Hi, I am Tobias.
I help secure your cyber-physical systems (like embedded or industrial systems) and the infrastructure around them. You benefit from over 15 years of experience and a genuine passion for the field.
Delivered with efficiency, reliability, and excellence.
This section covers the cybersecurity services I offer. You can expect consistent, high-quality delivery that earns your trust. That's the standard I hold myself to.
Applicable industries:
automotive · energy · rail · maritime · aviation ·
medical · banking · consumer electronics ...and wherever cyber meets physical.
Cryptographic keys are the backbone of your security and can turn into a major cost driver if key management is done poorly. I design public-key infrastructures and HSM-backed key management systems that keep your most valuable cryptographic assets secure, without losing sight of your budget and real requirements.
PKI · HSM · KMS · Root fo trustBy now, regulators worldwide have recognized the quantum threat. Since the EU and US timelines for PQC migration converge on 2030 (critical systems) and 2035 (everything else), migration can't wait. As a Dr.-Ing. in post-quantum cryptography, I translate the science into a practical plan. The design principle of "crypto-agility" ensures that your systems stay ready for whatever transition comes next.
PQC · Crypto-agility · CBOM · Future-proof cryptographyGRC stands for Governance, Risk, and Compliance. If your product or facility needs compliance with ISO/SAE 21434, IEC 62443, or the Cyber Resilience Act (CRA), I guide you through the process to successful certification.
CRA · ISO/SAE 21434 · UN R155 / R156 · CSMS · IEC 62443 · Risk AnalysisNot sure which service fits? My experience spans the full breadth of cybersecurity. Together, we'll define a service that fits your needs.
Security by Design · Defense in Depth · Supply Chain SecurityWhat sets me apart is deep technical expertise paired with an engagement model that respects your budget.
B.Sc., M.Sc., and Dr.-Ing., all in cybersecurity, all from Ruhr University Bochum. When your problem has no established answer yet, you need someone who knows cybersecurity in all its breadth and depth. The stakes are high: the 2025 Jaguar Land Rover shutdown cost the UK economy an estimated £1.9 billion. My job is to make sure you are not the next case study.
Wherever possible, I work for a fixed price against a clearly defined deliverable, rather than an open-ended stream of billable hours. You can plan your budget with confidence and know exactly what you're paying for, with no risk of costs quietly running away.
Committing to a large security project is a leap of faith. That's why I offer a defined pilot: a scoped work package of one to three months, before any long-term engagement. You see the quality of my work first-hand and decide from there, with no obligation to continue.
No large consultancy behind me means no rigid playbooks and no overhead on your invoice. You work directly with the person doing the work. That independence extends to the tooling. Your data stays on a fully European stack, with no US big-tech dependencies (details).
Selected highlights from my professional experience. A full CV and list of references is available upon request.
Supporting the client in establishing their CSMS. I produce the required work products and help set up the underlying processes. I also specify and implement the supporting cybersecurity infrastructure, including key management and public key infrastructure.
Led a team of five engineers to achieve IEC 62443-4-2 compliance for the client. I directed the design of the OT security architecture for their power plants and supervised the implementation of the specified security controls.
Brought the client's product to cybersecurity series-production readiness. I supported the client in achieving ISO/SAE 21434 certification, specified and implemented the IT/OT cybersecurity architecture, and acted as the central point of coordination across the client's internal teams, suppliers, and customers, keeping everyone aligned.
Analyzed the practicality of novel post-quantum cryptographic algorithms on embedded platforms such as microcontrollers and FPGAs. I optimized the algorithms' resource use and developed side-channel protection measures.
Below are whitepapers drawn from my work in industry. Request one and it lands in your inbox. For academic publications, see my DBLP page.
Most companies pay enterprise prices for a key management system ten times larger than their products need. This paper shows how to size one to what you actually use, and what the post-quantum clock will cost you if you wait.
Facing a deadline, or starting a platform from a blank page?
Tell me where you are and you get an honest read on what it will take.