Skip to content

For Recruiters

Professional profile

A condensed, recruiter-oriented view of experience, capabilities and project work. Full detail lives throughout the rest of the site.

Summary

I'm Michael, a Security Analyst at We Ankor. I spend my days investigating alerts and tracing what happened across endpoints, identities and networks. Before security, I worked in systems engineering at Xioma and IT at Teva Pharmaceuticals. That background still shapes how I work: understand the system, find the cause, and build a practical solution.

Experience

Security Analyst · We Ankor

May 2025, Present

Monitoring, investigating and responding to security threats across multiple SIEM and EDR platforms, and communicating findings directly to clients.

Petah Tikva, Center District, Israel

  • Monitoring security events across multiple platforms and SIEM tools
  • Investigating alerts and conducting in-depth incident analysis
  • Writing comprehensive incident reports and threat assessments
  • Communicating findings and recommendations to clients
  • Collaborating with other analysts to improve detection and response capabilities
  • Maintaining awareness of emerging threats and attack techniques
CrowdStrike FalconElastic Security (ELK Stack)Microsoft SentinelArcSightSentinelOneFortinetSymantecCisco AMPCisco XDRDatadogTrendMicro

System Engineer · Xioma Information Solutions

July 2024, February 2025

Responsible for the successful deployment and integration of new systems and upgrades across the organization.

Tel Aviv District, Israel

  • System analysis, integration, configuration and administration
  • Testing and quality assurance
  • Deployment and installation
  • Training and end-user support
  • Cross-team collaboration
  • Troubleshooting and resolution across systems, servers and SQL databases
System AdministrationSQL ServerWindows Server

System Administrator / HD Tier 3 · Teva Pharmaceuticals

March 2024, July 2024

Tier 3 system administration covering workstation deployment, asset management and user/group administration.

Tel Aviv District, Israel

  • Workstation setup and image installation
  • Peripheral equipment and mobile device support
  • Hardware, software and networking troubleshooting
  • Assets management
  • User and group management (local and domain)
  • Application software installation and configuration
  • Project management, and effective communication and user training
WindowsActive DirectoryAsset Management

IT HelpDesk Specialist · Teva Pharmaceuticals

June 2022, July 2024

IT Help Desk support for Teva employees across the US and UK.

Petah Tikva, Central, Israel

  • User management
  • Software installation & troubleshooting
  • Windows troubleshooting
  • Support for peripheral equipment & mobile devices
WindowsIT SupportRemote Support

Technical Support · Bezeq

December 2021, June 2022

Technical support for internet infrastructure and networking equipment across multiple providers.

Tel Aviv, Israel

  • Support for internet infrastructure and various providers
  • Technical support for routers and networking equipment
NetworkingRouters

Store Manager · Domino's Pizza Israel

August 2020, November 2021

Managed daily store operations and staff.

Ramat Gan, Tel Aviv, Israel

    Soldier · Israel Defense Forces

    September 2016, May 2019

    Military service.

    Israel

      Education & Certifications

      Cyber / Computer Forensics and Counterterrorism

      John Bryce

      March 2023, December 2024

      3D Artist, 3D Animation & Modeling

      IAC

      June 2019, May 2022

      Certifications

      • iManage Certified System Engineer
      • Programming for Everybody (Getting Started with Python)
      • 3D Animation & Modeling
      • Information Security and Protection of Organizational Networks

      Cybersecurity / SOC Capability Areas

      Security Alert Investigation

      Triaging and investigating alerts end-to-end, determining scope, root cause and whether an alert represents real risk.

      CrowdStrike FalconMicrosoft SentinelMicrosoft DefenderCisco XDRElastic / Kibana

      Endpoint & Identity Investigations

      Analyzing endpoint telemetry and authentication activity to spot anomalies, suspicious sign-ins and compromised accounts.

      Microsoft Entra IDActive DirectoryADFSSentinelOneWindows Security

      Network & Firewall Analysis

      Reviewing firewall, WAF and network security events to investigate suspicious traffic and policy violations.

      Fortinet FortiGatePalo AltoCloudflareF5 BIG-IP / WAFNetskope

      Threat, Malware & Phishing Investigation

      Analyzing suspicious files, emails and behavior patterns to assess and document threats.

      CrowdStrike FalconMicrosoft DefenderCisco AMPSymantecTrendMicroElastic / Kibana

      SIEM & Log Analysis

      Querying and correlating logs across security platforms to reconstruct events and support investigations.

      Microsoft SentinelElastic / KibanaArcSightDatadogKQL

      Cloud & Identity Security Events

      Reviewing cloud platform security events and Microsoft 365 activity as part of broader investigations.

      AWS Security EventsMicrosoft 365Microsoft Entra ID

      Technologies & Skills

      Cybersecurity

      Security Alert InvestigationIncident TriageThreat AnalysisEndpoint InvestigationsIdentity InvestigationsPhishing InvestigationMalware InvestigationLog AnalysisKQLSIEM InvestigationSOC Workflows

      IT & Infrastructure

      Windows TroubleshootingPC TroubleshootingHardware DiagnosticsSystem ConfigurationPerformance OptimizationDriver IssuesRemote TroubleshootingVirtual MachinesHome LabsServer Environments

      Cloud & Identity

      Microsoft 365Microsoft Entra IDActive DirectoryADFSAWS Security EventsAuthentication & Anomaly Review

      Development

      TypeScriptJavaScriptReactReact NativeNext.jsNode.jsFastifyPostgreSQLSupabaseRedisDockerGit

      Networking

      Networking FundamentalsWi-Fi TroubleshootingFirewall AnalysisVPN TroubleshootingNetwork Security InvestigationRouter Configuration

      Security Tools

      CrowdStrike FalconMicrosoft DefenderMicrosoft SentinelCisco XDRCisco AMPElastic / KibanaFortinet FortiGatePalo AltoCloudflareF5 BIG-IP / WAFNetskopeSentinelOneSymantecArcSightDatadogTrendMicroWindows Security

      Selected Projects