SECUREFOREST

Guardian of Clouds and Protector of the Crypto Realm | Cyber Security & Blockchain Researcher | GDPR

תל אביב יפו, ישראל

חברה

2-5 עובדים

צור קשר

אודותינו

Guardian of Clouds | Cyber Security Advisor & Researcher | Blockchain Evangelist | Incident Response Expert | GDPR Guru
Guardian of clouds and protector of the crypto realm, A cyber security professional, possess 18+ years of experience in information and cyber security planning, servicing, management and consulting.

- Specialized skills in penetration testing, forensics, zero-day assessment and research
- Extensive knowledge in common communication protocols
- Experienced in analysis and security engineering
- Adept at performing risk-assessments, building methodologies and process standardization and have in-depth expertise with ISO 27001 Standards
- Bright, creative, highly motivated with high self learning skills
- Ability to provide alternative solutions and adapt rapidly to changing situations

Specialties:
❒ Cyber Security consulting
❒ Cyber Intelligence and Fraud Prevention
❒ Cloud Security aspects
❒ Secure Blockchain Implementations
❒ Security Auditing for ICO/Startup platforms and Ethereum smart contracts
❒ Incident Response
❒ Penetration Testing
❒ Forensics and Zero Day Research

שפות

עברית

שפת אם

אנגלית

שפת אם

רוסית

שפת אם

תחומי התמחות

Blockchain & CryptoCurrency

CryptoCurrency, BlockChain, Bitcoin

Ethereum

Blockchain

Blockcypher

Solidity

IPFS

כרייה

טכנולוגיה

AI, בינה מלאכותית

Machine Learning

Cyber Security סייבר

נסיון תעסוקתי

מרץ 2018 - היום

Blockchain & Cyber Security Advisor

CLOUDance

Specializing in smart contracts, DApps , runtime environment audits and brand assurance.

ינואר 2018 - היום

CTO & Co-Founder

SECUREFOREST

SECUREFOREST provides a comprehensive portfolio of Cyber Security services specifically tailored for Startups, ICO's and Blockchain Projects.
We provide:
- Startup/ICO Security and Business Risk Audits
- Brand Assurance
- Supervision and Mentoring
- Real-time Cyber Threat Monitoring and Response
- Smart Contract Audits
- Security Assessments for Platforms and DApps (including Penetration Testing and Vulnerability Assessment)
- Forensic Investigations of incidents related to crypto and traditional currency
- Security Compliance Certification
- GDPR Compliance preparation
- Key Management and Escrow services

ינואר 2018 - אפריל 2018

CTO

CryptoSec

Established Operations in the fields of:
- ICO security audits (including smart contracts)
- Cyber threat monitoring and response
- Security assessments for DApps and runtime environments (EVM, Docker, JVM, TEE)
- Security compliance and certification
- Key management and technical escrow
- Forensics and investigations in the cryptocurrency realm

ינואר 2015 - מרץ 2018

Cyber Security Leader

EXPIM

The company provides managed and cloud services to various sectors of clients (governmental, healthcare, manufacturing, fintech and enterprises) that demands real-time performance and strict security requirements for their internet facing services.
- Responsible for examining new technologies
- Acted as companies pre-sale representative
- Provided real-time incident response using a wide-array of custom and industry leading tools
- Established the company’s Cyber Monitoring and Threat Analysis Center
- Performed in-depth technical analysis and risk assessments of security events and incidents
- Identified and resolved dependencies, mitigated issues, and assessed risks
- Mentored and managed a number of team members
- Implemented various solutions for big data, cyber intelligence, ML and process automation

ינואר 2012 - פברואר 2018

Cyber Security Consultant and Researcher

LAYER8

Started freelancing Information and cyber security projects and swiftly evolved into providing consulting services for numerous enterprise clients around the globe in the fields of:
- Information security management
- Security incident response, damage assessment and disaster recovery
- Cloud security design and engineering
- Blackbox / whitebox penetration testing
- DoS/DDoS attack mitigation and analysis (FW/IDS/IPS/WAF)
- Forensics, research and vulnerability assessments
- Secure e-commerce, fraud management and revenue assurance
- Secure private / public blockchain implementations
- Smart Contract auditing
- Security assessments for DApps and runtime environments (EVM, Docker, JVM, TEE)
- Technical escrow for cryptocurrency transactions
- Preperation for General Data Protection Regulation (GDPR)
- Cyber defense
- Consulting member for number of startups

ינואר 2012 - ינואר 2013

Senior Cyber Security Consultant

ITFS GROUP

- Provided cyber security consulting and incident response for outsourced clients
- Performed blackbox / whitebox penetration testing and computer forensics
- Conducted research on selected projects
- Consulted on the topics of cyber defense for civil infrastructures

ינואר 2010 - ינואר 2012

Information Security Manager of Outsourcing Department

MalamTeam

Supplied Information and Cyber Security consulting services for outsourced enterprise clients
- Information security management and consulting
- Incident response
- Risk-assessments and penetration testing
- Forensic investigations
- Malware/Virus research and outbreak containment
- Network security analysis
- Established procedures, definitions and methodologies
- Provided technical guidance and oversight for regulations, gaps and compliance

דצמבר 2008 - אפריל 2010

Information Security Consultant

MalamTeam

Positioned as part-time Information Security consultant for outsourced clients, executed:
- Forensic Investigations
- Malware and Virus Research and Outbreak contamination
- FW/IDS/IPS analysis
- VoIP Security implementations
- Assisted regarding Definitions, Regulations, Gaps and Compliance
- Created and disseminated technical security bulletins, procedures, presentations and tips.

ינואר 2008 - אפריל 2010

Senior System and Network Security Engineer

PHILIPS Healthcare

- Optimized and directed a dynamic production, testing, research/development and software server environment
- Managed the networking, security infrastructure and company data center
- Maintained rigid security guidelines and implemented server virtualization
- Scrutinized new technologies to use for cost-effective business solutions
- Dispensed technical security expertise to the onsite CISO