About
My interest in security started in high school, alongside programming, networking and ethical hacking. It ended up as my Matura thesis on post-quantum cryptography — what happens to today's encrypted data once quantum-era attacks are practical — and then as a job.
Two years in Swisscom's Security Operation Center have taken me from handling alerts to writing the detections that raise them. I now build custom detections and test them end to end, work complex internal incidents, and automate the parts of the loop that should never have been manual, including AI-powered workflows in Python.
The homelab is the other half of that. Everything I run at home — Proxmox, Keycloak, reverse proxies, DNS, Terraform, Ansible — exists so that a detection or a playbook can be proven somewhere real before it is trusted anywhere else.
Outside of work, you will find me learning languages, building side projects, working on the homelab, playing video games, or reading fantasy or sci-fi novels and manga.
- In the SOC
- 2+ yrs
- Certifications
- Security+ · BTL1
Security tooling
- Splunk
- Cortex XSOAR
- Cortex XDR
- MS Defender / ATP
- MISP
- Velociraptor
- Crowdstrike
- Mandiant
- Cisco Stealthwatch
- Vectra
- Exeon
- CyberArk
- Symantec DLP
- Thinkst Canary
- ServiceNow
- Jira
Engineering
- Python
- TypeScript
- JavaScript
- Rust
- Docker
- Proxmox
- Terraform
- Ansible
- GitLab
- Keycloak
- Nginx
- Wazuh
- NetBird
- N8N
- Kestra
- Ollama