Creating custom, high-performing websites that drive business growth is at the core of what I do.My role involves designing and developing responsive, SEO-optimized sites with a focus on user experience and security. With my expertise in information security, I ensure robust and secure web solutions. I have delivered successful projects for esteemed clients like Bitdefender, Lia Yaffe, and Gal-Or Solar Systems.In addition, I'm a mentor to aspiring website builders. I offer comprehensive digital courses and 1:1 guidance, teaching essential skills such as self-marketing, effective work techniques, action methods, website design, and best practices for working with WordPress. My goal is to empower website builders to excel in their craft and achieve success in their own businesses.Explore my innovative web solutions at BM Studio and see how I can elevate your business.

• Management and maintenance of AWS & Azure• Qualys VMDR - Vulnerability Management, Detection, and Response• Qualys vulnerability to find out vulnerabilities in Web-based Applications• Analysis of security misconfigurations• Configuration of internal and external user account management (SSO/SAML & OIDC) and multifactor authentication (Onelogin & OKTA)• Monitoring with Logz.io & Datadog• Management of Sophos FW(UTM & XG)• Python & Bash scripting• Deployed and Configured Cloudguard Dome9 for full visibility and control of security and compliance in the environments• Deployed and Configured Lightspin for full visibility and control of security and compliance in the environments• Engage with IT, R&D, DevOps, Operation, and compliance teams to ensure requirements, policies, and adoption is executed with excellence.• CLI scripts to set up AWS resources VPC, EC2, AMI, Images, Redshift cluster, ELB, and automate the deployment & infrastructure• Configure AWS Cloudtrail & Azure Eventhub• Configure AWS Systems Manager, Load Balancers, S3 Buckets, Security Groups, IAM, DNS Route53, and others• Configuration of integration between systems• Troubleshoot issues regarding S3 buckets access for users and services and configure S3 bucket policies to resolve the issues• Manage users, groups, policies, roles, and keys using IAM and KMS console

• Setup SSL certificate• Implement WAF to protect the website• Implement Redis to reduce queries of the database• Building custom theme• Theme and plugin installation• Database management: MySQL• Managed website back-end including plugins, tools, and database• Monitor uptime, hosting, and databases to ensure site is performing at maximum capacity and handled troubleshooting• PHP and HTML development outside of WordPress for landing pages• Manage technical integration with third party services• Development expertise with custom post types, custom fields, plugins and themes for high-traffic Wordpress sites• Programmation languages: HTML, CSS, PHP, Javascript

• Establishment of a managed EDR• Bitdefender specialist• Monitoring Suspicious behavior of our customers networks and security access• Analysis of suspicious actions of files, user behavior and misconfigurations• Performing both internal and external security audits• Analyzing security breaches to identify the root cause• Continuously updating the company’s incident response and disaster recovery plans• Verifying the security of third-party vendors and collaborating with them to meet security requirements• Making vulnerability report and therapeutic approach with an emphasis on the reality of CVE• Barracuda & Cloudflare WAF manager• Management and maintenance of servers with an emphasis on information security• Management of Sophos FW(UTM 9 & XG) that includes setting rules, VPN's, setting up interfaces• Anti-Spam management: permitting / blocking addresses, monitoring, setting blocking / alerting rules• Manage Windows FW and TS Plus• Development the Israeli website of Bitdefender - https://bitdefend.co.il

• Establishment of Hyper-V, Oracle-level cloud servers• Manage Office 365 and work in Hybrid configuration with Exchange On-Premise server• GPO + AD Management & Windows Server 2008/2012/2016/2019• Managing Ubuntu Servers• Powershell & Bash Scripts• Management and maintenance of servers with an emphasis on information security• management of Sophos FW(UTM 9 & XG) that includes setting rules, VPN's, setting up interfaces• Anti-Spam management: permitting / blocking addresses, monitoring, setting blocking / alerting rules• Manage Windows FW, TS Plus and CMD communication and performance tests• Management of a comprehensive backup system for the company's customers via AhsayBackup, Acronis and Veeam• LiteSpeed Website Hosting

• Setup SSL certificate• Implement WAF to protect the website• Implement Redis to reduce queries of the database• Building custom theme• Theme and plugin installation• Database management: MySQL• Managed website back-end including plugins, tools, and database• Monitor uptime, hosting, and databases to ensure site is performing at maximum capacity and handled troubleshooting• PHP and HTML development outside of WordPress for landing pages• Manage technical integration with third party services• Development expertise with custom post types, custom fields, plugins and themes for high-traffic Wordpress sites• Programmation languages: HTML, CSS, PHP, Javascript

Hands-On in Hackerone Bug Bounty program.as part of my job I was exposed the worldwide Hyatt hotels.• Reveal the original IP address of the service• Reflected XSShttps://hyatt.com

As part of my job I found a Insecure direct object references(IDOR)I've obtained through this vulnerability access to authorized users zone by input modificationhttps://pes-israel.co.il

Professional training of SAP software for officers, permanent personnel, soldiers and IDF civilians