Florian Roth
Vice President Research And Development at Nextron Systems
Frankfurt, Hesse, Germany
Summary
🤩
Rockstar🎓
Top School
Top expert inCybersecurity Analytics and Threat Intelligence
Florian Roth is a seasoned security engineer and research leader with 13+ years of experience, currently serving as Vice President of Research and Development at Nextron Systems. He is the creator and maintainer of widely used open-source DFIR tools and signatures—most notably Sigma, THOR, LOKI, yarGen and a corpus of over 16,000 YARA rules—bridging threat research, detection engineering and incident response. Florian combines hands-on Rust, Python and Go development with deep operational insight, contributing to high-impact projects like the Sigma rule repository and a Log4Shell detector. His work emphasizes practical, defender-focused tooling and simulation (e.g., APTSimulator), improving detection coverage and real-world robustness. Based in Frankfurt, he pairs academic training in media system design with long-standing consulting experience at Siemens and BSK, bringing both systems thinking and adversary emulation to R&D. Outside of work he’s an avid Twitter user, green tea drinker and sports-car enthusiast—small habits that mirror his focus on speed and clarity in tooling.
13 years of coding experience
16 years of employment as a software developer
Computer Science Expert, System Integration, 1.3, Computer Science Expert, System Integration, 1.3 at ATIW-Berufskolleg PaderbornMaster's degree, Media System Design, Master's degree (German Diplom), Master's degree, Media System Design, Master's degree (German Diplom) at Hochschule Darmstadt
English, German, Spanish
Github Skills (62)
mitre-attack10
c-language10
python10
apidoc10
wp-api10
it-security10
audit10
linux10
winapi10
batchfile10
sia10
security10
cobalt10
script10
threat-intelligence10
Programming languages (23)
Github contributions (5)
Neo23x0/yarGen
Dec 2013 - Feb 2022
yarGen is a generator for YARA rules
Role in this project:
Back-end Developer
Back-end DeveloperContributions:9 releases, 1 review, 218 commits in 8 years 2 months
Contributions summary:Florian contributed to the development of a YARA rule generator. Their primary contributions included bug fixes and enhancements to the `yara-brg.py` script, focusing on string extraction and filtering, as well as rule name and file name processing. The user also added and improved the generation of YARA rules and added functionality for processing different file types.
yarapythonmalwaremalware-researchmalware-analysis
Neo23x0/Raccine
Oct 2020 - Aug 2022
A Simple Ransomware Vaccine
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:41 releases, 20 reviews, 402 commits in 1 year 10 months
Contributions summary:Florian's contributions focused on enhancing the security features of the ransomware vaccine, Raccine. They extended the whitelist to include specific processes, implemented functionality to kill processes based on parent-child relationships, and incorporated Yara rule matching to identify malicious command-line patterns. The user also added improved checks for detecting malicious activity and added a series of commands that can be executed by other programs to perform malicious activities. These improvements increased the breadth of threats detected and mitigated by the Raccine project.
vaccineransomwareinfosecmalwarethreat-intelligence
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.