Portfolio CV

LUCA RAMSEYER

Systems · Cybersecurity · Software

I work in security operations and software, with a focus on efficient systems, useful automation, and work that respects people’s time.

Get in touch View work

01 About

Calm, precise work across infrastructure, security, and software.

I work in the Security Operations Center, where I focus on incident response and day-to-day security operations. I also build automation with Azure Functions and Logic Apps to streamline recurring processes and remove unnecessary manual work.

Outside of daily operations, I build open-source tooling for analysts. My most recent project is Raml KQL, a privacy-first desktop app that runs any KQL query against as many Log Analytics and Microsoft Sentinel workspaces and tenants as you need. It gets as close as possible to querying in a Defender multi-tenant organization, without needing one.

I care about efficiency, practical value, and using technology in ways that save time for everyone involved.

02 Focus

Three areas of practice.

Systems

Building structured, dependable systems that reduce friction and support reliable operations.

Cybersecurity

Working in security operations and incident response with a focus on clarity, speed, and resilience.

Software

Building practical software and automation, from Azure Functions and Logic Apps to open-source desktop tools like Raml KQL, to save time and improve consistency.

03 Selected work

Current projects.

Raml KQL

Run one KQL query across many Log Analytics and Sentinel workspaces, tenants and accounts, with results merged in one table. A desktop app for teams without a Defender multi-tenant organization. No telemetry, no server, your own permissions.

Open source, MIT
No telemetry
macOS, Windows, Linux
kql.raml.ch
GitHub repository

Raml Health

Daily Sleep, Recovery and Strain scores from your watch or ring, plus a strength logger with an Apple Watch app. Your health data stays on your iPhone.

iPhone, Apple Watch
English, German
No tracking
App Store