about me

About

Security engineer with developer roots, at home on both sides.

It started with cheats for computer games. I wanted to know where a system did not work the way it should. That eye for weaknesses stayed with me and led me through software development into security.

Today I combine both sides: I attack systems to defend them better, and I use AI and automation where they take real work off people’s hands.

Sandro Winkler at his desk in front of two monitors showing code and a network graph

Career

  1. since 2026

    Cyber Offense · Helvetia

    Building the offensive security program and steering red and purple team engagements. As an AI ambassador, I drive the sensible use of AI.

  2. 2023–2026

    ICT Security Officer · Coop

    Helped build the SOC and incident response, led vulnerability management including the bug bounty program, performed and coordinated pentests and red teaming exercises.

  3. 2020–2023

    Cyber Security Engineer · ELCA Security

    Pentester and team lead, SOC analyst, ISMS and incident response for clients in defense, public administration and healthcare.

  4. 2013–2020

    Software Engineer · Various companies

    Mobile apps for Android and iOS, web, Java and Python, most recently as a Python developer at VMRay, a malware analysis specialist.

Education

B.Sc. IT Security & Information Engineering

Ruhr University Bochum, 2020

Bachelor thesis in cooperation with VMRay: Visual Analysis of Malware Behavior Using Polar Bar Charts

Sharing knowledge

As a security trainer, I teach developers, students and apprentices web application security and hacking techniques. As a speaker, I talk about current security topics at internal and public events.

Tools and frameworks

  • Burp Suite
  • Metasploit
  • Nmap
  • BloodHound
  • Pentera
  • UpGuard
  • Microsoft Defender
  • SentinelOne
  • Splunk
  • Vectra
  • xorlab
  • Python
  • PowerShell
  • Power Automate
  • MITRE ATT&CK
  • OWASP
  • NIST CSF
  • ISO 27001

Personal

Movement is my great passion, above all in the form of AcroYoga, a kind of partner acrobatics. I spend every free minute on it and volunteer as president of AcroBasel. When I am not moving, I play the handpan. And I am always up for a game of chess.

Get in touch