives, boards of directors, regulators, authorities, and works councils

Vulnerability Management

various
  • Cross‑industry operation of the Vulnerability Management Service
  • Deployment and application‑specific configuration of agents/scanners
  • Reporting of security vulnerabilities and security‑related configuration issues
  • Assisting the Blue Team in remedying vulnerabilities

Global Red‑Teaming Pharma

Pharma

Pharma und Medizintechnik

  • Evaluation of the existing globally connected infrastructure and identification of the attack potential from both external and possible internal attackers
  • Testing the responsiveness of the Security Operations Center (SoC)
  • Development of a comprehensive security strategy including a prioritized roadmap for addressing critical security vulnerabilities and enhancing cyber resilience
  • Preparation of a detailed final report
  • Lessons‑learned workshop with the Blue Team

Web Application Penetration Test

Large German sportswear manufacturer

Konsumgüter und Handel

  • Globally operated webshops for product distribution and employee portals for various business processes
  • Identification and assessment of critical security vulnerabilities and development of remediation measures
  • Testing based on the complete OWASP Web Security Testing Guide version 4
  • Detailed report for management and IT
  • Verification of resolved vulnerabilities as part of a retest
  • Creation of prioritized action plans consisting of organizational measures for management and technical measures for IT
  • Detection of deficiencies in development and establishment of measures for sustainable resolution

Forensics in the Automotive Industry

Automotive Industry

Automobil und Fahrzeugbau

  • Forensic analysis of a hacker attack with extortion attempt
  • Point of entry: corporate WiFi
  • Collaboration with law enforcement
  • Successful identification of the perpetrator based on technical investigations
  • Assisting the client in cleaning up and securing systems and networks

Forensics for IT Service Provider

IT Service Provider

Internet und Informationstechnologie

  • Forensic analysis of a hacker attack on a web server
  • Point of entry: remote code execution in web application
  • Abuse of the system for cryptomining
  • Investigation of post‑exploitation and lateral movement
  • Advising the customer on securing and future preventive measures

Zertifikate

Certified Penetration Testing Specialist (CPTS)

Hack The Box

2024

Offensive Security Web Expert (OSWE)

Offensive Security

2022

GIAC Mobile Device Security Analyst (GMOB)

GIAC Certifications

2022

Offensive Security Experienced Penetration Tester (OSEP)

Offensive Security

2022

Offensive Security Certified Professional (OSCP)

Offensive Security

2021

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden