In his various roles he was responsible for application development, penetration testing and web application security. Beside he wrote several security related articles, did talks on trade fairs and worked on www.webappsec.org projects like WAFEC.