May 2025, Present
Security Analyst
We Ankor
Monitoring, investigating and responding to security threats across multiple SIEM and EDR platforms, and communicating findings directly to clients.
Michael White / Independent portfolioKfar Saba, Israel
Cybersecurity • IT • Software Development
Security analyst. Hands-on builder.
I investigate threats, untangle IT problems, and build software that makes the work easier.
01 / Selected work
Built from problems I know.
Tools for security teams, shift planning and everyday IT. Here’s what I’m building and how it works.
Client Website / Redesign
LIGO — Client Website Redesign
A website improvement project I completed for LIGO, a supplier of accessibility and mobility solutions. I redesigned the homepage around visitors’ everyday needs, with clearer messaging, visual solution categories and direct routes to personal advice. The project also includes a dedicated Hebrew admin panel so the client can manage website content independently.
Website RedesignHebrew / RTL
Client Website / Props & Furniture Catalog
Yaron Shushan - Client Website
A website I built for client Yaron Shushan to present his props and furniture collection to production teams. The live site combines a cinematic homepage with a searchable Hebrew catalog and dedicated item pages.
Hebrew / RTLWebsite Development
Cybersecurity / MSSP Operations Platform
WeWatch Desk
A multi-tenant SOC case management desk for an MSSP-style workflow: alerts from multiple security platforms are correlated into a single queue per analyst, with SLA tracking, MITRE ATT&CK context, and built-in customer communication.
Web Application
Automation / SaaS / Cybersecurity
SOC Shift Automation Platform
A workforce scheduling platform designed for 24/7 Security Operations Center teams, with a manager dashboard, an analyst self-service view, and an engine that generates fair, compliant shift schedules automatically.
TypeScriptNext.jsPostgreSQLNode.js
02 / About me
I like knowing how things work.
I'm Michael, a Security Analyst at We Ankor. I spend my days investigating alerts and tracing what happened across endpoints, identities and networks. Before security, I worked in systems engineering at Xioma and IT at Teva Pharmaceuticals. That background still shapes how I work: understand the system, find the cause, and build a practical solution.
More about my background
- Understands both infrastructure/security and software engineering
- Comfortable investigating alerts across SIEM, EDR and identity platforms
- Builds production-grade tools and applications, not just scripts
- Works directly with individuals and small businesses, not only enterprises
Kfar Saba, Israel / Security, infrastructure and code.
03 / Experience
Where I’ve put it to work.
July 2024, February 2025
System Engineer
Xioma Information Solutions
Responsible for the successful deployment and integration of new systems and upgrades across the organization.
March 2024, July 2024
System Administrator / HD Tier 3
Teva Pharmaceuticals
Tier 3 system administration covering workstation deployment, asset management and user/group administration.
04 / Toolkit
The tools behind the work.
Cybersecurity
Investigation, detection and analysis
Security Alert Investigation · Incident Triage · Threat Analysis · Endpoint Investigations · Identity Investigations · Phishing Investigation · Malware Investigation
IT & Infrastructure
Windows, endpoints and everyday operations
Windows Troubleshooting · PC Troubleshooting · Hardware Diagnostics · System Configuration · Performance Optimization · Driver Issues · Remote Troubleshooting
Cloud & Identity
Modern workplace and identity platforms
Microsoft 365 · Microsoft Entra ID · Active Directory · ADFS · AWS Security Events · Authentication & Anomaly Review
Development
Building the tools and software side
TypeScript · JavaScript · React · React Native · Next.js · Node.js · Fastify
Networking
Connectivity and network security
Networking Fundamentals · Wi-Fi Troubleshooting · Firewall Analysis · VPN Troubleshooting · Network Security Investigation · Router Configuration
Security Tools
Enterprise security platforms
CrowdStrike Falcon · Microsoft Defender · Microsoft Sentinel · Cisco XDR · Cisco AMP · Elastic / Kibana · Fortinet FortiGate
05 / Work together
What do you need a hand with?
Technical support for an existing problem, or development for your next project.
PC & Windows Support
Practical help fixing the everyday problems that make a computer frustrating to use.
What's included
- Slow computer troubleshooting
- Windows problems & blue screens
- Software errors
- Driver issues
- Hardware diagnostics
- PC optimization
- Installation assistance
- Gaming PC issues
- Windows setup
- Remote troubleshooting
Networking & IT Help
Getting your home, office or small business network and IT working properly.
What's included
- Wi-Fi problems
- Home / small office networking
- Router configuration
- Connectivity troubleshooting
- VPN troubleshooting
- Microsoft 365 help
- General IT consulting
Website Development
Modern, responsive websites built with production-grade tooling.
What's included
- Business websites
- Portfolio sites
- Landing pages
- Custom websites
- Responsive design
- Contact forms
- Deployment & domain setup
- Basic SEO
Web Application Development
Custom systems and internal tools built to solve a real operational problem.
What's included
- Internal tools & dashboards
- SaaS prototypes
- Business systems
- Admin panels
- Authentication
- Databases
- APIs
- Automation tools
MVP / Prototype Development
Taking an idea from concept to a functional first version: Idea → Architecture → UI → Backend → Database → Deployment.
What's included
- Product & architecture scoping
- UI design & build
- Backend & database design
- Deployment
Cybersecurity / Technical Consulting
Practical conversations about security tooling, SOC workflows and detection concepts, not penetration testing.
What's included
- Security tooling guidance
- SOC workflow design
- Detection concepts
- Security architecture discussions
- Security lab setup
- Logging / SIEM guidance
- Endpoint monitoring
- Security automation concepts
FAQ
Frequently asked questions
Yes. Most work, troubleshooting, consulting, development, can be done fully remotely, with screen sharing and remote access tools where needed.
Contact
Let's talk
Reach out directly, whichever way is easiest for you.