Senior Cybersecurity Engineer at SchutzOn
ERP security · Security automation · AI-assisted application security
SchutzOn · LinkedIn · ORCID · Credentials
I work at the intersection of ERP security, SOC operations, and secure software delivery. My focus is turning security and audit requirements into practical Python tooling, repeatable controls, and useful evidence.
- Senior Cybersecurity Engineer at SchutzOn, focused on multi-ERP security and compliance automation
- Built Python-based audit automation that reduced review time by 85% within its measured project scope
- Research interests: privileged access management, adaptive authentication, SIEM/PAM integration, and AI-assisted AppSec
- Open to research and open-source collaboration in ERP security, DevSecOps, and privacy tooling
| Project | What it demonstrates | Evidence |
|---|---|---|
| ERP Security Evidence Workbench | Deterministic analysis and correlation of synthetic, ERP-neutral security evidence with evidence-linked JSON, HTML, and SARIF reports. | v0.2.0rc1 (pre-release) · CI · CodeQL · MIT |
| Simple Vulnerability Scanner | Audit-oriented CycloneDX/SPDX analysis with OSV enrichment, OpenVEX reconciliation, baselines, policy gates, and JSON, HTML, and SARIF reports. | v0.3.0 · CI · CodeQL · Demo · MIT |
| Zero Trust Gateway | Loopback-only lab demonstrating strict JWT/JWKS validation, key rotation, rate limits, audit events, and tested failure paths. | v0.2.0 · CI · CodeQL · MIT |
| Metadata Scrubber | Local-first CLI for removing and verifying metadata in images, PDFs, Office files, video, and optional audio. | v0.2.0 · CI · Tests · MIT |
| DNS Lookup Tool | Raw UDP/TCP DNS queries with trace mode, EDNS support, and structured JSON output. | v0.3.5 · CI · Tests · MIT |
Additional security prototypes and research projects are available in my repositories. Prototype repositories are labelled with their current status and limitations.
- ERP security: SAP and Oracle security monitoring, access controls, audit evidence, and compliance automation
- Security engineering: Python, secure automation, vulnerability analysis, privacy tooling, and defensive controls
- SOC and DevSecOps: SIEM integration, threat detection, SBOM workflows, SAST, and security reporting
- Applied AI: LLM-assisted analysis with human review, explicit limitations, and secure-by-default integrations
- Authorized Exposure Assessment Case Study — Planned. A permission-first, lab-scoped case study correlating DNS, port, Nmap, and TLS evidence into a reproducible external-exposure assessment.
- Data Protection Case Study — Planned. An evidence-linked data-lifecycle case study connecting metadata sanitization, secret discovery, privacy checks, and removable-media monitoring without claiming to be a complete DLP or compliance platform.
These are independent portfolio research directions, not released capabilities or delivery commitments. Exposure testing will be limited to systems I own or am explicitly authorized to test; datasets will be synthetic or openly licensed.
- Comparative Analysis and Experimental Validation of a Continuous Adaptive Authentication Framework for Privileged Access Management — conference abstract, 2025
- Advanced MFA Approaches in PAM Products — book chapter, 2025
- The Role of SIEM and PAM Integration in Strengthening Cybersecurity — conference abstract, 2025
- IBM AI Developer Professional Certificate · Google Cybersecurity Professional Certificate · IBM Cybersecurity Analyst Professional Certificate — view Credly badges
- SAP Certified Technology Associate - SAP System Security
Maritime background, endurance swimmer, and Formula 1 telemetry enthusiast.
For professional or research collaboration, connect with me on LinkedIn.