About Me
Senior Research Scientist at RISE and cybersecurity professional with over a decade of experience securing critical infrastructure and leading teams within complex, multi-stakeholder environments. Expert in coordinating technical and regulatory teams to bridge the gap between engineering execution and strategic governance, ensuring robust alignment with ISO/IEC 27001, GDPR, and emerging EU regulations. Proven ability to translate regulatory frameworks into practical, engineering-driven solutions for cross-domain environments. Recognized for orchestrating secure architecture design, cyber resilience, and governance by aligning cross-functional stakeholders to drive informed, risk-based decision-making. Collaborative team player and communicator, dedicated to fostering a security-first culture and empowering teams to navigate the evolving cybersecurity landscape.
Expertise Highlights - Technical and Leadership Skills
Roles: Security Architect, Working Group/Work Package/Task Leader, Principal Security Engineer, Research Scientist
Focus domains: IT/OT manufacturing, 5G/6G and NGWN, EV/SDV security, cloud-edge-IoT, Data spaces, Digital twins
Core strengths: Cyber Resilience & Security hardening, Secure-by-design architectures, Threat modeling & AI/ML, Applied cryptography, Privacy engineering, Secure data lifecycles, identity & access control
Governance & policy: Regulatory alignment and compliance engineering (NIS2, AI Act, ISO/IEC 27001), security roadmaps, requirements, and governance for large-scale pilots and testbeds
Leadership & collaboration: Cybersecurity architectural guidance, Cross-functional coordination, Technical guidance and mentoring, EU working groups and projects (Horizon, Digital Europe, COST); team-first, stakeholder-driven, cross-functional coordination
Funding: Co-secured research funding (≈ SEK 10M) for EU and national R&I initiatives
Certification: ISO/IEC 27001 Lead Auditor
Media: Featured in Wired, NBC News, and The Atlantic
Location: Stockholm, Sweden (EU/remote collaboration)
Current Projects (Selection)
-
– Current
TWINLOOP - Secure Digital Twin Framework & TwinOps for Software-Defined EVs [Horizon Europe 🇪🇺]
Role: Task Leader (RISE) & Secure Systems Architecture
Role Description: Design and deliver the secure reference architecture for an open, interoperable Digital Twin framework and TwinOps lifecycle for Software-Defined Vehicles (SDVs), enabling secure cross‑OEM data exchange.
Keywords / impact: Secure reference architecture, Zero Trust, Digital Twin/TwinOps, DevSecOps, threat modeling, data protection, edge-cloud integration; enables secure cross-OEM data exchange.
Consortium / WG: multi‑stakeholder research & industry consortium (see project page)
Funding & call: Horizon Europe (2ZERO Partnership) - Advanced digital development tools for SDVs - HORIZON-CL5-2024-D5-01-05
Learn more: twin-loop.eu ·
-
– Current
NexusForum Research & Innovation Roadmap, Cognitive Computing Continuum [Horizon Europe 🇪🇺]
Role: Working Group Co‑Leader - Cybersecurity for the Cognitive Computing Continuum Roadmap
Role Description: Leading cross-sector collaboration to define security, resilience, and data-governance R&I priorities for the Cloud–Edge–IoT Continuum, producing policy-oriented guidance and prioritized research actions for EU stakeholders.
Keywords / impact: Roadmap leadership, cybersecurity governance, cloud-edge-IoT continuum, Zero Trust, data governance, PQC, confidential computing; produced EU R&I priorities and policy guidance.
Consortium / WG: 120+ organisations & stakeholders / 25+ WG participants
Funding & call: Horizon Europe (HORIZON) - Coordination and Support of Cognitive Computing Continuum research and policy (CSA) - HORIZON-CL4-2023-DATA-01
Learn more: NexusForum.eu · NexusForum R&I Roadmap (first draft, Mar 2025)
-
– Current
CitCom.ai (AI TEF SCC) - Digital Europe 🇪🇺 & Vinnova 🇸🇪
Role: Project Contributor - Task 3.3: Cybersecurity, Cyber Resilience & Procurement/Governance
Role Description: Design and validate cybersecurity controls and interoperability requirements for TEF Data Spaces and Edge/IoT pilots, focusing on connector hardening, MIM6-aligned requirements, procurement alignment, and AI/ML security.
Keywords / impact: Data Spaces connectors, MIM6, procurement, AI/ML security, threat modeling, secure-by-design; hardened TEF pilots and procurement readiness.
Consortium: 32 partners across 11 EU member states
Sweden Budget: 18 M SEK
Learn more: CitComTEF · RISE project page · Vinnova
Learn more & contacts: Project page
-
– Current
Behavioral Next Generation in Wireless Networks for Cyber Security (BEiNG-WISE) [COST Action 🇪🇺]
Role: Working Group Leader - Cybersecurity in Emerging Wireless Communications
Role Description: Coordinate WG activities focused on security and trust in next-generation wireless (5G/6G), organising workshops, training events, and cross-disciplinary research to support standards and R&I agendas.
Keywords / impact: 5G/6G security, physical-layer security, trust & privacy, AI-enabled defenses, standards input; built WG outputs and training for EU stakeholders.
Consortium / Network: European research & industry network (multi-country participation)
Funding Agency: COST Action (CA22104)
Learn more: beingwise.eu · COST Action CA22104
-
–
Datadelning i en digitaliserad köttkedja [FORMAS 🇸🇪]
Role: Project Contributor - Researcher
Role Description: Research on sustainable data sharing and digital transformation in industrial systems, focusing on secure data governance, privacy-preserving sharing mechanisms, and analytics to support data-driven decision-making across the meat supply chain.
Keywords / impact: Data governance, privacy-preserving sharing, secure data pipelines, interoperability, analytics; enabled secure data sharing across supply-chain partners.
Consortium / WG: Multi‑partner Swedish consortium (industry, research, public bodies)
Funding agency: Formas - Swedish Research Council for Sustainable Development
Budget: 11.8 M SEK
Learn more: Project page · YouTube video
Professional Experience
-
– Current
Cybersecurity Architect and Senior Researcher - RISE Research Institutes of Sweden
As a Senior Research Scientist and Cybersecurity Architect at RISE, I specialize in cybersecurity and privacy (data protection) to ensure compliance with ISO/IEC 27001, the AI Act, GDPR, and other security standards.
Role focus:
- Develop and implement secure architectures for critical infrastructure across industries.
- Evaluate third-party security risks and conduct vendor security assessments to strengthen supply chain security.
- Advise on cybersecurity governance best practices and design risk mitigation strategies to enhance resilience.
- Integrate DevSecOps principles into development workflows to ensure security by design.
- Collaborate with cross-functional teams to drive cybersecurity innovation and secure digital transformation.
Technology and scientific contributions: I contribute to cybersecurity research and innovation, focusing on secure, resilient system architectures that enable trustworthy, privacy-compliant information sharing across:
- Electric vehicles and smart mobility
- Next-generation wireless networks (5G/6G)
- Manufacturing and Industry 4.0
- Data spaces and secure digital ecosystems
- Livestock supply chains and agritech
Through research, industry collaboration, and applied innovation, I help organizations strengthen cybersecurity, enhance privacy, and drive secure digitalization.
-
–
Scientist, Secure Communications and Cybersecurity - KTH Royal Institute of Technology
As a Postdoctoral Researcher in Cybersecurity, I contributed to the development of secure architectures for smart mobility and trustworthy information-sharing systems. My work focused on analyzing, designing, and evaluating privacy-preserving V2X communication to ensure robust and resilient system architectures in connected and autonomous mobility.
Key contributions and responsibilities:
- Conducted research on secure vehicular architectures and networking protocols.
- Designed privacy-preserving communication systems and protocols for secure V2X data exchange.
- Authored a top-tier IEEE IoT journal publication, contributing to advancements in cybersecurity for smart mobility.
- Developed teaching materials for cybersecurity courses and delivered training on applied cryptography and secure networking.
- Supervised and mentored MSc and BSc students.
-
–
Scientist, Secure Communications and Architectures - University of Luxembourg
As a Postdoctoral Researcher at SnT, I focused on end-to-end encryption protocols, threat analysis, and cryptographic solution design for secure communication applications. My role involved analyzing security threats, evaluating cryptographic mechanisms for data protection and compliance, and contributing to the design and assessment of security solutions for enterprise applications.
Key contributions and responsibilities:
- Conducted security evaluations for enterprise applications, ensuring robust end-to-end encrypted communication.
- Analyzed and assessed cryptographic mechanisms to enhance security, privacy, and regulatory compliance.
- Designed and implemented threat models to evaluate vulnerabilities in encrypted communication systems.
- Managed project deliverables, ensuring alignment with security requirements and research objectives.
- Led research dissemination efforts, presenting findings at international conferences and contributing to cybersecurity standards.
- Organized and coordinated CPDP conference events, fostering discussions on emerging privacy and security challenges.
Key outcomes and collaborations:
- Contributed an Internet-Draft to the IETF PEARG group.
- Collaborated with research institutions including COSIC@KU Leuven and DCS@University of Manchester.
- Completed a EUR 300K-funded research project with SnT@University of Luxembourg and pEp.
This role reinforced my expertise in secure communication systems, cryptographic protocols, and cybersecurity research, advancing privacy-preserving technologies for the digital ecosystem.
-
–
Scientist, Secure Systems Architectures - KU Leuven (COSIC)
I was a PhD candidate at COSIC (Computer Security and Industrial Cryptography) at KU Leuven, Belgium, advised by Prof. Bart Preneel.
Key research projects and contributions:
- Third-party application security risks and privacy violations (Facebook-Cambridge Analytica): Investigated privacy risks in Facebook's third-party app ecosystem, focusing on APIs and permission systems. Published multiple research papers in top-tier conferences and journals, with media attention related to the Cambridge Analytica scandal. Collaborations: CrySyS Lab @ BME, CITIP @ KU Leuven.
- Privacy-preserving protocols for physical asset-sharing (V2X): Designed secure and privacy-preserving V2X communication protocols. Integrated access control with financial operations to ensure accountability in mobility applications. Resulted in multiple peer-reviewed publications.
- Industrial project - identity management and SSO security: Designed and developed revocation mechanisms for long-lived assertions in Single Sign-On systems. Delivered a proof-of-concept software solution as part of the iMinds@COSIC research initiative.
Key responsibilities and outcomes:
- Led research on third-party application security risks, including the Facebook-Cambridge Analytica case.
- Designed privacy-preserving data-sharing protocols for secure and accountable transactions.
- Developed identity and access management frameworks to enhance authentication security.
- Managed project deliverables, ensuring alignment with security, privacy, and compliance objectives.
This experience strengthened my expertise in cybersecurity, privacy, and identity management, contributing to the advancement of secure digital ecosystems.
-
–
Back-end Web Developer - Starfish Web & Art
Back-end web developer at Starfish Web & Art, delivering Drupal and CS-Cart solutions across e-commerce, portals, blogs, and forums.
Selected projects (development contributions):
- E-commerce: greekpharm.gr (CS-Cart Pro), 3shops.gr (CS-Cart Pro)
- Portals, news, forums: foodspot.gr (Drupal), anotherdrop.gr (in progress), fex.org.gr (Drupal), ethnikos-mgs.gr (Drupal), comedyfest.gr (Drupal), standupcomedy.gr (Drupal), radioxanthi.gr (Drupal), dimosmykis.gr (Drupal)
- Academia portals: arch.duth.gr (Drupal), env.duth.gr (Drupal)
-
–
Technical Support Analyst - Informatica S.A.
Supported municipal software products, handling operator requests, software updates, and ongoing maintenance.
- Maintained MS SQL Server instances and .NET client applications.
- Supported accounting, protocol, registration office, and vehicle management systems.
-
–
Teacher (New Technologies & Web Programming) - Ministry of Education / General Secretariat for Lifelong Learning
Taught primary and secondary education programs and adult lifelong learning courses using new technologies.
- Delivered instruction in mathematics, geography, and language with technology-enabled teaching methods.
- Taught web programming (PHP, SQL) in lifelong learning programs.
-
–
Military Service (Private) - Hellenic Armed Forces
Completed obligatory national military service with a focus on telecommunications. Received hands-on training with military communication systems and operated as a member of a disciplined, collaborative team.
Education
- PhD, Secure and Privacy-Preserving Systems Architectures (automotive focus) - KU Leuven, Belgium. Thesis: “Analysis and Design of Privacy-Enhancing Information Sharing Systems” (Supervisor: Prof. Bart Preneel)
- MSc, Digital Systems Security - University of Piraeus, Greece. Thesis: “Privacy-preserving Reputation System for Online Social Networks” (Supervisor: Prof. Bart Preneel, ESAT COSIC)
- Diploma, Information & Communication Systems Engineering - University of the Aegean, Greece. Thesis: “Open Architecture for Connection Control Management on Wireless--ATM Networks” (Supervisor: Prof. Georgios Kormentzas; collaboration with NCSR “Demokritos”)
Certifications & Training (selection)
- ISO/IEC 27001:2005 Lead Auditor - TÜV NORD, Athens, Greece
- Advanced Cybersecurity Course - ENCS, The Hague, Netherlands
- Secure Application Development - SecAppDev, Leuven, Belgium
- Modern pedagogical and teaching methods in primary education - Institute der KPH Graz, Austria
Languages
- English (Fluent)
- Greek (Native)
- Swedish (A2)
Invited Talks (selection)
- 2023–2025: WG Co-Leader “Cybersecurity in emerging wireless communications” - BEiNG-WISE
- 2021: “Engineering Privacy for Vehicle-to-Cloud Infrastructure” - Privacy Engineering Group
- 2019: “Privacy-enhancing Sharing Platforms” - University of Manchester
- 2018: “Privacy in Car Sharing Systems” - IPEN Workshop, EDPS
- 2018: “Privacy-Preserving Information Sharing” - Chinese Academy of Sciences
- 2017: “Car sharing without a physical key: a security and privacy perspective” - CrySyS Lab @ BME
Research Visits & Collaborations
- 2020: COSIC@KU Leuven - Research visit on secure V2X systems and privacy-preserving off-chain smart contract protocols (FNR INTER / FWO proposal collaboration).
- 2019: DCS@University of Manchester - Research visit on secure V2X systems.
- 2019: FCA Bank (Turin, Italy) - Industry collaboration discussions on secure vehicular sharing systems.
- 2017: CrySyS Lab @ BME - Research visit on interdependent privacy in Facebook apps (FWO research-visit grant).
Awards & Grants (selection)
- 2017: FWO research-visit grant (COSIC@KU Leuven ↔ CrySyS Lab @ BME).
Media Attention
Research featured in major international outlets related to privacy, security, and the Cambridge Analytica scandal.
- Wired: The Facebook privacy settings that doesn’t do anything at all - March 2018
- NBC News: Researchers say it was easy to take people’s data from Facebook - March 2018
- France24: Cambridge Analytica : le scandale qui fait trembler l’empire Facebook - March 2018
- Medium: The Graph API: key points in the Facebook and Cambridge Analytica debacle - March 2018
- AOL: Consent & privacy coverage (Yahoo/AOL) - March 2018
- Cadenaser: Cambridge Analytica: efectos y alcance - March 2018
- The Atlantic: What Took Facebook So Long? - March 2018
- Nepszava: Zuckerberg bíróság előtt a Facebook-ügyekben - March 2018
- COSIC blog: Collateral damage of Facebook apps - March 2018
- CrySyS lab blog: Interdependent privacy and third-party apps on Facebook - March 2018
- iAfrican: Collateral damage of third-party apps on Facebook (republished) - March 2018
- Blog post (summary): Collateral Damage Research Summary - March 2018
Selected Publications
Towards Empowering Stakeholders Through Decentralized Trust and Secure Livestock Data Sharing (2025)
Emerging Cybersecurity Paradigms in Wireless Networks: Physical Layer Innovation, Trust, and AI-Enhanced Defenses (2025)
Drowsiness and Fatigue Recognition Systems for Connected Vehicles, 6G and the EU AI Act (2025)
IEEE EuCNC/6G Summit DOI:10.1109/EuCNC/6GSummit63408.2025.11037012
HERMES: Scalable, Secure, and Privacy-Enhancing Vehicle Access System (2021)
IEEE Internet of Things Journal · DOI:10.1109/JIOT.2021.3094930
Collateral damage of Facebook third-party applications: a comprehensive study (2018)
Academic and Other Services
Event organizer:
- 2024: Open Industry Day on 5G/6G: use-cases, cyber-resilience and sustainability
- 2019: CPDP Event: “Private messaging: why should you care?”
Program Committee Memberships:
- 2026: Cryptography and Communications (Springer)
- 2025: IEEE IoT, CPDP, IEEE OJ-COMS, Cryptography and Communications (Springer)
- 2024: PoPETS
- 2023: PoPETS
- 2022: PoPETS
- 2021: PoPETS, Computers & Security, IEEE IoT, Journal of Cybersecurity and Privacy
- 2020: PoPETS, Computers & Security, ACM Transactions on the Web
- 2019: PoPETS, Computers & Security, DPM@ESORICS, CPDP
- 2018: ICISSP
- 2017: ICISSP
- 2016: ICISSP
External Reviews:
- 2021: IEEE Security & Privacy
Teaching & Supervision
-
– Current
PhD Supervision
- PhD Supervisor - S. Mohammadi, Industrial PhD Student at RISE
-
PhD External reviewer / examiner
- 2024: Rauli Kaksonen, "Transparent and tool-driven security assessment for sustainable IoT cybersecurity", University of Oulu, Finland
- 2025: Liu Shuaishuai, "Interdependent Privacy: Modeling, Measurement, and Mitigation", Budapest University of Technology and Economics, Hungary
-
–
NSS@KTH - Teaching Assistant & MSc Thesis Supervision
- Teaching Assistant at NSS@KTH
- Networked Systems Security (NSS): Fundamentals of secure modern networked systems
- Building NSS (BNSS): Implementation of secure networked systems
- Advanced NSS (ANSS): Engineering of emerging secure networked infrastructures
- MSc Thesis Supervision:
- 2021–2022: A. Kotsias - “Layer 2 Smart Contracts for Secure Vehicular-Sharing Systems”
- 2020–2021: S. Rabat - “Encrypted Documents Retrieval from the Cloud with Searchable Encryption”
- 2021: J. Shan - “Secure Vehicular Sharing Systems Implementation”
- Teaching Assistant at NSS@KTH
-
–
COSIC@KU Leuven - MSc Thesis Supervision
- 2019–2020: D. De Troch - “dPACE: A Decentralized Privacy-Preserving, yet Accountable Car Sharing Environment”
- 2017–2018: A. Madhusudan - “Applying Smart Contracts to Secure Car Sharing Systems”
- 2017–2018: D. Reardon - “Prevalence of Device Fingerprinting in Browser Extensions”
- 2016–2017: S. Dhooghe - “Applying Multiparty Computation to Car Access Provision”
- 2015–2016: T. Bertels - “Design of a Pairing Protocol for the AR.Drone 2.0”
- 2015–2016: K. Domin - “Security Analysis of the Drone Communication Protocol: Fuzzing the MAVLink Protocol”
-
–
Educator & Instructor - Ministry of Education, Police Academy, Lifelong Learning
- Educator & Instructor - Ministry of Education, Police Academy, Lifelong
Learning
- Web Programming: PHP, SQL, and web technologies
- Application Development: Algorithmic logic and programming, university entrance prep
- ICT Technologies: CS principles, mathematics, ICT-enhanced learning
- Microsoft Office Suite: Training & certification (Police Academy & private sector)
- Orfeas Choir: Greek repertoire, Bass voice, Board Member - Stockholm, Sweden [Website]
- Aerial Photography & Editing:
@aion_canvas
- First Aid: National Center for Emergency Assistance training (2011)
- Pool Lifeguard: Certified by Hellenic School Lifeguard (2009)
- Athlete: Former Water Polo & Volleyball
- Student Union: Board Member, ICSE (2000–2002)
- Email: iraklis.symeonidis@ri.se
- Phone: +46 73-077 43 52
- Location: Isafjordsgatan 22, 16440 Kista, Stockholm, Sweden
- LinkedIn: Iraklis Symeonidis
- RISE Profile: RISE Webpage
Personal Interests
Contact
- Educator & Instructor - Ministry of Education, Police Academy, Lifelong
Learning