Nicolas Tran
M. S. Cybersecurity · BSI Hall of Fame (2025) · Full-Stack Developer
End-to-end development of security solutions and secure infrastructure. Based in Germany.
Scroll ⌄
M. S. Cybersecurity · BSI Hall of Fame (2025) · Full-Stack Developer
End-to-end development of security solutions and secure infrastructure. Based in Germany.
Security-first engineering from concept to production.
I own features from UI to database. Frontend, backend, data layer, and everything in between.
Every system I build is designed with security in mind, from architecture decisions to the code that ships.
I ship on self-hosted infrastructure. Containerized, reproducible, and built to last.
A decade of learning, building, and securing.
PSC - Portable System Center · Saarbrücken
Vocational training as Management Assistant for IT Systems. Customer consulting, website development and migration, employee training, and technical support.
Vocational Training Center Halberg · Saarbrücken
Routing and Switching: Introduction to Networks. Protocols, addressing, and subnetting.
Saarland University · Saarbrücken
Thesis on automated in-browser generation, analysis, and countermeasure selection for User Account Access Graphs. Focus: Web Security, Mobile Security, Physical-Layer Security, Hacking.
CISPA Helmholtz Center for Information Security · Saarbrücken
Taught Foundations of Cybersecurity. Ported C++ to JavaScript + WebAssembly for ICAPS 2020. Built graph-based Internet models with Cypher and Python.
Step3IT (formerly TUXGUARD) · Neumünster
Building secure web apps with Django, FastAPI, and Node.js. Containerized architectures with Docker, Keycloak, and Postgres. Automated deployments cutting costs by 50%+.
Saarland University · Saarbrücken
Thesis on dynamic instrumentation of OpenSSL's Libcrypto for runtime monitoring. Advanced topics: Side Channel Attacks, IT Forensics, Security Testing, Machine Learning.
Federal Office for Information Security
Recognized by the German Federal Office for Information Security for contributions to national cybersecurity.
Your Organzation? Contact me now!
Domains I work in daily and go deep.
Web application security, access control and identity management, and threat modeling. From secure coding practices and vulnerability research to hardening production systems.
Building RESTful APIs and backend services across Python and Node.js, deployed on self-hosted Linux infrastructure with containerized architectures.
Protocol-level knowledge of SMTP, mail delivery flows, and spam filtering. Building and maintaining self-hosted mail and groupware infrastructure with high deliverability.
Additional technologies and tools in my toolkit.
German (Native) · English (C2) · French (B2)