Information Security & Governance · B.Sc. IT Security (2027) · software development background, 42 Wolfsburg

• Bachelor's thesis in the Information Security department of PowerCo SE, supervised by the CISO, with Technische Hochschule Brandenburg (since 10/2026): Cybersecurity Contingency Planning for Automotive Suppliers: IATF 16949 and Regulatory Integration
• Before that, internship in Information Security (GRC) at PowerCo SE (10/2025 – 07/2026): regulatory analysis around NIS-2 and the Cyber Resilience Act, mapping requirements between established security standards and new regulation, policy work and stakeholder workshops.
• Digital First Responder in the BSI Cyber Security Network (volunteer, IT incident response, 2025 – 2026).

• B.Sc. IT Security, Technische Hochschule Brandenburg (10/2024 – 02/2027, expected)
• 42 Core Curriculum (software engineering), 42 Wolfsburg, completed 04/2026

• Governance & Compliance: NIS-2, Cyber Resilience Act, ISO/IEC 27001 / ISMS, BSI-Standard 200-4 (BCM), IATF 16949 · control mapping, gap analysis, risk assessment, contingency planning
• Secure Software Development: threat modelling (NIST SP 800-154, OWASP Threat Dragon), security requirements (OWASP ASVS), SBOM and dependency analysis (CycloneDX, OWASP Dependency-Track)
• Programming & Scripting: Python, C, C++, Java, JavaScript · Bash, PowerShell
• Infrastructure & Tools: Linux, Windows, Proxmox VE, LXC, Docker · Git, GitHub, GitLab, ELK Stack, LaTeX

Risk register as the subject of a threat analysis and security requirements (study project, 2026)

• Separates IT risks from information security risks by the affected protection goals and the origin, computes the risk score and escalates critical risks to the incident response team.
• Built for the courses Software Engineering and Secure Software Development at TH Brandenburg: user stories with acceptance criteria, threat analysis following NIST SP 800-154, security controls with tests traced to their requirements, SBOM in CycloneDX format.
• Stack: Python, Django, PostgreSQL, Keycloak, Docker, pytest. Not for production use, see the README.

IEEE-style paper on microarchitectural interference across virtualisation boundaries (Hardware Security course, 2026, in German)

• Attacker and victim guest pinned to the same physical core of an Intel Raptor Lake CPU under Proxmox VE: deterministic interference load with stress-ng, measured in the victim with sysbench and fio.
• Own measurement and orchestration suite on a Proxmox VE homelab, with exposé, paper and slides.

• webserv: HTTP/1.1 server in C++ built from the RFC, with request parsing, CGI and NGINX-like configuration.
• ft_transcendence: Django single-page application with OAuth 2.0, Docker and an ELK logging stack.

• LinkedIn: Maximilian Wagner
• Focus areas: information security governance, regulatory compliance (NIS-2, CRA), business continuity and contingency planning, secure software development.