Melvin Klimke
Security Consultant at colenio GmbH & Co. KG
Bonn, North Rhine-Westphalia, Germany
Summary
🤩
Rockstar🎓
Top SchoolMelvin Klimke is a security consultant with 7 years of hands-on experience in binary analysis, vulnerability research and security governance, currently advising clients at colenio after roles as a Senior Cyber Security Consultant at EY and a research assistant at Fraunhofer FKIE. He blends applied research—contributing CWE checks and reporting improvements to tools like fkie-cad/cwe_checker and a CVE/CPE plugin for FACT_core—with practical ISO 27001/IT-Grundschutz implementation for enterprise customers. Comfortable in both code and compliance, he has implemented core logic, acceptance tests and refactors that increased tooling coverage across architectures and file types. Based in Bonn, he brings a researcher’s curiosity (sparked while analyzing binaries for CWEs) to pragmatic consulting, helping organizations turn technical findings into auditable defense capabilities.
7 years of coding experience
5 years of employment as a software developer
Master of Science - MS Computer Science, Master of Science - MS Computer Science at The University of Bonn
German, English
Github Skills (16)
firmware10
program-analysis10
code-analysis10
static-analysis10
reverse-engineering10
security-automation10
python10
security-scan10
binarydiff10
security10
sqlite9
pytest9
testing9
sqlite-database9
rust9
Programming languages (3)
Github contributions (5)
fkie-cad/cwe_checker
Dec 2019 - Oct 2021
cwe_checker finds vulnerable patterns in binary executables
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:111 reviews, 50 commits, 51 PRs in 1 year 10 months
Contributions summary:Melvin contributed to the core functionality of the `cwe_checker` tool, implementing an executable with command-line arguments for easier use. They focused on the core logic of the checker, modifying existing code and adding new CWE checks, especially focusing on those related to security vulnerabilities like CWE-676 and CWE-782. The user also improved the reporting of detected incidents, refactoring the code to deduplicate and enhance the generated CWE reports, alongside adding acceptance tests for new CPU architectures and file types to increase the tool's coverage.
static-analyzervulnerableghidrabinary-analysiscwe
fkie-cad/FACT_core
May 2019 - Jan 2020
Firmware Analysis and Comparison Tool
Role in this project:Security Engineer
Security EngineerContributions:16 commits, 4 PRs, 22 pushes in 7 months
Contributions summary:Melvin primarily contributed to the development and testing of a CVE lookup plugin for firmware analysis. The commits show the implementation of tests, data preparation scripts, and core logic related to matching Common Platform Enumeration (CPE) entries with CVE IDs. The user also worked on improving the plugin's readability, adding argument parsing, and refactoring code for improved maintainability. Their work focused on integrating and analyzing vulnerability data within the context of firmware analysis.
security-automationfirmwaresecuritycomparisonfirmware-tools
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.