August 2018 – Present
Hamburg, Germany
DevSecOps Consultant
Leading finance- and insurance software development company (NDA)
- Development of strategies and concepts to integrate security into the development lifecycle and into operations (e.g. Kubernetes) including periodically assessments with Frameworks like OWASP SAMM or OWASP DSOMM
- Development of the ClusterScanner
- Conception and implementation of continuous security tests in the build pipeline
- Security review of complex IT Systems like OAuth2, multi factor authentication, webserver and Java applications
- Training of internal security experts
February 2017 – Present
Hamburg, Germany
DevSecOps Consultant
SIGNAL IDUNA Gruppe
- Development of concepts to integrate security into the development lifecycle
- Conception and implementation of continuous security tests in the build pipeline
- Security review of complex IT Systems like OAuth, multi factor authentication, webserver, OpenShift clusters and Java applications
- Training of internal security experts
March 2016 – May 2016
Kiel, Germany
Websecurity Consulant
Web Agency (NDA)
- Automation of static and dynamic security tests in the build pipeline
- Conduction of security trainings
January 2016 – June 2016
Kiel, Germany
DevSecOps Consultant
Startup (NDA)
Evaluation and implementation of DevOps strategies to enhance the security of webapplications
August 2014 – November 2014
Hamburg, Germany
Webdeveloper with security background
Iteratec GmbH
- Evaluation and implementation of dynamic security tests as a prototype for SecureCodeBox.io
June 2014 – June 2018
Kiel, Germany
Fullstack Developer
Lengalia
- Development and maintenance of a web vocabulary trainer in PHP and JavaScript
August 2012 – June 2013
Kiel, Germany
IT-Referent
AStA of the University of Applied Sciences Kiel
Voluntary development of a ‘Rückerstattungssoftware’ with PHP, MySQL and JavaScript
August 2009 – September 2013
Kiel, Germany
Webdevelopment and system administration (work student)
ennit interactive GmbH
- Development of hotel booking engines in PHP and JavaScript
- Administration of webservers like Apache or OpenStreetMap
February 2006 – June 2010
Kiel, Germany
Qualified IT specialist for system integration
TNG AG (now Ennit AG)
August 2020 – August 2021
Elmshorn, Germany
Lecturer for Security in IT-Security
Nordakademie
- Conception of the module IT-Security bachelor students
- Conduction of the course
April 2019 – present
Wedel, Germany
Lecturer for Security in Webapplications
University of Applied Sciences Wedel
- Conception of the module Security in Webapplications for master students
- Conduction of the course
October 2018 – present
Hamburg, Germany
Conduction of Docker Security Workshop
iteratec GmbH
- Conduction of one day docker security trainings
July 2018 – present
Nürnberg, Germany
Conduction of a DevSecOps Workshop
Leading tax software development company (NDA)
- Conduction of a two days DevSecOps and Agile Secure Development Lifecycle training for the head of security
September 2016 – January 2017
Kiel, Germany
Lecturer for IT-Infrastructure
Schleswig-Holstein Business Academy
- Conception of the module IT-Infrastructure for bachelor students
- Conduction of the course
- Conception and implementation of a virtual IT infrastructure with Virtualbox
June 2014 – September 2014
Kiel, Germany
Lecturer for Security in Webapplications
University of Applied Sciences Kiel
- Conception of a teaching concept and the module Security in Webapplications for bachelor students
- Conduction of the course
- Conception and implementation of a virtual IT infrastructure to learn how to conduct IT security audits
Contact
- web@pagel.pro
- 040 / 35774631
- Olewischtwiet 36a, 22177 Hamburg