Firm
Lean by design: direct contact, quick decisions.
Nikolaus Heners
Founder of Triminus, and the person you talk to.
From physics to software to security, the same question each time: how does this really work? Triminus is built on detailed analysis and solid documentation.
Why a boutique? Because good work happens close to the people who need it. Explaining technical things in plain terms is part of the job. Decisions move at the pace of the case, not of internal procedure. Each engagement is shaped to fit.
Experience, by type of work
- IT and OT security operations: monitoring, threat hunting and handling incidents and vulnerabilities in office IT and industrial environments
- Vulnerability and exposure management: scanning in build pipelines, cloud and data-centre environments; prioritisation and remediation planning for IT, OT and customer environments
- Malware analysis and incident response: static and behavioural analysis that feeds enterprise incident response
- Detection engineering: turning findings into rules and use cases that hold up in daily monitoring
- Building security operations: processes, playbooks and use cases, analyst training and coordination with external monitoring partners
- Support for internal investigations: technical analysis for HR and legal teams in internal cases
- Security engineering: dependency scanning, software bills of materials (SBOM), and offline scanning for sites with limited connectivity
- Software development: several years in global teams, from browser front end to server back end; the groundwork for code review and file analysis
- Teaching: university lecturing, coursework and thesis supervision in secure software
Credentials
GIAC Certified Forensic Analyst (GCFA); a degree in physics; university lecturing and thesis supervision.
Good to know
- Location: operating across Switzerland, based in St. Gallen. On site where a matter needs it.
- Languages: German and English; French for a first conversation.
Research and theses
Triminus is open to applied security research with universities and supports bachelor and master theses as an industry partner. Students and supervisors are welcome to get in touch.
Open thesis topic
How far can automated alert triage be trusted?
Develop and test a method that checks the conclusions of an automated triage system against the underlying evidence, using public or synthetic data.
Bachelor’s or master’s thesis in computer science or information security; publication terms agreed up front.
Open thesis topic
Finding cryptography in compiled code.
Develop and evaluate a method that locates classical public-key cryptography (RSA, elliptic curves) and the new post-quantum algorithms in compiled binaries, and measure how often automated tools get it right, using open-source software built from known source.
Bachelor’s or master’s thesis in computer science or information security; publication terms agreed up front.
Other topics on request.
What is not on this page
- Employers in industry are not named.
- In general, no client names or client references.