Leading 3 security research teams, as part of Microsoft Security Fundamentals organization. We focus on protecting Azure Edge & Linux projects, as well as cloud services.

Managing a team of 12 security researchers, responsible for the security of Intel root of trust embedded controller (Intel CSME). Working on Intel next gen SOCs.We conduct security research, in order to stay ahead of external security researchers, and improve Intel SOC security. This includes active engagement with architect and development teams, finding issues and recommending systematic fixes and mitigations.In the past year I led 3 exploitation research projects, on bugs that required extensive analysis to determine severity (or rule out exploitability).Received Intel Security Leadership Award Q2 2020, for my work promoting security excellence in multiple groups within Intel Israel

Managing the security research team, in-charge of the security evaluation and vulnerabilities discovery for Intel embedded (firmware) products, software applications, services and drivers. The team is performing complete SDL\SDLC: Security architecture, design review, code review, penetration testing as well as new mitigation research and tool development. Actively mentors other teams at Intel on security mindset and practices.Part of finding team of CVE-2019-0098 - publicly released vulnerability disclosureTechnical chair for Intel security conference in Israel - iSecCon 2019 (2 days conference, 700 attendees on each day)Speaker at iSecCon 2019:"Worrying about someone else's code""From theory to practice - raising the security bar" (Co-speaker with Ron Moussafi) Speaker at QA&Test - Security&Safety 2019 Madrid - "Free bugs - using security compilation flags to maximize our test plan"

Security researcher at Intel, working on firmware & software. Doing architecture & design reviews, code reviews and penetration testing. Provide security training and guidance to other teams. Conducted a seminar in DevGeekWeek 2016/2017 on 'security testing principles'

Worked on Intel Sandy Bridge, Valleyview SOC, Bay Trail SOC, and other product linesConducted penetration testing on Intel CSME, finding multiple issues.Created custom fuzzers to run on our firmware, using Peach frameworkIdentified memory corruptions and security vulnerabilities using code reviews, and dedicated tools. Specifically under my responsibility was the Intel DAL (Dynamic Application Loader) security. where I implemented an agile SDL approach, in order to align with team working in agileIn 2012 I gave a lecture on 'agile SDL' at the Intel agile conference, based on the methodology I developed.

Performed validation activity on Intel MEBx feature, finding multiple memory corruptionsSet up a JIRA bug management system for the team, configured it specifically for our needs, and acted as the JIRA administrator