Worked at Varonis cloud security research team● Collaborated with development and product teams on Varonis DA Cloud, a Cloud and SaaS security system.● Developed high-level designs and conducted research on AWS, Azure cloud platforms, and SaaS applications for integration into the Varonis security system.● Defined key resources, services, and attributes of Cloud platforms and SaaS applications and specified API calls for data retrieval.● Developed detection rules based on activity logs and research of detection techniques, mapping them to MITRE ATT&CK TTPs.● Identified misconfigurations and defined remediations following vendor documentation, industry best practices, and CIS benchmarks.● Assigned relevant compliance framework controls to detection rules and misconfigurations, ensuring customers' compliance with regulatory requirements. Implemented security controls in line with industry standards, including NIST, CIS, CSA, ISO 27001, HIPAA FedRAMP and others.● Researched known vulnerabilities in services and developed protection strategies.● Conducted product research to identify potential new features and areas for system enhancement.● Identified and reported broken access control vulnerabilities in a researched SaaS application.● Conducted threat hunting analysis to identify anomalies and researched detection techniques. Analyzed adversary techniques and attack lifecycles to enhance threat detection capabilities.● Remained updated with the latest security threads, trends, and industry standards by engaging in continuous learning and professional growth.