Sheet 03
CV
I build software to a plan: understandable for whoever develops it next, maintainable through years in production and fast for everyone who uses it. Since 2020 I have been building and running the support ecosystem of the Behnke Group. Alongside, I take on commissions with devgineers: software, development processes and product security.
Experience
-
10/2026 – present
Owner – software engineering, secure SDLC & CRA consulting
Alongside my employment I take on commissions with devgineers – as the single contact from the first question to handover.
- Custom software, modernisation and rebuilds in sprints with a working state after every sprint.
- Websites with hosting and maintenance, and setting up, hardening and maintaining Linux servers.
- Development processes and product security: secure SDLC, Scrum, CRA gap assessments and secure SDLC reviews.
-
10/2026 – present
Product and Development Security Coordinator (PDSC)
In addition to my role as a developer, I am responsible for product and development security: from the Cyber Resilience Act to secure development processes and evidence in CI/CD.
- Implementing the Cyber Resilience Act (Regulation (EU) 2024/2847) for the products: requirements and risk analysis, technical documentation and alignment with harmonised EU standards such as EN 18031.
- Vulnerability management: a central reporting point for vulnerabilities, confidential handling within the deadlines of CRA Art. 14 and GDPR Art. 33, published security advisories.
- Secure development processes: requirements, reviews, tests and approvals traceable from commit to release – as the basis for conformity assessment and updates throughout the support period.
- CI/CD with GitLab Ultimate: security scans for code, dependencies and secrets, software bills of materials (SBOM), tests and coverage as evidence in the pipeline.
- A secure supply chain down to production: signed, encrypted software releases as well as signed firmware and secure boot when devices are first programmed.
-
01/2026 – present
Business Informatics Specialist, Software Development
Developing and running the group's web platforms and internal tools – secure, documented and with AI-assisted tooling.
- Support ecosystem: the new support server (PHP 8.5, REST API, sign-in with TOTP and passkeys), the security reporting point, the status page and the wiki system for product documentation in three languages.
- Secure and documented code: strict typing, static analysis at the highest level (PHPStan max), automated tests in GitLab CI, security built into the framework rather than case by case, and documentation maintained alongside the code.
- AI in development: AI-assisted work with Claude Code and Codex, integrating LLM APIs and AI platforms – with review, tests and clear limits on what an agent may read and change.
- Internal tools and infrastructure: licence-secured APIs for firmware, manuals and changelogs, a shared CDN for all web projects and tools for production.
-
10/2025 – 12/2025
Business Informatics Specialist, Software Development
-
04/2025 – 09/2025
Working Student (Master of Science)
Development of new features and internal tools, extension of core systems.
-
10/2020 – 03/2025
Working Student (Bachelor of Science)
Modernisation of existing PHP and Java tools.
-
08/2020 – 10/2020
Temporary Assistant, Technology & Support
Education
-
04/2025 – 09/2025
Master of Science in Business Informatics
Discontinued after one semester.
Data Engineering · Artificial Intelligence · Computer Graphics · Project Management · IT Law
-
10/2021 – 03/2025
Bachelor of Science in Business Informatics
Bachelor's thesis “AI as an Innovator for Automating Process Modelling”: a comparison of eight LLMs for BPMN generation.
Programming · Algorithms · Software Engineering · Big Data · Strategic Management · Game Theory
-
10/2020 – 09/2021
Bachelor of Science in Computer Science
Transferred to Business Informatics.
-
09/2012 – 07/2020
Abitur (German university entrance qualification)
Advanced courses in Mathematics and English.
Skills
Every level is backed by projects.
Programming Languages
- Expert
- PHP, JavaScript, SQL, HTML5 & CSS
- Advanced
- Java, TypeScript, Bash
- Proficient
- Python
- Basics
- C/C++
Backend & Frameworks
- Expert
- Framework-Design (PSR-7/11/14/15/16), REST-API-Design & -Dokumentation, Software-Architektur, Legacy-Modernisierung & Migration
- Advanced
- Node.js & TypeScript-Ökosystem, JSON Schema & Validierung (opis, Zod), PDF-Erzeugung (mPDF, Dompdf)
- Proficient
- OAuth 2.0
- Basics
- Laravel, Symfony, Spring
Frontend & Mobile
- Advanced
- Vanilla JS (UI ohne Framework)
- Proficient
- React Native & Expo, React, Bootstrap
Databases
- Expert
- MySQL
- Advanced
- Schema-Migrationen
- Proficient
- SQLite
- Basics
- PostgreSQL
Cloud, Infrastructure & DevOps
- Expert
- Linux-Server (Ubuntu): Einrichtung, Härtung, Betrieb, Git & GitLab, Monitoring & Health-Checks, Release-Signierung & -Verschlüsselung, Cron-Jobs & Hintergrundprozesse
- Advanced
- GitLab CI/CD, Docker, AWS (S3, Polly, AWS SDK), Hosting & Serververwaltung (VPS, Plesk)
- Proficient
- Cloudflare Workers
- Basics
- SIP / Kamailio
Security & Compliance
- Expert
- Cyber Resilience Act (EU) 2024/2847, Coordinated Vulnerability Disclosure, Web-Security: CSRF, Sessions, parametrisiertes SQL, Security-Header
- Advanced
- Authentifizierung: JWT, TOTP, WebAuthn/Passkeys, Kryptografie in der Praxis (libsodium, Ed25519, Signaturen)
- Proficient
- EN 18031, Secure Boot (Produktion), DSGVO (Meldefristen, Privacy by Design)
Quality & Process
- Expert
- PHPStan (Level max), PSR-12 & php-cs-fixer, Technische Dokumentation
- Advanced
- Code Review (auch KI-gestützt), PHPUnit, Semantic Versioning & Release-Management
- Proficient
- Vitest & Jest, Agile / Scrum
Accessibility, i18n & SEO
- Expert
- Mehrsprachigkeit (DE/EN/FR und mehr)
- Advanced
- Barrierefreiheit (OpenDyslexic, Kontrast, Lesehilfen), SEO (JSON-LD, Meta, OG/Twitter)
AI & LLMs
- Expert
- KI-gestützte Entwicklung: Claude Code, Codex, KI-gestützte Workflows, Prompt Engineering
- Advanced
- LLM-Evaluation & Benchmarking, Model Context Protocol (MCP), KI-Agenten-Infrastruktur, Claude, GPT, Gemini, Ollama
Game Development
- Advanced
- Minecraft: Spigot & Forge
- Proficient
- libGDX & OpenGL, Entity Component System, Client/Server-Spielarchitektur
Hardware-near Development
- Proficient
- Board-Programmierung in der Produktion, Geräteerkennung im Netzwerk (mDNS)
Tools
- Expert
- VS Code
- Advanced
- Composer & npm
- Proficient
- IntelliJ IDEA, Gradle & Maven
Languages
- German
- Native
- English
- C1
- French
- B1
- Dutch
- A1