Florian Roth
Vice President Research And Development at Nextron Systems
Frankfurt, Hesse, Germany
Summary
🤩
Rockstar🎓
Top School
Top expert inCybersecurity Analytics and Threat Intelligence
Florian Roth is a seasoned security engineer and research leader with 13+ years of experience, currently serving as Vice President of Research and Development at Nextron Systems. He is the creator and maintainer of widely used open-source DFIR tools and signatures—most notably Sigma, THOR, LOKI, yarGen and a corpus of over 16,000 YARA rules—bridging threat research, detection engineering and incident response. Florian combines hands-on Rust, Python and Go development with deep operational insight, contributing to high-impact projects like the Sigma rule repository and a Log4Shell detector. His work emphasizes practical, defender-focused tooling and simulation (e.g., APTSimulator), improving detection coverage and real-world robustness. Based in Frankfurt, he pairs academic training in media system design with long-standing consulting experience at Siemens and BSK, bringing both systems thinking and adversary emulation to R&D. Outside of work he’s an avid Twitter user, green tea drinker and sports-car enthusiast—small habits that mirror his focus on speed and clarity in tooling.
13 years of coding experience
16 years of employment as a software developer
Computer Science Expert, System Integration, 1.3, Computer Science Expert, System Integration, 1.3 at ATIW-Berufskolleg PaderbornMaster's degree, Media System Design, Master's degree (German Diplom), Master's degree, Media System Design, Master's degree (German Diplom) at Hochschule Darmstadt
English, German, Spanish
Github Skills (63)
mitre-attack10
c-language10
python10
apidoc10
wp-api10
it-security10
audit10
linux10
winapi10
batchfile10
sia10
security10
cobalt10
script10
process-monitoring10
Programming languages (23)
Github contributions (5)
Neo23x0/Loki
Jan 2015 - Dec 2022
Loki - Simple IOC and YARA Scanner
Role in this project:
Security Engineer
Security EngineerContributions:69 releases, 917 commits, 80 PRs in 7 years 11 months
Contributions summary:Florian appears to have contributed to the improvement of an existing IOC scanner. The contributions primarily involve code modifications, especially to improve the scanning capabilities for specific malware. The user's work resulted in a more effective scanner.
scannerpythonyarahashdfir
Neo23x0/log4shell-detector
Dec 2021 - Feb 2022
Detector for Log4Shell exploitation attempts
Role in this project:Back-end Developer
Back-end DeveloperContributions:1 review, 113 commits, 41 PRs in 2 months
Contributions summary:Florian's contributions primarily involve developing a Log4Shell exploitation attempt detector. Their work includes creating the initial version of the detector, fixing bugs related to casing and other problems, and adding input error handling. Furthermore, they improved the tool by adding support for multiple paths and default paths, as well as adding *.gz file support, and a quick scan mode. The user also refactored the code and implemented various enhancements for improved robustness.
log4shellpowershellexploitationdetector
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.