Almog Levi
Threat Hunter & Soar @QMasters Cyber Security Services
Signup · Get unlimited contacts
WORK HISTORY
Threat Hunter & Soar @QMasters Cyber Security Services
Operating at the intersection of Security Operations and Automation Engineering,Responsible for designing and maintaining the MSSP’s automation architecture while serving as the escalation point for complex security incidents.Security Orchestration & Automation (SOAR Engineering)- Architected a Centralized Incident \"Agent\": Designed and implemented a complex, logic-based automation engine using Tines.This system orchestrates the full lifecycle of security incidents across multiple distinct SIEM environments- Automated Triage & Response: developed workflows to handle Tier-1 and Tier-2 alerts autonomously, including IOC enrichment (VirusTotal, AbuseIPDB) and automated decision-making to reduce analyst fatigue- Interactive ChatOps: Created \"User Validation\" bots that query users via Microsoft Teams regarding suspicious activity. The automation processes the user\'s response (Approve/Deny) to either close the alert or escalate to the SOC immediately- Health Monitoring: Built automated \"Watchdogs\" to verify EDR connectivity, log ingestion status, and offense synchronization daily, ensuring operational integrity across all client environments.Advanced Incident Response & CTI- High-Impact Incident Response: Acting as the Tier-3 escalation point for high-fidelity alerts (True Positives).Leading the investigation and containment of advanced threats including Malware outbreaks, Ransomware attempts, and complex Phishing campaigns- Containment & Remediation: Executing rapid containment actions (Host Isolation via EDR, Account Suspension in Entra ID) and providing detailed impact analysis and remediation recommendations to clients- Cyber Threat Intelligence (CTI): leveraging Cyberint (Argos) and open-source intelligence (Telegram, Dark Web) to monitor for leaked credentials and VIP threats, proactively alerting clients to external exposures before they result in a breach.
EDUCATION
See Security: Cyber & Information Security College
Hacking Defined Experts, Penetration Tester
Zero To Mastery Academy
Web Security & Bug Bounty: Learn Penetration Testing in 2023
SVCollege
SOC analyst
ABOUT ALMOG LEVI
Highly motivated, team player with high interpersonal abilities and great passion for cyber security.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.