Me, Myself and I

Name: Thierry Zoller

Location: Luxembourg
Twitter, Linkedin, Xing
e-business card

I started Information Security as a hobby when I was 16, it was around that time that I read about "Back-orifice" in a German Paper magazine called "ct". I wanted to know all about it, why it worked and how it worked. Fast forward, in the late 90s I created and maintained a rather large and known Website that collected, analysed and researched malicious code (TLSecurity), back in the days analysis tools were not as advanced as they were today; in fact there weren't any publicly available. My results were covered by the the SANS Institute, various books and IDS rules.

It was during these years that I discovered that the field of Information Security is both very vast, interesting and developing at a rapid stance. Needless to say that it caught my attention ever since. Mid 2009 I founded G-SEC where I try to build up a local non-profit Luxembourgian Team of Security Specialists and create  interest in this profession for those that yet have to make a career choice.

My career started with being appointed CEO of a security software company ('Yet Another Software Company' - YASC .ltd) where I directed and engineered Security Software, I made a career shift and worked as a Senior Security Consultant for a Luxemburg based consulting company where I was leading the Security Assessments and Audits nationwide, I later became the 'Director of Product and Security Services' at a well known specialised international security company and am now working as a Practice Lead for Threat and Vulnerability Management at Verizon Business.

I have over 14 years of background in information security, designed resistant architectures and systems,  managed development and information security teams, created ISM policies, lead high profile penetration tests. My thirst for knowledge let me to discover hundreds of vulnerabilities, I engineered the first Bluetooth PIN Bruteforcer and found high-profile vulnerabilities within Microsoft, Oracle, Google and Apple software
which led to IBM X-Force put me on the list of the  Top Vulnerability Discoverers of 2009.

I regularly present at international security conferences and am a proud founding father of the CLSSP certification which I co-created during my role at the European ISC2 CSSLP advisory board.

Get in touch
I can be found on Twitter, Linkedin, Xing and can be reached via e-mail. Alternatively you can read my paper.ly news paper that collects security news and information each day and presents them in a digestible form.

More information
If you are interested in more information about some of my creations - Talks, Whitepapers, Tools, Vulnerabilities I invite you to take a look here.