Industrial AI Security
Research Scientist @ Siemens AG
Munich / Murnau
I started out as a chemical technician at Roche Diagnostics GmbH in Penzberg, then switched directions and studied Computer Science, earning a Bachelor’s and Master’s degree from the University of Applied Sciences Kempten. I wrote my Master’s thesis at Siemens AG in Munich and have worked there since, now as a Research Scientist specializing in Industrial AI Security.
My work covers cybersecurity topics such as container security, mobile application security, and privacy, where I both do research and consult for internal teams. Together with colleagues, I developed and run Siemens’ internal container security trainings. Starting in 2024, Patrick Stöckle and I taught a practicum on container security at the Technical University of Munich and Hochschule München, though we’re not running it at the moment.
On the side, I also run the audio guide for the Schlossmuseum Murnau.
When I’m not working, I’m out on my road bike — riding around southern Bavaria and Austria, or at the occasional local amateur crit race.
news
| Oct 28, 2026 | I joined the Cybersecurity and Artificial Intelligence Innovation Impact event in Brussels, a joint European Cybersecurity Competence Centre (ECCC) and DG CNECT gathering. It was a great opportunity to meet the consortium partners of the AICYROS, AIGENTIC and GENESISAI projects and the wider European cybersecurity community. |
|---|---|
| Oct 15, 2026 | Patrick Stoeckle and I presented our paper “Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source” at ASE 2026 in Munich. Jessica Hösl, our thesis student, was the main author of the paper. The paper presents an automated pipeline that analyzed 11,470 Dockerfiles from inner source repositories at Siemens AG. It shows that adopting existing internal reference implementations could improve security posture by 60.4%. |
| Oct 09, 2026 | I’ve achieved the GIAC Certified Machine Learning Engineer (GMLE) certification! This time, I took the in-person exam at a testing center. Much better than the online proctored exams with webcams. 🤜 🤛 |
| Apr 19, 2026 | 🇪🇺 Proudly using European Mistral now! Switched from Claude/Copilot → not disappointed! Vibe CLI is amazing, even if a bit rough without an extension. 🚀 |
| Aug 28, 2025 | Ditching Spotify - Using GDPR Data Export to Build Your Physical Music Collection. A Go script that analyzes your Spotify data to identify which albums to buy, complete with search links. Perfect timing with Spotify’s price hikes! 🎵💿 |
latest posts
selected publications
- Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner SourceIn Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering, Oct 2026