Description

Timo Pagel ist seit über zwanzig Jahren in der IT-Branche unterwegs.

Nach einer Laufbahn als System-Administrator und Web-Entwickler berät er Kunden als DevSecOps Consultant und Trainer.

Dabei liegt der Fokus auf der Sicherheits-Test-Automation für Software und Infrastruktur und Bewertung von komplexen Anwendungen in der Cloud. Er hat mehrere Applikations-Sicherheits-Programme (AppSec Program) erstellt und betreut.

In seiner Freizeit unterrichtet er „Web- und Applikationssicherheit“ an verschiedenen Fachhochschulen.

Industry field of expertise

Languages

German
Native or bilingual
English
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

PagelShield GmbH
Security Strategist
July 2024 - Today (1 year and 11 months)
Hamburg, Germany

- Training developers and security experts in applicaiton security and cloud security
- Leveling up Application Security Programs of small to enterprise organizations
- Penetration Testing and IT Security Auditing of complex applications and cloud native infrastructure
- Conception and Integration of Application Security Testing
- Conduction of threat modeling
AXA Switzerland
Lead Security Architect
January 2023 - Today (3 years and 5 months)
Winterthur, ZH, Switzerland
Development of an application security program based on OWASP DevSecOps Maturity Model:
- Development of an Application Security Program
- Lead development of "OWASP Metric Analyzer and Collector" to collect AppSec Program related metrics
- Web- and Cloud-Security training for internal security experts
Primeo Energie
Lead Security Architect
January 2022 - Today (4 years and 5 months)
Switzerland
Integration of a lightweight application security program:
- Identification of threats and implementation of countermeasures in multiple JavaScript-based projects and infrastructure
- Web Application and Cloud Security Training
- Security consultation in Azure cloud environments, e.g. Azure Entra ID, Azure App Service, Azure DevOps