{% extends "base.html" %} {% block main %} {% set d = load_data(path="data/cv-en.json") %}

CV

Aalborg, Denmark asger@weirsoe.dk LinkedIn

Technical Solution Architect who has worked on Danish national e-invoicing infrastructure since 2021. I have led responses to production outages and security vulnerabilities, coordinating engineers, hosting providers and the client, and I built an information security management system around ISO/IEC 27001 with procedures for incident response, escalation and post-incident review. M.Sc. in Computer Science, specialising in security in distributed systems, and currently studying business administration alongside work.

Areas of expertise

I work with electronic invoicing and e-procurement. At CGI I helped develop the open source eDelivery solution for NemHandel, built on the open source access point Oxalis (Java). Today I am a Technical Solution Architect at Digisense A/S, working on solution architecture in the same field: Peppol (BIS, Access Point and eDelivery/AS4), NemHandel, OIOUBL/UBL and the European e-invoicing standard EN 16931.

{% for k in ["Peppol", "Peppol Access Point", "Oxalis", "NemHandel", "E-invoicing", "OIOUBL / UBL", "eDelivery (AS4)", "EN 16931", "E-procurement"] %} {{ k }} {% endfor %}

Incident response and compliance

When something breaks in production, the technical fix is only half of it. The other half is getting the right people moving, keeping the client informed and learning from it afterwards. During the July 2024 CrowdStrike outage a database failure hit our hosted production platform just as most of the team’s workstations went down. As tech lead on CGI’s NemHandel team I coordinated by phone with the hosting provider and the one developer whose machine still worked, and the database was restored that afternoon. When the critical SnakeYAML vulnerability CVE-2022-1471 affected the NemHandel reference implementation, we notified the client immediately, mitigation guidance went out to operators, and we shipped a fixed release within two weeks.

At Digisense I built the information security management system around ISO/IEC 27001: incident management and escalation procedures, post-incident reviews and an incident register. That is the work that has to be in place before anything is on fire, so nobody has to invent the response as it happens.

Experience

{% for e in d.work %}

{{ e.org }} · {{ e.place }}

{% for r in e.roles %}
{{ r.title }} {{ r.when }}
    {% for d in r.details %}
  • {{ d }}
  • {% endfor %}
{% endfor %}
{% endfor %}

Education

{% for u in d.education %}

{{ u.what }}

{{ u.when }}

{{ u.where }}

{% if u.note %}

{{ u.note }}

{% endif %}
{% endfor %}

Publication

CGAAL: Distributed On-The-Fly ATL Model Checker with Heuristics

Carlsen, Frydenskov, Jensen, Rasmussen, Sørensen, Weirsøe, Jensen & Larsen. EPTCS, vol. 390 (2023), pp. 99–114. arXiv:2310.00999

Skills

{% for s in d.skills %}

{{ s.k }}

{% for k in s.v %}{{ k }}{% endfor %}
{% endfor %}

Languages

Projects and interests

I run a self-hosted Proxmox environment with around 50 containers and virtual machines, single sign-on through Authentik, central logging and monitoring. My family uses it every day. I have contributed to qutebrowser and Stregsystemet, and I am a licensed radio amateur (call sign OZ0AGW).

{% endblock %}