Available for projects: I take on commissions through devgineers alongside my job: software, development processes and product security. Discuss a project →

Sheet 03

CV

Moritz Schacke · Software Developer & Business Informatics Specialist

I build software to a plan: understandable for whoever develops it next, maintainable through years in production and fast for everyone who uses it. Since 2020 I have been building and running the support ecosystem of the Behnke Group. Alongside, I take on commissions with devgineers: software, development processes and product security.

CV as PDF ↓

Experience

  1. 10/2026 – present

    Owner – software engineering, secure SDLC & CRA consulting

    devgineers, Part-time self-employed

    Alongside my employment I take on commissions with devgineers – as the single contact from the first question to handover.

    • Custom software, modernisation and rebuilds in sprints with a working state after every sprint.
    • Websites with hosting and maintenance, and setting up, hardening and maintaining Linux servers.
    • Development processes and product security: secure SDLC, Scrum, CRA gap assessments and secure SDLC reviews.
  2. 10/2026 – present

    Product and Development Security Coordinator (PDSC)

    Telefonbau Behnke GmbH, Behnke Gruppe

    In addition to my role as a developer, I am responsible for product and development security: from the Cyber Resilience Act to secure development processes and evidence in CI/CD.

    • Implementing the Cyber Resilience Act (Regulation (EU) 2024/2847) for the products: requirements and risk analysis, technical documentation and alignment with harmonised EU standards such as EN 18031.
    • Vulnerability management: a central reporting point for vulnerabilities, confidential handling within the deadlines of CRA Art. 14 and GDPR Art. 33, published security advisories.
    • Secure development processes: requirements, reviews, tests and approvals traceable from commit to release – as the basis for conformity assessment and updates throughout the support period.
    • CI/CD with GitLab Ultimate: security scans for code, dependencies and secrets, software bills of materials (SBOM), tests and coverage as evidence in the pipeline.
    • A secure supply chain down to production: signed, encrypted software releases as well as signed firmware and secure boot when devices are first programmed.
  3. 01/2026 – present

    Business Informatics Specialist, Software Development

    Telefonbau Behnke GmbH, Behnke Gruppe

    Developing and running the group's web platforms and internal tools – secure, documented and with AI-assisted tooling.

    • Support ecosystem: the new support server (PHP 8.5, REST API, sign-in with TOTP and passkeys), the security reporting point, the status page and the wiki system for product documentation in three languages.
    • Secure and documented code: strict typing, static analysis at the highest level (PHPStan max), automated tests in GitLab CI, security built into the framework rather than case by case, and documentation maintained alongside the code.
    • AI in development: AI-assisted work with Claude Code and Codex, integrating LLM APIs and AI platforms – with review, tests and clear limits on what an agent may read and change.
    • Internal tools and infrastructure: licence-secured APIs for firmware, manuals and changelogs, a shared CDN for all web projects and tools for production.
  4. 10/2025 – 12/2025

    Business Informatics Specialist, Software Development

    Notrufzentrale Behnke GmbH, Behnke Gruppe

  5. 04/2025 – 09/2025

    Working Student (Master of Science)

    Telefonbau Behnke GmbH, Behnke Gruppe

    Development of new features and internal tools, extension of core systems.

  6. 10/2020 – 03/2025

    Working Student (Bachelor of Science)

    Telefonbau Behnke GmbH, Behnke Gruppe

    Modernisation of existing PHP and Java tools.

  7. 08/2020 – 10/2020

    Temporary Assistant, Technology & Support

    Telefonbau Behnke GmbH, Behnke Gruppe

Education

  1. 04/2025 – 09/2025

    Master of Science in Business Informatics

    IWi im DFKI, Universität des Saarlandes, Saarbrücken – not completed

    Discontinued after one semester.

    Data Engineering · Artificial Intelligence · Computer Graphics · Project Management · IT Law

  2. 10/2021 – 03/2025

    Bachelor of Science in Business Informatics

    IWi im DFKI, Universität des Saarlandes, Saarbrücken

    Bachelor's thesis “AI as an Innovator for Automating Process Modelling”: a comparison of eight LLMs for BPMN generation.

    Programming · Algorithms · Software Engineering · Big Data · Strategic Management · Game Theory

  3. 10/2020 – 09/2021

    Bachelor of Science in Computer Science

    SIC, Universität des Saarlandes, Saarbrücken – changed programme

    Transferred to Business Informatics.

  4. 09/2012 – 07/2020

    Abitur (German university entrance qualification)

    Theodor-Heuss-Gymnasium, Sulzbach (Saar)

    Advanced courses in Mathematics and English.

Skills

Every level is backed by projects.

Programming Languages

Expert
PHP, JavaScript, SQL, HTML5 & CSS
Advanced
Java, TypeScript, Bash
Proficient
Python
Basics
C/C++

Backend & Frameworks

Expert
Framework-Design (PSR-7/11/14/15/16), REST-API-Design & -Dokumentation, Software-Architektur, Legacy-Modernisierung & Migration
Advanced
Node.js & TypeScript-Ökosystem, JSON Schema & Validierung (opis, Zod), PDF-Erzeugung (mPDF, Dompdf)
Proficient
OAuth 2.0
Basics
Laravel, Symfony, Spring

Frontend & Mobile

Advanced
Vanilla JS (UI ohne Framework)
Proficient
React Native & Expo, React, Bootstrap

Databases

Expert
MySQL
Advanced
Schema-Migrationen
Proficient
SQLite
Basics
PostgreSQL

Cloud, Infrastructure & DevOps

Expert
Linux-Server (Ubuntu): Einrichtung, Härtung, Betrieb, Git & GitLab, Monitoring & Health-Checks, Release-Signierung & -Verschlüsselung, Cron-Jobs & Hintergrundprozesse
Advanced
GitLab CI/CD, Docker, AWS (S3, Polly, AWS SDK), Hosting & Serververwaltung (VPS, Plesk)
Proficient
Cloudflare Workers
Basics
SIP / Kamailio

Security & Compliance

Expert
Cyber Resilience Act (EU) 2024/2847, Coordinated Vulnerability Disclosure, Web-Security: CSRF, Sessions, parametrisiertes SQL, Security-Header
Advanced
Authentifizierung: JWT, TOTP, WebAuthn/Passkeys, Kryptografie in der Praxis (libsodium, Ed25519, Signaturen)
Proficient
EN 18031, Secure Boot (Produktion), DSGVO (Meldefristen, Privacy by Design)

Quality & Process

Expert
PHPStan (Level max), PSR-12 & php-cs-fixer, Technische Dokumentation
Advanced
Code Review (auch KI-gestützt), PHPUnit, Semantic Versioning & Release-Management
Proficient
Vitest & Jest, Agile / Scrum

Accessibility, i18n & SEO

Expert
Mehrsprachigkeit (DE/EN/FR und mehr)
Advanced
Barrierefreiheit (OpenDyslexic, Kontrast, Lesehilfen), SEO (JSON-LD, Meta, OG/Twitter)

AI & LLMs

Expert
KI-gestützte Entwicklung: Claude Code, Codex, KI-gestützte Workflows, Prompt Engineering
Advanced
LLM-Evaluation & Benchmarking, Model Context Protocol (MCP), KI-Agenten-Infrastruktur, Claude, GPT, Gemini, Ollama

Game Development

Advanced
Minecraft: Spigot & Forge
Proficient
libGDX & OpenGL, Entity Component System, Client/Server-Spielarchitektur

Hardware-near Development

Proficient
Board-Programmierung in der Produktion, Geräteerkennung im Netzwerk (mDNS)

Tools

Expert
VS Code
Advanced
Composer & npm
Proficient
IntelliJ IDEA, Gradle & Maven

Languages

German
Native
English
C1
French
B1
Dutch
A1