About

Moin! I’m David Leeuwestein — IT Security lead, outdoor enthusiast, and proud northerner. By day I help protect the IT of mid-sized companies in the region; in parallel, I’m pursuing a Master’s in IT Security at the University of Lübeck. At night I get involved in student politics, advocating for students’ interests at university level.

On this blog I share what I learn from working in IT security. All posts reflect my personal views — not those of my employer or my university.

Currently

As of April 2026

• Studies: Master’s course “Threat Modeling” at the University of Lübeck — an interesting contrast between STRIDE methodology in the lecture hall and what actually holds up in day-to-day operations.
• Work: Refreshing the backup strategy for a mid-sized client — moving from daily full backups towards a combination of incremental, immutable, and offsite.
• Reading: Sandworm by Andy Greenberg — background on NotPetya and the Sandworm group.
• Student politics: Preparing for the next round of council meetings, focused on study-reform proposals and exam regulations.

I update this list irregularly — if it hasn’t been touched in a while, my desk is probably busier than this page makes it look.