> Open to junior SOC & pentest roles in Israel
Central Israel · Available immediately · Hebrew & English
Junior SOC analyst and junior penetration tester. Trained on QRadar, Splunk SOAR and Fortinet at ITQ; I practise Active Directory attacks in my own lab.
01 // About
From IDF case triage under daily SLAs to SIEM alert investigation.
I am a graduate of the Cyber Security Implementer Program at ITQ College (650 hours, Cisco and Fortinet specialization), covering enterprise network infrastructure, Microsoft servers, firewalls and SIEM/SOC operations. I work both sides: at ITQ I trained on SIEM/SOC tooling (IBM QRadar SIEM, Splunk SOAR), and in my own Active Directory lab I practise attack paths such as Kerberoasting and BloodHound recon to see how adversaries operate.
Before that, I served for 3 years as a Service Coordinator in the Israel Defense Forces (IDF). Working under strict SLAs in SAP ERP and CRM ticketing systems, I investigated hundreds of sensitive soldier entitlement cases while keeping the data confidential.
Day to day that means enterprise infrastructure (Cisco IOS XE, FortiGate NGFW, Windows Server 2022 AD, LPI Linux Essentials), SIEM alert investigation (IBM QRadar SIEM with WinCollect, Splunk SOAR) and, in my own lab, Active Directory attack practice.
Cyber Security Implementer Program, ITQ (650 Hours), Cisco and Fortinet specialization: Cisco IOS XE, FortiGate NGFW (simulated two-site Israel-USA network), Windows Server 2022 AD, LPI Linux Essentials, IBM QRadar SIEM with WinCollect, Splunk SOAR.
IDF Service Coordinator (3 Years): SAP ERP & CRM workflows, high-urgency SLA triage, structured escalation.
30 completed HTB Academy modules and Python automation for log enrichment.
02 // Technical Competencies
Practised through 650 training hours and my own lab work.
03 // Projects
Each one: the problem, what I built, and what came out of it.
CTF tracker and penetration testing workspace.
Build it, then attack it.
04 // CTFs & Labs
Exploitation on Hack The Box, TryHackMe and my own lab, with the detection angle a SOC would use for each.
30 modules completed
Active Directory, web exploitation & post-exploitation
SOC L1 & AD Specialty
Threat emulation, network pivoting & security operations
Active competitor
Web exploitation, reverse engineering & forensics
| Target Machine | Platform | Category | Difficulty | Core Attack Vector | SOC Detection Angle |
|---|---|---|---|---|---|
| TwoMillion | Hack The Box | WebAPI Command Injection | Easy | API enumeration → admin via API → command injection in /api/v1/admin/vpn/generate → CVE-2023-0386 OverlayFS kernel privesc |
API role-change auditing & anomalous child processes of the web server |
| Blue | Hack The Box | WindowsSMB Remote Exploit | Easy | MS17-010 EternalBlue: SMBv1 (srv.sys) remote code execution → NT AUTHORITY\SYSTEM | IDS signatures for MS17-010 SMBv1 traffic on port 445 & alerting on SMBv1 use |
| Cap | Hack The Box | PrivEscLinux Capabilities | Easy | IDOR on PCAP export → Plaintext Credential Sniffing → Python Cap_setuid SUID | Cleartext credential transmission alert & Linux auditd execve with elevated capabilities |
| Support | TryHackMe | WebWeb App → RCE | Medium | Pentest of the Support Ops web platform: vulnerability discovery → exploitation → remote code execution | Web server spawning shell processes, anomalous requests in web/WAF logs, outbound connections from the app host |
05 // Experience & Education
Formal technical training, military service and education.
ITQ College
Completed alongside the final year of IDF service (IDF-funded civilian program).
Hands-on training in Cisco network infrastructure, Microsoft servers, firewalls, and SIEM/SOC operations in an enterprise lab environment:
Israel Defense Forces (IDF)
Investigated and resolved hundreds of sensitive soldier entitlement cases in SAP, maintaining strict data confidentiality and high accuracy under daily SLAs. Prioritized and tracked complex escalations through CRM and ticketing workflows, writing clear case notes that sped up coordination between soldiers, commanders and external agencies.
High School Diploma
10-unit computer science major. Final graduation project: native Android app in Java for real-time cryptocurrency prices and currency conversion (USD/EUR/ILS); web development with HTML and CSS.
Currently learning
HTB Academy path
In progressHTB Academy path
In progress06 // Contact
Open to junior SOC & pentest roles, security internships, and CTF team collaborations.