– present
Research intern
Radboud Digital Security
- Research on the privacy and security implications of modern web technologies, focused on online tracking and browser-based measurement.
Elmar Tromp
Cyber security from SIEM to ISMS. Engineering, governance, and privacy research.
- LinkedIn: www.linkedin.com/in/elmartromp
- Email: contact@elmartromp.dev
- GitHub: github.com/elmartromp
- GitHub (Roseman Labs): github.com/elmartromp-rl
CV
Where I've worked, what I've studied, and the tools and methods I use.
For a PDF, use your browser's print dialog and choose "Save as PDF".
Experience and education
Work
– present
Working student, Cyber Security
Roseman Labs
Roseman Labs lets organisations collaborate on sensitive data through encrypted computing, in areas such as national security, anti-financial crime, and healthcare.
- Lead assessor and coordinator for the internal Cyber Essentials self-assessment, aligning with the UK government-backed certification scheme and its technical requirements.
- Support the ISMS and GRC work by translating security and privacy requirements into practical controls and documentation, and help prepare for external security and privacy assessments.
- Shape and implement the SIEM monitoring and use-case strategy, working with DevOps to integrate monitoring into the product.
- Run ad-hoc penetration tests and security reviews of platform components.
– present
Teaching assistant
Radboud University
- Computer Security (since January 2025) and Algorithms and Data Structures (since September 2025).
- Guide students through practical assignments, from troubleshooting code to structuring their approach.
–
Bachelor thesis intern
Radboud Institute for Science Education
- Researched how digital literacy is already reflected in the teaching of Dutch in secondary schools, and how to make it more visible.
–
Student teacher, Informatics
CSG Het Streek, Ede
- Taught Informatics to HAVO and VWO students: prepared and delivered lessons and guided them through technical concepts.
–
Project staff, XR development
EDT | Educational Design & Technology, Radboud University
- Built educational XR projects with Godot, Unreal Engine 5, and Blender.
- Designed and delivered VR workshops for Radboud University students.
–
Team leader
Jumbo Supermarkten, Wageningen
- Led evening and weekend shifts, coordinated daily store operations, and supported colleagues on the floor.
- Acted as deputy store manager when needed: prioritising issues, resolving escalations, and keeping procedures followed under time pressure.
–
Store employee
Jumbo Verberne, Wageningen
- Supported daily store operations, customer service, and inventory replenishment.
–
Mail carrier
Joh. van de Kamp B.V., Wageningen
Study
– present
MSc Cyber Security (Research Master)
Radboud University
- Two-year Research Master’s combining technical and organisational perspectives on cybersecurity and privacy.
- Coursework in software and network security, applied cryptography, privacy-enhancing technologies, organisational security, hardware and implementation security, and privacy law and society.
- Further focus on the security and privacy of machine learning, online tracking, physical attacks on secure systems, information retrieval, and statistical and causal inference.
–
BSc Computing Science
Radboud University
- Specialised in Cyber Security and Data Science: cryptography and operating-system security, web and network security, and big data and data mining.
- Theoretical foundation in discrete mathematics, probability, algorithms, complexity, computability, semantics, and logic.
- Practical courses in programming paradigms, operating systems, software engineering, processors, databases, and requirements engineering, plus the societal and legal aspects of computer science.
- Bachelor thesis on digital literacy in Dutch secondary education.
–
Educational minor in Informatics
Radboud Docenten Academie
- Pedagogy for secondary education and Informatics didactics: designing, delivering, and evaluating computer science lessons.
- Teaching internship in Informatics at CSG Het Streek, Ede, with hands-on experience in classroom teaching, assessment design, and mentoring students.
- Completed with a high final evaluation, earning a second-degree teaching qualification in Informatics.
–
VWO Gymnasium (pre-university education)
RSG Pantarijn
- Subjects included Mathematics, Physics, Chemistry, Computing Science, Dutch, English, and Latin.
- Member of the sports committee and computer science tutor.
–
Primary school
Kardinaal Alfrinkschool
- Member of the school theatre group (KAT) and took additional courses at Pallas Athene College.
Projects
Project · Privacy research
NEL privacy audit
Client-side measurement of Network Error Logging during my research internship at Radboud Digital Security. A Chromium-based tool records which NEL policies a site and its third parties store, then probes each one: self-expiring nftables DNAT rules redirect the probed host to a local fault server that serves fake error and success responses, so the browser queues reports that never leave the machine.
- Python
- Playwright
- Chromium
- nftables
- Fault injection
- Network namespaces
Project · Building things
This website
A personal site with zero JavaScript, no third-party requests, and a strict Content Security Policy. Built with Hugo and served as static assets from Cloudflare Workers.
- Hugo
- CSS
- Cloudflare Workers
- CSP
Toolbox
Governance and compliance
- ISMS
- GRC
- Risk assessment
- Gap analysis
- Cyber Essentials (UK)
- Security and privacy assessments
- Organisational security
- Policy and documentation
- AI law
- Ethics in computing
Security operations
- SIEM
- Microsoft Sentinel
- Microsoft Defender
- Azure Monitor
- Log analysis
- Anomaly detection
- Security automation
Security engineering
- Penetration testing
- Security reviews
- Web security
- Network security
- Software security
- Operating systems security
- Exploitation and memory safety
- Hardware and implementation security
- Side-channel and fault attacks
- Applied cryptography
- Security requirements
Privacy
- Data privacy
- Privacy by design
- Privacy-enhancing technologies
- Online tracking
- Identity management
Research
- Research methods
- Measurement studies
- Academic writing
- Literature seminars
Data and machine learning
- Artificial intelligence
- Data mining
- Data analysis
- Big data
- Statistical inference
- Causal inference
- Information retrieval
Programming languages
- Python
- C
- C++
- Java
- Scala
- Haskell
- TypeScript
- JavaScript
- PHP
- HTML
- CSS
- SQL
- R
- Assembly
Cloud and platform
- Microsoft Azure
- Microsoft Entra ID
- Azure CLI
- Cloud security
- Linux
- Git
- GitHub Actions
- CI/CD
Computer science
- Algorithms and data structures
- Software engineering
- Requirements engineering
- Information modelling
- Databases
- Information systems
- Operating systems
- Processors and computer architecture
- Functional programming
- Object-oriented programming
- Parallel programming
- Computability and complexity
- Formal semantics
- Automata and formal languages
Mathematics
- Discrete mathematics
- Combinatorics
- Logic
- Linear algebra
- Calculus
- Probability theory
- Statistics
Teaching
- Lesson design
- Assessment design
- Mentoring
- Workshops
- Subject didactics for informatics
- University teaching
Also listed under another group
Governance and compliance · Security operations · Security engineering · Privacy · Research · Data and machine learning · Programming languages · Cloud and platform · Computer science · Mathematics · Teaching