Cybersecurity • IT • Software DevelopmentI investigate threats, solve technical problems and build software.
I work across cybersecurity and SOC operations, IT infrastructure and troubleshooting, and full-stack software development, which means I can both understand what's happening inside a system and build the tools that fix it.
About
Someone who understands both sides of the system
I'm a Security Analyst currently investigating and responding to threats at We Ankor, working daily across SIEM and EDR platforms like CrowdStrike, Microsoft Sentinel, Cisco XDR and the ELK stack. Before that I built a solid IT foundation as a System Engineer and System Administrator at Xioma and Teva Pharmaceuticals, deploying systems, managing infrastructure and troubleshooting at scale. That combination lets me investigate what is actually happening inside a system, endpoints, identity, network, logs, and then build the tooling or software that solves the underlying problem, rather than treating security and engineering as separate disciplines.
- Understands both infrastructure/security and software engineering
- Comfortable investigating alerts across SIEM, EDR and identity platforms
- Builds production-grade tools and applications, not just scripts
- Works directly with individuals and small businesses, not only enterprises
Security & SOC
Investigating alerts, identity anomalies and endpoint activity across enterprise security platforms.
IT & Infrastructure
Windows environments, networking, identity systems and hands-on troubleshooting.
Software Development
Building real applications and tools, web, mobile and automation, with modern engineering practices.
Experience
Professional Experience
A timeline of professional roles, kept in sync with LinkedIn from a single data file.
Security Analyst
May 2025, PresentWe Ankor · Petah Tikva, Center District, Israel
Monitoring, investigating and responding to security threats across multiple SIEM and EDR platforms, and communicating findings directly to clients.
- Monitoring security events across multiple platforms and SIEM tools
- Investigating alerts and conducting in-depth incident analysis
- Writing comprehensive incident reports and threat assessments
- Communicating findings and recommendations to clients
- Collaborating with other analysts to improve detection and response capabilities
- Maintaining awareness of emerging threats and attack techniques
System Engineer
July 2024, February 2025Xioma Information Solutions · Tel Aviv District, Israel
Responsible for the successful deployment and integration of new systems and upgrades across the organization.
- System analysis, integration, configuration and administration
- Testing and quality assurance
- Deployment and installation
- Training and end-user support
- Cross-team collaboration
- Troubleshooting and resolution across systems, servers and SQL databases
System Administrator / HD Tier 3
March 2024, July 2024Teva Pharmaceuticals · Tel Aviv District, Israel
Tier 3 system administration covering workstation deployment, asset management and user/group administration.
- Workstation setup and image installation
- Peripheral equipment and mobile device support
- Hardware, software and networking troubleshooting
- Assets management
- User and group management (local and domain)
- Application software installation and configuration
- Project management, and effective communication and user training
IT HelpDesk Specialist
June 2022, July 2024Teva Pharmaceuticals · Petah Tikva, Central, Israel
IT Help Desk support for Teva employees across the US and UK.
- User management
- Software installation & troubleshooting
- Windows troubleshooting
- Support for peripheral equipment & mobile devices
Technical Support
December 2021, June 2022Bezeq · Tel Aviv, Israel
Technical support for internet infrastructure and networking equipment across multiple providers.
- Support for internet infrastructure and various providers
- Technical support for routers and networking equipment
Store Manager
August 2020, November 2021Domino's Pizza Israel · Ramat Gan, Tel Aviv, Israel
Managed daily store operations and staff.
Soldier
September 2016, May 2019Israel Defense Forces · Israel
Military service.
Education & Certifications
Continuous learning
Formal education and certifications, kept in sync with LinkedIn.
Cyber / Computer Forensics and Counterterrorism
John Bryce
March 2023, December 2024
3D Artist, 3D Animation & Modeling
IAC
June 2019, May 2022
- iManage Certified System Engineer
- Programming for Everybody (Getting Started with Python)
- 3D Animation & Modeling
- Information Security and Protection of Organizational Networks
Skills
Capabilities, organized by category
Skills as categorized tags rather than arbitrary percentages, because 'Cybersecurity: 95%' means nothing.
Cybersecurity
Investigation, detection and analysis
IT & Infrastructure
Windows, endpoints and everyday operations
Cloud & Identity
Modern workplace and identity platforms
Development
Building the tools and software side
Networking
Connectivity and network security
Security Tools
Enterprise security platforms
Cybersecurity & SOC
Security operations, from alert to conclusion
Hands-on experience investigating security alerts across enterprise platforms, grouped here as capability areas rather than a wall of logos.
Security Alert Investigation
Triaging and investigating alerts end-to-end, determining scope, root cause and whether an alert represents real risk.
Endpoint & Identity Investigations
Analyzing endpoint telemetry and authentication activity to spot anomalies, suspicious sign-ins and compromised accounts.
Network & Firewall Analysis
Reviewing firewall, WAF and network security events to investigate suspicious traffic and policy violations.
Threat, Malware & Phishing Investigation
Analyzing suspicious files, emails and behavior patterns to assess and document threats.
SIEM & Log Analysis
Querying and correlating logs across security platforms to reconstruct events and support investigations.
Cloud & Identity Security Events
Reviewing cloud platform security events and Microsoft 365 activity as part of broader investigations.
Also covers
IT & Technical Support
Practical, hands-on technical assistance
Beyond security, day-to-day IT capability for individuals, home labs and small businesses.
PC & Windows Troubleshooting
Diagnosing and fixing everyday and complex Windows / PC issues.
- Slow computer troubleshooting
- Blue screens & crashes
- Software errors
- Driver issues
- Hardware diagnostics
- Windows installation & setup
- PC performance optimization
Networking & Connectivity
Getting home and small-office networks working reliably.
- Wi-Fi troubleshooting
- Router configuration
- Connectivity troubleshooting
- VPN troubleshooting
- Home / small office networking
Microsoft 365 & Identity
Configuring and supporting the Microsoft modern workplace.
- Microsoft 365 administration & support
- Microsoft Entra ID
- Active Directory fundamentals
- Security configuration
Virtualization & Home Labs
Building and running lab and server environments.
- Virtual machines
- Docker
- Home labs
- Server environments
Remote Troubleshooting
Solving problems for people and businesses wherever they are.
- Remote diagnostics & fixes
- Guided remote support sessions
- System configuration
General IT Consulting
Practical, plain-language advice on IT decisions and setup.
- Equipment & setup recommendations
- Small business IT consulting
- Ongoing support arrangements
Projects
Things I've built
Real, working software, a mobile dating platform, a local Windows utility, a security analyst toolkit, and a SOC scheduling SaaS.
Mobile App / Dating Platform
Vela
A modern dating application inspired by swipe/match platforms, designed and built as a full mobile product rather than a simple prototype.
Windows Utility / PC Optimization
Cyclop
A local-first Windows optimization utility with a live system dashboard, one-click cleanup tools, and full startup/process/app management, everything runs on-device, nothing is uploaded anywhere.
Cybersecurity / Analyst Toolkit
CyclopApp
A unified toolkit that brings together the tools a security analyst reaches for every day, encoding/decoding, a CyberChef-style recipe builder, IOC and network lookups, integrated threat intel, an offline MITRE ATT&CK reference, and forensics utilities.
Automation / SaaS / Cybersecurity
SOC Shift Automation Platform
A workforce scheduling platform designed for 24/7 Security Operations Center teams, with a manager dashboard, an analyst self-service view, and an engine that generates fair, compliant shift schedules automatically.
Work With Me
How I can help
Whether you need a computer fixed, an IT problem solved, or a product built, here's how engagements typically break down.
PC & Windows Support
Practical help fixing the everyday problems that make a computer frustrating to use.
- Slow computer troubleshooting
- Windows problems & blue screens
- Software errors
- Driver issues
- Hardware diagnostics
- PC optimization
Networking & IT Help
Getting your home, office or small business network and IT working properly.
- Wi-Fi problems
- Home / small office networking
- Router configuration
- Connectivity troubleshooting
- VPN troubleshooting
- Microsoft 365 help
Website Development
Modern, responsive websites built with production-grade tooling.
- Business websites
- Portfolio sites
- Landing pages
- Custom websites
- Responsive design
- Contact forms
Web Application Development
Custom systems and internal tools built to solve a real operational problem.
- Internal tools & dashboards
- SaaS prototypes
- Business systems
- Admin panels
- Authentication
- Databases
MVP / Prototype Development
Taking an idea from concept to a functional first version: Idea → Architecture → UI → Backend → Database → Deployment.
- Product & architecture scoping
- UI design & build
- Backend & database design
- Deployment
Cybersecurity / Technical Consulting
Practical conversations about security tooling, SOC workflows and detection concepts, not penetration testing.
- Security tooling guidance
- SOC workflow design
- Detection concepts
- Security architecture discussions
- Security lab setup
- Logging / SIEM guidance
FAQ
Frequently asked questions
Yes. Most work, troubleshooting, consulting, development, can be done fully remotely, with screen sharing and remote access tools where needed.
Have a technical problem or an idea you want to build?
Whether you need help fixing a computer, improving your IT environment, or turning an idea into a working application, send me a message.
Contact
Let's talk
Reach out directly, whichever way is easiest for you.