Almog Levi Email & Phone Number

Tel Aviv-Yafo, Il

Tel Aviv-Yafo, Tel Aviv District, Israel

Qradar & Rapid7:- Efficiently search for threats based on risk and alert criteria.- Tune and customize alerts to minimize false positives and enhance detection accuracy.- Conduct vulnerability assessments and prioritize remediation efforts.- Utilize automated scanning to identify potential security weaknesses.CrowdStrike & Carbon Black:- Monitor endpoints for signs of compromise and malicious activity.- Investigate and respond to alerts to mitigate potential threats.- Conduct in-depth forensic analysis and leverage behavioral analysis to detect advanced threats.SentinelOne, Cybereason, Palo Alto Networks, & Wiz:- Analyze endpoint data to identify potential security incidents.- Monitor and investigate suspicious activity across endpoints and network traffic.- Monitor cloud environments for security vulnerabilities and misconfigurations.- Perform security assessments and recommend improvements.Microsoft Defender & 365, Azure:- Detect user malicious activity and identify threats from user timelines.- Isolate compromised machines and remove malware from infected endpoints.- Search and analyze user details to support security investigations.Seraphic & Perception Point:- Investigate suspicious emails and escalate high-priority incidents.- Monitor security alerts and respond to potential threats.- Implement URL blocking to prevent access to malicious sites.Jira, Confluence, & Slack:- Communicate with team members to coordinate incident response activities.- Manage and track security incidents through ticketing systems and document procedures.- Create detailed reports for customers on incident findings and resolutions.

Israel

• Maintenance and management of QRadar on Cloud (QRoC) SIEM system.• Installation of Event Collectors - DLC (Disconnect Log Sources) in customers environment.• Connecting customers log sources to QRadar via different ways: Wincollect, Syslog, WEF-WEC.• Parsing of logs which are not supported by IBM QRadar.• Writing rules, correlations – alerts based on customers onboarding process, learning customersbusiness operation, security policy and processes.

Hacking Defined Experts, Penetration Tester

Soc Analyst

Web Security & Bug Bounty: Learn Penetration Testing In 2023