Senior Penetration Tester - spezialisiert auf interne Infrastruktur & Active Directory Sicherheit

7/2024 – 7/2024

Durchführung eines Penetrationstests der internen Infrastruktur und der Active Directory Umgebung

Penetrationstest

6/2024 – 6/2024

Durchführung eines Pentests der internen Infrastruktur und der Active Directory Umgebung

Penetrationstest

4/2024 – 4/2024

- scanning for open ports & check for vulnerable and outdated software
- simulating an attack and found paths to carry out an escalation of privileges and take over the entire Active Directory
- report created to show the attack routes and how they can be closed
- Re-testing carried out to ensure that the attack routes were closed

Active Directory, Ethical Hacking, Penetrationstest

11/2022 – 11/2022

- scanning for open ports & check for vulnerable and outdated software
- simulating an attack and found paths to carry out an escalation of privileges and take over the entire Active Directory
- report created to show the attack routes and how they can be closed
- Re-testing carried out to ensure that the attack routes were closed

Penetrationstest, Active Directory

11/2022 – 11/2022

- scanning for open ports & check for vulnerable and outdated software
- simulating an attack and found paths to carry out an escalation of privileges and take over the entire Active Directory
- report created to show the attack routes and how they can be closed
- Re-testing carried out to ensure that the attack routes were closed

Active Directory, Penetrationstest

3/2021 – offen

1. Attack: In-house pentesting and support of penetration tests by service providers Identifying, prioritizing, resolving and retesting internal vulnerabilities and external corporate network of Koehler and its subsidiaries and ensuring a smooth process.

2. Defense/Hardening: Hardening on-premise & Azure Active Directory through authorization review according to Least Privilege principle, deployment of various security features including RunAsPPL, Credential
Guard and implementation of the Tiering model or networksegmentation.

3. Detection: Configuration and support of the SIEM, AV, EDR solution used, as well as conception and
activation of required windows events and logging data, creation of custom detection rules
for common attack techniques and monitoring and tracking alerts.

Cyber Security, Penetrationstest