Hire the Best vCita Specialists
in Germany

Hey, I'm Daniel! I'm an IT specialist from Germany with 10+ years experience working with Virtualization, Windows Server Infrastructure and Virtual Apps & Desktops. I love doing my job and I'm sure that we can find a satisfactory solution for you. :)

Security & compliance lead for SaaS and fintech. SOC 2, ISO 27001, pentesting, and fractional vCISO — so security closes enterprise deals instead of blocking them. I'm an Information Security Lead with 10+ years securing SaaS end-to-end. By day I run AppSec and cloud security at a global B2B SaaS unicorn. On Upwork, I bring that same rigor to founders, CTOs, and security leads who need to get audit-ready — fast. OSCP · CCNSE · CDP | Top Rated | 100% JSS | 25+ five-star reviews | 100+ apps pentested What I deliver: → SOC 2 & ISO 27001 audit readiness (4–8 weeks): gap analysis, 15+ policies, risk assessment, evidence collection, vendor reviews, auditor handoff. Vanta, Drata, Sprinto, Secureframe, Thoropass. → Pentesting (1–2 weeks): OWASP-aligned web, mobile, API. Developer-friendly report with repro steps, CVSS, business impact, and remediation. Attestation letter + free retest included. → Fractional vCISO (retainer): security questionnaires, vendor reviews, board reporting, AWS/Azure/GCP posture, IR readiness, continuous compliance. Best fit if you're: prepping your first SOC 2 or ISO 27001 audit, losing enterprise deals on security questionnaires, stuck inside Vanta/Drata without knowing what to upload, or scaling on AWS and need a security baseline — without paying $250k for a full-time CISO. Frameworks: SOC 2, ISO 27001:2022, NIST CSF, NIST 800-53, PCI DSS, GDPR, HIPAA, OWASP ASVS/MASVS, CIS Benchmarks. Stack: Burp Suite Pro, Nuclei, AWS Security Hub/GuardDuty, Terraform, GitHub Actions, Snyk, SAST/DAST/SCA, Python. Next step: send your scope or just describe where you're stuck. Within 24 hours you'll get a fixed-price quote, SOW, and timeline. If I'm not the right fit, I'll tell you who is.

As a Technical Security Leader with a decade of experience, I specialize in securing high-scale enterprise environments and cloud-native architectures. Currently serving as Tech Lead Security for a multi-billion euro firm and Founder of an international consultancy, I bridge the gap between risk strategy and infrastructure hardening. Core Consulting Pillars: -Technical Assessments: - Rigorous audits of your cloud environment; GCP and Azure along with domain and business reputation audits - Infrastructure Hardening: From Server and network hardenings to Identifying architectural flaws in CI/CD pipelines to ensure "Secure by Design" development. -Fractional Leadership: Aligning security with business objectives and maturing internal SOC operations. -Threat Management: Pentesting WebApps to mitigate risks with secure software engineering culture as long mitigation I offer Overnight Technical Assessments for US, EU and Middle East firms, securing your infrastructure while your team is offline.