Experience

Research on AI security in software supply chains: making the building blocks of AI systems (data, code, models, infrastructure) transparent and verifiable through signed AI Bills of Materials. See Publications.

CRACY helps SMEs comply with the EU Cyber Resilience Act. The project is led by LSEC (Leaders In Security) and funded under grant agreement No. 101190492. I build open-source AIBOM tooling (AIBoMGen CLI, GitHub Action, dashboard) and give SBOM webinars, workshops and live demos. See Talks.

Teaching in Systems Design and Distributed Data Processing, and supervising master theses. See Teaching.

Contributions to the CycloneDX specification (ML model card support in the XML and Protobuf schemas), cyclonedx-python-lib (model card and JSF signature support) and the CycloneDX Tool Center (AIBoMGen tooling).

Built an Integration Test Boundary Manager in .NET that helps DevOps engineers manage test environments and configure integration tests.