Senior Level Consulting
Vendor-independent cybersecurity expertise: Next-Gen Firewalling, SASE, Vulnerability Management, EDR/XDR, and AI-driven automation — delivered from strategy to hands-on implementation.
remote-firstDACH regionopen for new engagements
Cybersecurity
Projects
Market
Based in Apokoronas, Crete, I've spent 20+ years at the intersection of cybersecurity technology and business — from hands-on technical consulting to leading distributed teams across the DACH region. My focus has always been on closing the gap between security complexity and real-world outcomes: vendor-independent advice, measurable results, and building the kind of trust that makes clients come back.
What I Do
Tailored cybersecurity expertise — from strategy and presales to hands-on delivery.
Architecture design, presales, and deployment of NGFW and SASE solutions with a proven track record exceeding $42M in closed deals.
Structured VM programmes from scoping to continuous operations — compliance-driven or technology-driven, tailored to your organisation.
Vendor-independent endpoint security advisory covering the full spectrum from legacy AV to modern XDR platforms.
Γραφείο (grafeio) is Greek for "desk" or "office" — and yes, it's a nod to my last name. The .IT plays along too: Italy's country code on paper, but read plainly it's just what I do for a living. Before relocating to Crete in 2022, I spent most of my career based in North Rhine-Westphalia, Germany. Once I got here, the pun was too good to pass up: this is the desk where the work actually happens. These days that desk is usually this one — coffee included — connecting with clients across the DACH region from a quiet corner of the Mediterranean.
Projects
A snapshot of impactful engagements across DACH and beyond.
Deployed and tuned a reverse-proxy WAF protecting 47 citizen-services websites for a German federal state — zero-impact cutover, aligned to BSI Grundschutz.
A GAP analysis built on the team's own cost/effort delivery data, so recommendations could be re-prioritized to match a client's real budget and headcount — not a generic checklist.
Consolidated site-to-site VPN and firewall policy for 250 locations onto Palo Alto Networks/Panorama, cutting the ruleset from ~5,000 to 850 rules with full App-ID enforcement.