Bremen, Germany · DECOIT GmbH & Co. KG

Daniel-Ioan Vetu.

Software Engineer · IT-Security

Backend services and monitoring components that keep industrial networks watched.

profile

Software engineer building security products and BMFTR-funded research platforms: SIEM, incident management, and industrial monitoring across Industrie 4.0, IIoT and OT. Full-stack in Java, Python and React.

  • Bremen, Germany
  • Employed - DECOIT GmbH & CO. KG.
  • 4 years of experience
  • Java · Python · Typescript
  • GermanC1
  • EnglishC1
01deployments

Platforms I've helped build

Publicly funded (BMFTR) security research and product/s: SIEM, incident management, and industrial monitoring.

01 / 06BMFTR ResearchDiStEL2025 →Coordinated by Robert Bosch · 11 partners

Digital state description across the steel value chain

A data space describing material states across the steel value chain; DECOIT builds the raw-data pipeline and ontology transformation.

role:
  • Raw-data ingestion and ontology transformation pipeline
  • Architecture and tech-stack decisions
  • Development and testing
  • Deployment at the partners
  • Workshop for the partners on using the pipeline
  • Pipeline won the “Demonstrator of the Year” award at the Plattform MaterialDigital conference
  • Led to a follow-up project in which a project partner will use the pipeline
  • Data Space
  • Ontology
  • Data Pipeline
  • Sustainability
02 / 06ProductScanBoxProductDECOIT · Product

Attack detection & security analysis system

Log and network-traffic analytics that flag anomalies, correlate threat intel, and score unusual behaviour, using cross-platform agents.

role:
  • Responsible for platform updates across front end and back end
  • Code migration to newer dependency versions
  • Proof-of-concept features such as OT support
  • Testing and QA
  • Intrusion Detection
  • Threat Intel
  • Log Analytics
  • Agents
03 / 06Web DevelopmentWebIn-houseDECOIT · In-house

Company websites and the new DECOIT web presence

Content and maintenance work across the company's React and CMS-based websites, plus a new company website built from the ground up.

role:
  • Content updates on React and CMS-based websites such as WordPress
  • Architecture and tech-stack decisions for the new company website
  • Development of the new company website
  • React
  • WordPress
  • CMS
  • Web Development
04 / 06BMFTR ResearchKISTE2024 – 2026DECOIT · Hochschule Offenburg (ivESK)

AI-assisted SIEM for industrial IoT networks and fieldbuses

Non-invasive monitoring for IIoT/OT: distributed sensors feeding AI-driven anomaly detection, without disrupting the plant floor.

role:
  • Development of a platform that retrieves sensor data from project partners' systems (Java/Spring Boot, Python)
  • Testing and parsing of industrial protocols such as Modbus
  • Integration into the SIEM
  • Results feed into the OT support currently being integrated into the ScanBox SIEM
  • SIEM
  • IIoT/OT
  • Anomaly Detection
  • Spring Boot
05 / 06BMFTR ResearchTRUSTnet2024 – 2026DECOIT · Fraunhofer SIT · HS Bremen · KUNBUS · Lobaro

Trusted IoT platform for Industrie 4.0 on TPM components

A Trusted Core Network on TPM hardware anchors, with SIEM-backed real-time monitoring for cyber-physical systems.

role:
  • Development of a platform that automatically retrieves data from a project partner's live system
  • Parsing of the CoAP protocol data
  • Integration into the SIEM
  • Results feed into the OT support currently being integrated into the ScanBox SIEM
  • TPM
  • Trusted Core Network
  • CPS
  • Real-time Monitoring
06 / 06BMFTR ResearchZenSIM4.02022 – 2026DECOIT · HS Bremen · CERT@VDE

Central security incident management for SMEs in Industrie 4.0

Central incident capture and scoring for SMEs, plus a CSAF demonstrator for structured vulnerability data.

role:
  • Development of the CSAF demonstrator
  • Integration into the SIEM platform
  • Workshop and presentation of the demonstrator
  • Demonstrator source code requested by the BSI (German Federal Office for Information Security) for presentations at conferences
  • Incident Management
  • CSAF
  • Vulnerability Data
  • SME
02capability matrix

The stack I work in

Languages

  • Java
  • Python
  • TypeScript

Frameworks

  • Spring Boot
  • React
  • Next.js
  • Node.js

APIs & Data

  • REST APIs
  • GraphQL
  • WebSockets

CMS

  • Strapi
  • WordPress

Databases

  • PostgreSQL
  • MySQL

IT-Security

  • SIEM architectures
  • ELK Stack

Infrastructure

  • Linux
  • Bash scripting
  • Docker
  • Kubernetes
  • Proxmox VE

Agentic AI

  • Claude Code
  • OpenCode
  • Multi-agent workflows

Tools & Methods

  • Git / GitHub
  • Scrum
03log

Where I've worked

Apr 2026 - Present

DECOIT GmbH & Co. KG

Bremen

Software Developer Python/Java, TypeScript/JavaScript with focus on IT-Security and Safety

  • SIEM and incident-management components for BMFTR research projects.
  • Contributor to Research Projects
  • Backend in Java/Spring Boot and Python; React frontend modules.
  • Interfaces for asset, vulnerability and data.

Oct 2022 - Mar 2026

DECOIT GmbH & Co. KG

Bremen

Dual Student, Computer Science (Software Engineering)

  • Core contributor to ZenSIM4.0: incident management for SMEs in Industrie 4.0.
  • Built a CSAF demonstrator and vulnerability/asset data interfaces.
  • Implemented SIEM architecture with HS Bremen and CERT@VDE.

2015 - 2022

Brose · Pizza Hut · Lear · Leoni

Bremen & Pitești

Earlier: Manufacturing & Service roles

  • Automotive series production at Brose: quality and process standards in shift work.
  • Wiring-harness assembly (Lear, Leoni) while completing language and integration courses.

education & training

2022 - 2026

B.Sc. Computer Science (dual study)

IU Internationale Hochschule, Bremen

Practice partner: DECOIT. Focus on software engineering, databases, IT-security and web technologies.

Certification

Full-Stack Web Developer, PERN stack

Codecademy Career Path

PostgreSQL, Express, React, Node.js.

Certification

Java Programming

MOOC.fi, University of Helsinki

Foundations of object-oriented programming in Java.

open channel

Building something inovative? Let's talk.