Hi, I am Tobias.
I help secure your cyber-physical systems. You benefit from over 15 years of experience and genuine passion for the field. Delivered with efficiency, reliability, and excellence.
Consistent, high-quality delivery that earns your trust. That's the standard I hold myself to.
Reliability, data authenticity, and availability come first in your OT and embedded environments. Limited resources and legacy systems rule out the standard IT playbook. My service will give you an architecture built for IEC 62443 and CRA conformity and sized to your actual protection needs. 15 years across industry and research go into that architecture.
IEC 62443 · Embedded Systems · Risk Analyses · Supply Chain SecurityCryptography is the backbone of your security. I design public-key infrastructures and HSM-backed key management that hold up over the full lifetime of the system. That includes transitioning to post-quantum cryptography and establishing crypto-agility. Eight years of research in the field back this work.
PQC · PKI · HSM · KMS · Crypto-agilityYour production line stops, and every hour costs. That is the reality behind automotive cybersecurity, and the pace of transformation in the industry only raises the stakes. With seven years in automotive and customers guided to ISO/SAE 21434 conformity, you get support for your in-vehicle systems and the infrastructure around them.
ISO/SAE 21434 · UN R155 / R156 · CSMS · SDV · Autonomous DrivingYour product security is now a legal matter, and the deadlines are closer than most roadmaps assume. The Cyber Resilience Act requires proof across the full lifecycle, from design to end of support, and the penalties for falling short are real. You get the obligations sorted into what changes your process and what changes your architecture, plus documentation that survives an audit. The requirements are new. The engineering behind them is not, and knowing which is which keeps your effort proportionate.
CRA · Security by Design · Vulnerability Management · SBOMA rare mix of deep technical expertise and a way of working built around your needs.
B.Sc., M.Sc., and Dr.-Ing., all in cybersecurity, all from Ruhr University Bochum. When your problem has no established answer yet, you need someone who knows cybersecurity in all its breadth and depth. The stakes are high: the 2025 Jaguar Land Rover shutdown cost the UK economy an estimated £1.9 billion. My job is to make sure you are not the next case study.
Wherever possible, I work for a fixed price against a clearly defined deliverable, rather than an open-ended stream of billable hours. You can plan your budget with confidence and know exactly what you're paying for, with no risk of costs quietly running away.
Committing to a large security project is a leap of faith. That's why I offer a defined pilot: a scoped work package of one to three months, before any long-term engagement. You see the quality of my work first-hand and decide from there, with no obligation to continue.
No large consultancy behind me means no rigid playbooks and no overhead on your invoice. You work directly with the person doing the work. That independence extends to the tooling. Your data stays on a fully European stack, with no US big-tech dependencies (details).
Selected highlights from my professional experience. A full CV and list of references is available upon request.
Supporting the client in establishing their CSMS. I produce the required work products and help set up the underlying processes. I also specify and implement the supporting cybersecurity infrastructure, including key management and public key infrastructure.
Led a team of five engineers to achieve IEC 62443-4-2 compliance for the client. I directed the design of the OT security architecture for their power plants and supervised the implementation of the specified security controls.
Brought the client's product to cybersecurity series-production readiness. I supported the client in achieving ISO/SAE 21434 certification, specified and implemented the IT/OT cybersecurity architecture, and acted as the central point of coordination across the client's internal teams, suppliers, and customers, keeping everyone aligned.
Analyzed the practicality of novel post-quantum cryptographic algorithms on embedded platforms such as microcontrollers and FPGAs. I optimized the algorithms' resource use and developed side-channel protection measures.
Below are whitepapers drawn from my work in industry. Request one and it lands in your inbox. For academic publications, see my DBLP page.
Most companies pay enterprise prices for a key management system ten times larger than their products need. This paper shows how to size one to what you actually use, and what the post-quantum clock will cost you if you wait.
Facing a deadline, or starting a platform from a blank page?
Tell me where you are and you get an honest read on what it will take.