• Researching for new attack vectors and vulnerabilities in open source projects and products.• Learning about and searching for new technologies and products, mainly looking for possible misconfigurations, while actively exploiting them during penetration tests.• Red Team - Gathering information about the target, creating phishing campaigns, infiltrating companies using applicative endpoints, and creating and using supply chain attacks.• Conducting comprehensive penetration tests on web applications, APIs, mobile applications, Desktop applications & IoT devices - identifying critical vulnerabilities and providing detailed remediation recommendations.• Writing automated attack tools.• Consulting and collaborating with development and DevOps teams to integrate security best practices throughout the software development life cycle (S-SDLC), helping the application security process in companies.• Using a wide range of security tools, including but not limited to Burp Suite, nuclei, Nmap, fuzzing techniques, Frida, Wireshark, and more.• Strong knowledge of common web application vulnerabilities and bypass techniques.• Development of specially tailored attacks designed to bypass security systems.• Strong written and verbal communication abilities, enabling effective collaboration with cross-functional teams and clients.

- Giving lectures about S-SDLC & OWASP 10 for company’s and developers - Mitigations, labs and self exploited case studies.- Automating workflow’s and scripting using python.- Web development.- Building websites and designing.

Classified

- Conducted comprehensive penetration tests on web applications, APIs and mobile applications, identifying critical vulnerabilities and providing detailed remediation recommendations.- Collaborated with development and DevOps teams to integrate security best practices throughout the software development life cycle (S-SDLC).- Solid understanding of network protocols, information security principles, and ethical hacking methodologies.- Proficient in using a wide range of security tools, including but not limited to Burp Suite, nuclei, Nmap, Wireshark, and more.- Strong knowledge and exploitation of common web application vulnerabilities.- Development of specially tailored attacks designed to bypass security systems.- Research of new attack vectors.- Strong written and verbal communication abilities, enabling effective collaboration with cross-functional teams and clients.

Agency website - isi-slonim.co.il- Developed an office management and sales system while integrating to internal and external office systems.- Development of specific solutions for optimization and automation in work processes.- Responsible for computing and information systems.- Strong knowledge with a variety of programming languages – PHP, JavaScript, NodeJS, JQUERY, CSS, HTML Python, SQL.- Strong knowledge and experience with UI & UX.

Served as a Combat Supporter in an Elite special operations unit. I Worked in the unit's intelligence department, with a focus on internal intelligence.I programmed and developed web & script based solutions, characterized intelligence systems in collaboration with the technological unit of the IDF's Special Operations Division.In addition, I participated in the operational side of my unit and played an active role in intelligence command and operation rooms.I received recognition for excellence twice during my service on behalf of the IDF's Special Operations Division's intelligence center.