- As a Penetration Tester, I specialize in conducting tailored assessments for web and mobile applications, aligning my approach with the unique needs of medium and large enterprises.- In leading vulnerability assessments, I collaborate closely with the client's development team to prioritize and validate high-risk findings, culminating in the creation of effective mitigation plans.- performing penetration testing on infrastructure that include Active Directory and cloud to gain high access privilege using lateral movement and privilege escalation techniques including password spraying, pass-the-hash, Kerberoasting, Abusing ACLs, and more.- Conduct Vulnerability assessments on O365 and collaborate with clients developers staff to rank and validate high risk findings and develop mitigation plans.

-Perform Web-Application testing,Mobile application,Desktop application for medium and large companies. (manually and using tools such as: Burp, SqlMap, GOBuster, ffuf, Nuclie).-Conduct Vulnerability assessments and collaborate with client’s developers staff to rank and validate high risk findings and develop mitigation plans.Using advanced techniques, Privilege escalation, exploitation, Recon & enumeration, security evasion, etc).-As a member of the PCI team Accountable for conducting penetration testing to obtain PCI certification for our clients.-Produce reports that provide details about security breaches and the consequential damages they caused.

Experience working with SIEM - Qradar, Mcafee, Splunk, ArcSight, Azure Sentinel systems. • Gathering, analyzing, and processing alerts from many systems of cyber protection, handling cyber events in real-time (Isolate workstations, remove malicious files, block IPs, etc.), and writing event reports if necessary. • Experience with Mail investigations, File investigation (Dynamic & Static analysis), Proactive monitoring & Active threat hunting. • Hands-on experience in analyzing and investigating events by querying different systems – Palo Alto Cortex XDR, Cynet, Microsoft - ATP, Sentinel One, Carbon Black, CrowdStrike, and more. • Knowledge in security and monitoring products: WAF, IPS, NAC, AV, DLP, PROXY, MR, FW (Of companies: Symantec, Palo Alto, Fortinet, Trend Micro, Forcepoint, McAfee, Checkpoint, etc.) • Understanding of Windows and Linux processes. • Building queries using AQL and SPL (Splunk), KQL. • Quickly perceives what happened and what needs to be done during cyber Incidents in real-time. • Quick adaptation to different work environments and systems. • Working with clients in Israel, USA, Germany, India, and more... • Experience in gathering Threat Intelligence with various tools - OSINT.