Experience
Cyber Security Software Engineer
UBS Investment Bank & Wealth Management
2021 - present
Developed automation and integrations in Python and Bash for the SOAR system, adhering to the Software Development Life Cycle (SDLC) in DEV, TEST, SIT, and PROD environments
• Developed GitLab CI/CD pipelines to streamline, automate, and enhance software build and testing processes, leveraging a repository manager for packaging and dependency management
• Managed the code deployment procedure, including code review, best practice implementation, documentation, setup instructions, packaging, management CAB (Change Advisory Board) approvals, and release management
• Designed and implemented SOAR playbooks to automate incident response procedures, built complex automation rules for threat detection and containment, and created end-to-end security workflows to streamline alert triage, investigation, and remediation processes across multiple security tools and platforms
• Managed vulnerabilities by periodically scanning, identifying, evaluating, prioritizing, and mitigating them
• Handled version/patch management and lifecycle management of multiple SOAR platform instances and environments, working with Ansible
• Developed managerial procedures for content management, system administration and change management
• Built integrations (API) between internal cybersecurity systems (SIEM, DLP, UEBA), ticketing platforms, and external (3rd party) systems
• Built an Azure DevOps pipeline using ARM Templates for deploying, installing and configuring SOAR environments
• Maintained direct and regular interaction with stakeholders to ensure systems met defined requirements and functioned optimally
• Acted as a team leader, serving as a point of escalation for other engineers, providing guidance and mentoring, and driving process improvements and gap identification (Using SCRUM methodology)
SecOps Lead
TrustNet LTD (MSSP)
2020 - 2021
Directed end-to-end deployments of variety of SIEM platforms across enterprise environments, including hardware provisioning, OS installation, advanced software configuration, and system tuning for optimized threat detection and response
• Engineered robust SIEM content by onboarding diverse log sources, developing custom log parsers, indexing critical security data, and crafting high-fidelity correlation rules to detect advanced persistent threats (APTs) and insider threats
• Conducted in-depth threat hunting and vulnerability assessments, leveraging automation tools and frameworks to identify, prioritize, and mitigate risks, ensuring compliance with security frameworks such as ISO 27001, NIST, and GDPR
• Designed and formalized SOC workflows, playbooks, and incident response plans, integrating best practices for threat intelligence sharing, containment, and eradication strategies
• Delivered proactive security analysis by aggregating logs, utilizing vulnerability scanners, and automating responses with tools like SOAR platforms to reduce mean time to detect (MTTD) and mean time to respond (MTTR)
• Led large-scale SIEM migration initiatives, including strategy development, data migration, and system optimization, ensuring seamless transitions and zero operational downtime in highly complex environments
• Collaborated with cross-functional teams, including penetration testers, vulnerability analysts, project managers, and CISOs, to implement security measures and align incident response strategies with organizational risk tolerance
• Developed and deployed Python-based log collection clients and automation scripts, enabling efficient integration of non-standard log sources and streamlining data processing for real-time threat monitoring
• Managed cybersecurity best practices, including zero trust architecture, endpoint protection, and continuous monitoring, to fortify clients' security postures against evolving cyber threats
System Administration/System Security Engineer
Bynet-Semech (IT Services Provider)
2017 - 2020
Deployed and optimized enterprise-grade firewalls, implementing granular security policies and access controls to strengthen network defense and reduce security vulnerabilities
• Deployed and configured endpoint protection platforms and DLP solutions to safeguard organizational data
• Installed, maintained, and managed servers (Windows Server 2012, 2016, and Linux RHEL) ensuring optimal system performance
• Executed backup procedures and managed backup systems to ensure data integrity and business continuity
• Led IT and cross-platform projects, driving successful project execution and technical innovation
• Collaborated with VP's, CTO's, and project managers to align IT initiatives with business goals and ensure smooth project delivery
• Managed and mentored teams, tracked progress on business objectives and ensured timely completion of project milestones with high-quality results
System Administration/IT Management outsourcing at UBS Investment Bank
Bynet-Semech (IT Services Provider)
2011 - 2017
Served as the primary point of contact for all core applications and infrastructure issues, ensuring timely resolution and system stability
• Enhanced aspects of IT operations by setting strategic long-term goals, driving continuous improvement, and boosting service efficiency
• Managed the IT change process, overseeing and executing seamless transitions while minimizing system disruptions
• Led incident and request management, escalating and tracking IT-related issues to ensure rapid resolution and minimal downtime
• Oversaw HW/SW inventory management and procurement, successfully leading projects in collaboration with overseas support teams and global entities
• Provided comprehensive end-user support across multiple platforms, ensuring smooth operations and minimal user disruptions
• Integrated and delivered 1st level support for key trading systems (Shaldag, FMR, Leumi Finance, Menta), portfolio management systems (Danel), and market data systems (Super, Bizportal, TradeOne, Bloomberg)
• Built an excellent reputation for resolving complex problems swiftly, consistently improving customer satisfaction and driving operational efficiency
Helpdesk/System Administrator
Elad Group
2009 - 2011
Supporting over 800 end users (XP, Win7) in HaSalom and HaMehozi courts in Tel-Aviv
• Installing and maintaining server's hardware and software (Windows server 2003, 2008, 2012)
• Working with: AD, DNS, DHCP, GPO, Exchange 2003, Print server, File server, WSUS, Hyper-V and Office (2003, 2007)
• Working with Backup Exec, NetVault, NetApp Configurations and maintenance
• VPN users support (Installing and configuring) remotely and in customer's home
• Peripheral support: printers, scanners and faxes maintenance
