Michael Starchenko Email & Phone Number

Israel

Perform web application penetration testing to identify security vulnerabilities and recommend remediation strategies.Established and managed the bug bounty program, encouraging external researchers to identify vulnerabilities and improve overall security posture.Led external penetration testing engagements and red team exercises to assess the effectiveness of defensive measures.Conducted security reviews for new features, ensuring the implementation of secure coding practices.Demonstrated expertise in utilizing industry-standard security tools, including ASPM, SCA, CSPM, SAST, and DAST.

Conducted Threat Modeling to identify potential attack vectors and enhance the security posture of applications.Executed thorough testing of web and mobile applications, as well as on-site testing to uncover vulnerabilities and assess their impact.Conducted Code reviews utilizing attack Proof of Concepts (POCs) to identify security weaknesses and propose effective solutions.Collaborated closely with application developers to validate findings, assess risks, understand the root causes of vulnerabilities, and implement effective remediation measures.

Petah Tikva, Israel

Conducted highly intricate and successful penetration tests on web and mobile applications, as well as comprehensive infrastructure penetration tests. Clients spanned various industries, including e-commerce, banking, telecommunications, gaming, and others.Actively engaged in investigating and researching new technologies to proactively identify and address potential security flaws.Conducted intelligence investigations on behalf of multiple clients, leveraging analytical skills to uncover critical insights and mitigate risks.Led Red Teaming exercises, including the execution of realistic Phishing attack scenarios, to evaluate and strengthen the effectiveness of clients' security measures.

Airport City, Israel

Conducted comprehensive penetration tests encompassing Web, Mobile, and Infrastructure domains, effectively identifying and addressing security vulnerabilities.Proficiently executed wireless Man-in-the-Middle (MITM) attacks and rogue Access Point (AP) setups using Pineapple TETRA, ensuring thorough assessment of wireless security measures.Demonstrated expertise in cloning employees' ID cards utilizing Proxmark3, highlighting a deep understanding of proximity card security.Possess extensive experience utilizing industry-standard security testing tools

Herzliya, Israel

Conducted passive network enumeration within the Operational Technology (OT) environment, effectively identifying and mapping critical systems and devices.Demonstrated expertise in identifying security flaws and successfully gaining control of SCADA servers, Human-Machine Interfaces (HMIs), and Programmable Logic Controllers (PLCs).Led efforts to harden both IT and Industrial Control Systems (ICS), implementing robust security measures to protect critical infrastructure.Conducted Deep Packet Inspection (DPI) of Schneider Electric's internal protocol, ensuring comprehensive analysis and understanding of the protocol's security implications.Performed thorough security assessments for fuel providers and energy suppliers, assessing vulnerabilities and recommending strategies to enhance their overall security posture.

Herzliya, Israel

Formerly (D+H/Fundtech)• Manual testing web-based application• Create and execute complex testing scenarios• Writing testing documents such as STR, STD, STP• Client-side and server-side testing• Bugs and tests handling using HP QC management tool• Build testing environment with Jenkins• Design and execute automation tests with Soap UI• Working with databases Oracle PL/SQL

Petah Tikva, Israel

• Quality control for Samsung mobile electronics lab.

Tel Aviv, Israel

Manual QA testing for a web skill based internet game • Test types: Functional, System, Compatibility, Sanity, Regression• Billing system integrations• Bugs handling using Bugzilla• SVN code management tool

Computer Science

(Bsc) (Not Completed), Computer Science And Mathematics