Container and Mobile Application Security
I embarked on my career journey as a chemical technician at Roche Diagnostics GmbH in Penzberg, laying the foundation for my professional growth. Fueled by a curiosity, I pursued higher education, earning both a Bachelor’s and Master’s degree in Computer Sciences from the University of Applied Sciences Kempten. During my academic journey, I blended my technological aspirations with the serene landscapes of the Allgäu region, finding inspiration in the mountains and on the road bike.
My academic voyage reached its zenith with a thesis at Siemens AG in Munich, which provided a practical perspective on the tech world. Today, I proudly serve as a Research Scientist at Siemens AG. In this role, I research and consult on cybersecurity domains such as container security, mobile application security, and privacy, collaborating closely with my talented colleagues.
I’ve also had the privilege of being part of a dynamic team at Siemens, where we collectively developed and conducted container security training programs. As a trainer, I’ve been able to share my knowledge and practical insights, helping professionals stay at the forefront of container security best practices.
Notably, since 2024 my colleagues Patrick Stöckle and I conduct a practicum on container security at the Technical University of Munich.
news
| Oct 15, 2026 | Patrick Stoeckle and I presented our paper “Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source” at ASE 2026 in Munich. Jessica Hösl, our thesis student, was the main author of the paper. The paper presents an automated pipeline that analyzed 11,470 Dockerfiles from inners ource repositories at Siemens AG. It shows that adopting existing internal reference implementations could improve security posture by 60.4%. |
|---|---|
| Oct 09, 2026 | I’ve achieved the GIAC Certified Machine Learning Engineer (GMLE) certification! This time I took the in-person exam at a testing center. Much better than the online proctored exams with webcams. 🤜 🤛 |
| Apr 19, 2026 | 🇪🇺 Proudly using European Mistral now! Switched from Claude/Copilot → not disappointed! Vibe CLI is amazing, even if a bit rough without an extension. 🚀 |
| Aug 28, 2025 | Ditching Spotify - Using GDPR Data Export to Build Your Physical Music Collection. A Go script that analyzes your Spotify data to identify which albums to buy, complete with search links. Perfect timing with Spotify’s price hikes! 🎵💿 |
| Aug 13, 2025 | Just published a comprehensive deep dive into building murnau.audio-guide.cloud - a modern multilingual audio guide platform for museums. The technical write-up covers everything from Go/Templ architecture and HTMX frontend choices to CI/CD automation and why traditional servers often beat hyped FaaS solutions for simple persistent applications. 🏛️🎧 |
latest posts
selected publications
- Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner SourceIn Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering, Oct 2026