Sandro Winkler

Cyber offense & defense. AI and automation.

I'm Sandro Winkler, a security engineer based in Basel, Switzerland. I know both sides: how attackers break systems and how to defend them. AI and automation help me do both more effectively.

Get in touchMore about me
Portrait of Sandro Winkler

01

Understand the attack. Strengthen the defense.

Knowing how attacks work makes defense more targeted. Having run defense makes testing more realistic.

Sandro Winkler with a split face: red on the left with a mask and code, blue on the right with a shield and a security dashboard

red team

Cyber offense

  • Pentesting of web applications, infrastructure and cloud
  • Attack path analysis: from a single entry point to critical systems
  • Targeted testing of known vulnerabilities (CVEs) and patch verification
  • AI-augmented pentesting with autonomous agents
  • Red teaming and phishing simulations
  • Building and running pentest and bug bounty programs

blue team

Cyber defense

  • Pragmatic security roadmaps: the measures with the biggest impact first
  • Building and running a SOC and CSIRT
  • Threat hunting, log analysis and forensics
  • Risk-based vulnerability management: translating technical scores into business priorities, working out fixes and workarounds with developers
  • Protecting the entry points: advanced email security, gateway rule tuning and WAF
  • Security awareness: learning to recognise attacks instead of just being warned about them

02

AI, automation & processes

I don’t just look at systems for weaknesses, but also for where they can become simpler, faster and more effective. Seven years of software development shape that view: whatever repeats can be automated.

  • Process analysis and optimisation in teams
  • AI enablement for teams and organisations
  • Agent-based workflows
  • Scripting with Python and PowerShell, Power Automate and Microsoft 365

for individuals

Digital Upgrade

Passwords under control, a secure home network and AI that actually helps in everyday life. I also bring individuals up to date digitally.

Go to Digital Upgrade →
Sandro Winkler relaxed in front of neatly arranged icons and an intact padlock

03

Certifications

  • GXPNGIAC Exploit Researcher and Advanced Penetration TesterGIAC · SANS SEC660in progress
  • GRTPGIAC Red Team ProfessionalGIAC · SANS SEC5652026
  • AIEXIN BCS Artificial Intelligence FoundationEXIN · BCS2026
  • GSOCGIAC Security Operations CertifiedGIAC · SANS SEC4502024
  • CSACertified SOC AnalystEC-Council2024

Want to talk?

Security, AI or a digital upgrade: send me a message.

Get in touch