Services

To prepare your applications and projects for the security demands of an increasingly interconnected world, I offer expert support in security engineering. With over 5 years of experience in both industry and research, I assist in designing secure architectures, implementing cryptographic primitives, and evaluating the security of existing systems through audits and penetration tests.

Consulting

Integrate a robust security architecture early in your project lifecycle to ensure operational security and efficiency. Early incorporation of security principles reduces long-term maintenance costs and increases flexibility for future adaptations.

Implementation

Secure implementation of cryptographic primitives is critical to maintaining the integrity of your application. I specialize in crafting efficient and secure implementations, including lightweight cryptography for constrained environments, ensuring your systems meet high security standards without compromising performance.

Auditing

Evaluate and enhance the security of your product through comprehensive audits and penetration tests. Using black-box and white-box methodologies, I assess your systems from an attacker’s perspective, perform code reviews, and analyze hosting environments to ensure compliance and resilience against threats.

Penetration Testing

Comprehensive penetration testing services including grey-box and black-box approaches. Grey-box testing simulates insider threats with partial system knowledge, while black-box testing mimics external attacks. These tests help identify vulnerabilities and assess the resilience of your applications and infrastructure.

Unix/Linux Hardening

Security hardening of Unix and Linux endpoints to reduce attack surfaces and improve system integrity. Includes configuration audits, patch management, access control reviews, and implementation of best practices for secure system operation.

Security Architecture Review

Evaluation of existing security architectures to ensure alignment with industry standards and best practices. Includes threat modeling, design analysis, and recommendations for improving the security posture of your systems.

Incident Response Planning

Development of tailored incident response plans to prepare your organization for potential security breaches. Includes identification of critical assets, response workflows, communication strategies, and post-incident analysis.