Services
Alongside my full-time work, I'm available as a freelance IT security and network specialist. I help small businesses build networks that are properly segmented, securely connected, and continuously monitored — from the firewall to the log analysis behind it.
Firewall & Network Segmentation
Planning and setup of pfSense firewalls with clean VLAN designs for small businesses. I separate servers, workstations, guest Wi-Fi, and IoT devices into clearly defined network zones, so an incident in one area can't spread to the rest — with rule sets and documentation your team can actually maintain.
VPN Solutions
WireGuard-based VPNs for site-to-site links and remote access. Whether it's home office staff or field teams, I set up fast, modern, encrypted connections to your company network — with clean key management and a minimal attack surface.
Monitoring & Log Analysis
Centralized log analysis with Splunk, so anomalies in your network traffic become visible before they become incidents. I deploy and tune IDS/IPS sensors with Snort and Suricata — the same engines I evaluated in depth in my bachelor's thesis SOC lab.
IT Security Assessment
A structured security review of your network and systems, tailored to small businesses. I combine vulnerability scanning with a hands-on review of your firewall rules and segmentation, and deliver the results as a prioritized written report — clear findings and realistic recommendations, not fear-mongering.
Security Awareness Training
Practical phishing awareness training for your employees, backed by simulated phishing campaigns that show — not just tell — how real attacks work. Training and follow-up reporting are aligned with the awareness requirements of NIS2, so it also supports your compliance obligations.
Microsoft 365 Setup & Security
Setup and hardening of your Microsoft 365 tenant: user and license management, MFA enforcement, and sensible security defaults from day one. Includes email security for Exchange Online with correctly configured SPF, DKIM, and DMARC records.