After ten years at Kibernetik AG, most recently as CEO, I have been a Product Manager at Oneconsult AG in Zurich since September 2026. One question drives me: how do you build security that holds up day to day, technically and organisationally? I look for the answers in practice, in my own lab, and document them here.
Practice from my own lab.
What I write about, I have built and operated myself. The write-ups show what worked, what did not, and what I changed as a result.
A process that runs is not the same as a service that works. Monitor the outcome, not the status.
A failed check is a claim about a rule, not about the system. Ask the system before you change it.
A clean log proves the job ran, not that it did anything. Measure what is still missing, not what the job says.
I led the disaster recovery team through a real ransomware attack, four days around the clock. My lab is where I build the controls that would have mattered.
The connection to my technical background is direct: complex systems must be understood, properly designed, operated in a controlled manner and recoverable in the event of failure. Whether it is a refrigeration system or IT infrastructure, the underlying responsibility is the same.
OpenFolio is an open-source portfolio tracker for Switzerland. It holds sensitive financial data, so security was part of the design from the start, not added afterwards.
I designed and built it with AI assistance using Claude Code. The security model:
141,000 lines of code · 1,754 automated tests · 189 API routes
Decision-makers and implementers speak different languages.
I come from the trades. After an apprenticeship as a refrigeration technician and work as a systems planner, I spent ten years at Kibernetik AG, most recently as CEO.
There I saw how security in companies often fails: not because of the technology, but because decision-makers and implementers speak different languages. One side sees costs and risks, the other configurations and vulnerabilities. What matters gets lost in between.
Today I work at exactly this interface. I want to understand what an attack means technically and what it costs a business. That is why I run my own lab, break things, harden them and write down what I learn.
Swiss cybersecurity company: penetration testing, incident response, consulting
Swiss systems provider for heat pumps, air conditioning, refrigeration and photovoltaics · around 100 employees
Overall responsibility for strategy, P&L and around 100 employees.
Shared responsibility for corporate strategy, digitalisation, organisational development and long-term direction.
Responsible for digitalisation, process optimisation and organisational development. Based on my diploma thesis, internal digitalisation was implemented consistently — around 95% remote-capable workplaces already before COVID, and roughly 790 hours saved per year through optimised processes.
Led the largest division by revenue with people-management responsibility. Responsible for the strategic development of the heat-pump portfolio and the expansion of the company's market position in Eastern Switzerland. Promoted after only two years with the company.
Consulting and sales of heat-pump and photovoltaic systems to installers, architects and planners. Responsible for the Grisons region, building a new photovoltaic business line and end-to-end project delivery from quotation to commissioning.
Strategic responsibility for building and developing the subsidiary for photovoltaic installations.
Contributed to building the company, structuring its processes and shaping its strategic direction.
Shared responsibility for strategy and entrepreneurial development.
Foundation: hands-on engineering, systems understanding and systems thinking
Installing, servicing and commissioning refrigeration and air-conditioning systems, then planning and sizing them.
Rüthi SG, Switzerland
Get in touch
Outside my professional work, I pursue documentary wedding and reportage photography.
Photography is a creative counterbalance for me. It requires careful observation, anticipation, technical understanding and the ability to remain calm and focused at the decisive moment.
My style is documentary, atmospheric and unobtrusive. I photograph a limited number of weddings, focusing on genuine moments, light and atmosphere.
Preparation and reliability matter here as well: redundant camera bodies, dual-card recording, structured backups and an additional backup on the wedding night.
Important moments cannot be recreated.
View photographic work →