Dr.-Ing. André Schaller

I help organizations understand what their systems can really withstand — with an honest, evidence-based view of actual risk, free of scaremongering or sales pressure.

My work spans security architecture reviews, cryptographic implementation, and offensive testing. I advise vendor-neutrally: my recommendations follow your risk, not a product catalog.

I work as a Security Engineer at EUMETSAT and provide my expertise in cyber security as a freelancer. Prior to that I have been working as a Cyber Security researcher at CYSEC / Technical University Darmstadt, Germany, where I graduated as a Doctor of Engineering as a member of the Security Engineering research group. Working on cutting-edge Cyber Security research projects, I gained experience in various fields including information security, engineering of secure protocols and applications, lightweight cryptography and security of embedded devices.

Focus areas

• Security architecture & threat modeling
• Applied cryptography & protocol analysis
• Penetration testing & secure code review
• Information security risk assessments (ISO 27001)
• Incident response planning & Unix/Linux hardening