From a targeted architecture review to a full security program — I bring a practitioner's precision and a consultant's structure.
🛡️
CISO and vCISO Advisory
Security leadership for organizations that need a full-time or part-time CISO — security strategy, ongoing security program ownership, risk management, regulatory liaison, policy writing, vendor evaluation, team building, and board-level risk reporting.
🧭
Executive Security Advisory
Strategic security counsel for CISOs, C-Level executives, and Boards of Directors. Translating complex technical risk into clear business language — supporting security governance decisions, board-level reporting, risk appetite discussions, and security investment prioritization.
⚖️
Risk Assessment
Structured risk assessments for organizations, systems, and processes — building a threat profile, analyzing likelihood and impact, and producing a residual risk report with actionable treatment recommendations.
NIST CSF
📋
Compliance Readiness Assessment
Assessing where an organization stands against a target framework, identifying gaps, and producing a prioritized remediation roadmap.
ISO 27001
SOC 2
NIS2
DORA
Bank of Israel Regulation
Israeli MoF Cyber Regulation
PCI DSS
🎯
Certification Preparation
End-to-end guidance through the certification process — scoping, policy writing, control implementation, evidence collection, and working alongside auditors to achieve certification.
ISO 27001
SOC 2
PCI DSS
🔄
Business Continuity and Disaster Recovery
Designing and implementing BC/DR programs, covering policy and procedure development, RTO/RPO definition, business impact analysis, tabletop exercises, backup architecture, failover design, and recovery testing.
🏗️
Security Architecture Design
HLD/LLD design of secure systems, cloud environments, and hybrid infrastructures — from policy and procedures to deployment and operational monitoring.
☁️
Cloud Security
AWS security architecture, configuration review, incident response, and maturity assessment.
AWS Security Maturity Model
⚙️
Security Engineering
Design, deployment, and configuration of security solutions. Bridging the gap between architecture decisions and operational implementation.
CSPM
EDR
IAM
MDM
NGFW
SIEM
🔭
Vulnerability & Attack Surface Management
Conducting vulnerability assessments and external attack surface analysis, identifying and prioritizing exposure across systems and applications. Designing and implementing ongoing vulnerability management and attack surface management programs.
🔗
Web Application and API Security
Web and API security architecture design and testing — covering WAF design, tuning and bypass testing, web security architecture review, and OWASP ASVS assessments.
OWASP ASVS
🧱
AppSec Program Design & Assessment
Building AppSec programs from scratch — defining policy, selecting tooling, and embedding security into the SDLC. Also assessing existing programs against OWASP SAMM to identify gaps and prioritize improvements.
OWASP SAMM
🔒
Privacy & Data Protection
Regulatory advisory covering GDPR and the Israeli Protection of Privacy Regulations. DPO advisory, privacy impact assessments, and data protection program design.
GDPR
Israel Protection of Privacy Regulations
🚨
SOC/IR Advisory
SOC design, buildout, and maturity assessment — covering IR readiness, AWS incident response, SIEM engineering, and threat hunting.
🔬
Security Research
Conducting original cyber security research, investigating threat actors, attack techniques, and emerging attack vectors, and translating findings into published technical reports, white papers, and case studies.
