CV
Technical Solution Architect who has worked on Danish national e-invoicing infrastructure since 2021. I have led responses to production outages and security vulnerabilities, coordinating engineers, hosting providers and the client, and I built an information security management system around ISO/IEC 27001 with procedures for incident response, escalation and post-incident review. M.Sc. in Computer Science, specialising in security in distributed systems, and currently studying business administration alongside work.
Areas of expertise
I work with electronic invoicing and e-procurement. At CGI I helped develop the open source eDelivery solution for NemHandel, built on the open source access point Oxalis (Java). Today I am a Technical Solution Architect at Digisense A/S, working on solution architecture in the same field: Peppol (BIS, Access Point and eDelivery/AS4), NemHandel, OIOUBL/UBL and the European e-invoicing standard EN 16931.
Incident response and compliance
When something breaks in production, the technical fix is only half of it. The other half is getting the right people moving, keeping the client informed and learning from it afterwards. During the July 2024 CrowdStrike outage a database failure hit our hosted production platform just as most of the team’s workstations went down. As tech lead on CGI’s NemHandel team I coordinated by phone with the hosting provider and the one developer whose machine still worked, and the database was restored that afternoon. When the critical SnakeYAML vulnerability CVE-2022-1471 affected the NemHandel reference implementation, we notified the client immediately, mitigation guidance went out to operators, and we shipped a fixed release within two weeks.
At Digisense I built the information security management system around ISO/IEC 27001: incident management and escalation procedures, post-incident reviews and an incident register. That is the work that has to be in place before anything is on fire, so nobody has to invent the response as it happens.
Experience
Digisense A/S · Denmark
- Built the company’s information security management system around ISO/IEC 27001, including incident management and escalation procedures, post-incident reviews and an incident register
- Technical point of contact across engineering, sales and support for a Peppol and NemHandel access point provider
- Solution design for customer projects
CGI Danmark · Aalborg
- Technical lead on CGI’s NemHandel team and the client’s technical adviser
- Led the response to CVE-2022-1471 (SnakeYAML, remote code execution) in the NemHandel reference implementation: the client was notified immediately, mitigation guidance went out to operators, and the team shipped a fixed release within two weeks
- Coordinated recovery from a production database failure during the July 2024 CrowdStrike outage, when most team workstations were unavailable
- Translated client requirements for the development team
- Mentored a newly hired developer
- Delivered installation webinars for the NemHandel reference implementation
- Developed the open source NemHandel eDelivery reference implementation (Java, built on Oxalis)
- Solution architect on the project
- Owned a rules engine (Java, Drools)
- Deployment and operations (Docker, Docker Compose, Linux)
- Frontend (Angular, TypeScript)
- Backend (Go, Java, Python)
BilligVVS · Egå
- Webshop checkout and shipping integration (Python, TypeScript)
- Movex ERP integration
- Internal BI dashboards (Python, Chart.js)
Education
HD Part 1, Business Administration
2025 – 2027 (in progress)Aalborg University
Business economics, accounting and finance.
M.Sc. in Computer Science (cand.scient.)
2020 – 2022Aalborg University
Specialisation in security in distributed systems. Thesis: Thread-Fuzz, mutation-based behavioural blackbox fuzzing of Thread.
B.Sc. in Computer Science
2015 – 2018Aalborg University
Publication
Carlsen, Frydenskov, Jensen, Rasmussen, Sørensen, Weirsøe, Jensen & Larsen. EPTCS, vol. 390 (2023), pp. 99–114. arXiv:2310.00999
Skills
Incident response
Compliance and security
E-invoicing
Infrastructure
Development
Languages
- Danish (native)
- English (fluent, spoken and written)
Projects and interests
I run a self-hosted Proxmox environment with around 50 containers and virtual machines, single sign-on through Authentik, central logging and monitoring. My family uses it every day. I have contributed to qutebrowser and Stregsystemet, and I am a licensed radio amateur (call sign OZ0AGW).