I hold a Bachelor's degree in Computer Science and Digital Communications from Hochschule Campus Wien.
Before transitioning into tech, I spent 12 years in hospitality, including building and managing a cocktail bar for my employer. There I developed strong communication and leadership skills, which I now use daily when explaining security findings to customers. During the final months of my studies, I worked in IT Business Service Support for critical infrastructure, where I gained my first hands-on experience with ticket systems and structured IT processes.
Since January 2026, I have been working as a Security Analyst in a SOC at an MSSP. I handle every alert independently and end to end, from triage and investigation to recommendations sent directly to customers. For each one, I assess what it could mean for the customer, and I keep my investigation notes short and clear so the recipient immediately understands the problem and what to do next.
I enjoy the blue team side of security and want to complement my technical foundation with the preventive side: information security governance and risk management, in particular ISO 27001 and NIS2. I'm especially interested in where operations and governance meet: risk assessment, incident response and business continuity. I believe good security is as much about clear processes and communication as it is about technology.
Information Security & Governance
ISO/IEC 27001 and NIS2 (Austrian NISG 2026): currently in self-study
IT process and quality management: part of my university curriculum
Defensive Security & Monitoring
SIEM and EDR/XDR: working with both daily in my current SOC role, including alert triage and investigation documentation
Splunk: built a security dashboard at a customer's request; Splunk Certified Cybersecurity Defense Analyst
ELK Stack: set up Logstash for log normalization and visualized metrics in a Kibana dashboard
Offensive Security
Metasploit: compared manual and automated exploitation of Heartbleed and EternalBlue in my bachelor's thesis
Penetration testing: worked through parts of the Hack The Box CPTS path alongside my studies to better understand attacker techniques
Networking & Infrastructure
WireGuard, OPNsense, pfSense: configured for homelab projects and university labs
Proxmox: used as hypervisor for my homelab and university projects
Networking services (BIND, Postfix, Apache): configured and deployed during university labs
Operating Systems
Windows: regular log analysis in my current SOC role
Linux/Unix: used in university labs and my homelab
Scripting & Development
Python and Bash: scripting and automation, including a CLI backup script for archiving files
During my studies: Java (JEE), JavaScript (React, Node.js, MongoDB) and Solidity in several group and individual projects
AI tools: used regularly for research, learning, summarizing and coding