Position: Cybersecurity Architect - Team Leader
Category: Lead
English level: fluent
Years of experience: 8

CISSP
Familiar with:
 Security Information and Event Management: IBM Qradar SIEM, MicroFocus Arcsight SIEM,RSA NetWitness, AlienVault, Darktrace, Splunk SIEM, ELK and Wazuh.
 Forensic support on demand, including static and dynamic analyze, IoC collection and matching that with the know attack patterns (MITRE ATT&CK,CAPEC...etc) potential APT definition, based on customer and external tools.
 Establishment  of threat hunting program for the customers, including building threat intelligence procedures and processes, TI reports preparation, team members training, incident respond\investigation support..etc.
 Full Architecture scope of work for the Customers in the development and evolution of security roadmaps, embodiment of strategic plans, understanding controls and process gaps, providing architectural vision, the best applicable solution, leading the PoC and further process of implementation, to reach successful implementation on time.
 Building use-cases based on business requirements, strongly communicating with the C level.
 Strong hands on with: DLP, IDS, IPS, WAF, IAM, EDR, Threat & Vulnerability management, Sandboxes Mail\Spam protection, Network security