Application Penetration Tester
Specializing in Web, API, Mobile, and Thick Client application security assessments.
Michael is a penetration tester specializing in application security across Web, API, Mobile, and Thick Client environments. His work includes scoping, threat modeling, hands-on exploitation, proof-of-concept development, remediation guidance, and professional reporting.
His background combines client-facing application assessments with incident response, cyber threat intelligence, Python-based tooling, and security automation. He is currently advancing Red Team and Active Directory offensive capabilities.
I perform application security assessments across Web, API, Mobile, and Thick Client environments, owning the testing lifecycle from scoping through exploitation, proof-of-concept development, and reporting.
The work includes identifying complex vulnerabilities beyond OWASP Top 10, including business logic flaws and authorization weaknesses, and collaborating directly with developers, DevOps, and product teams on remediation guidance.
My work focused on proactive threat analysis and incident response for cybersecurity events, helping protect healthcare data and infrastructure while investigating malware activity, network abnormalities, and breach attempts.
Developed custom tools and dashboards to improve detection accuracy and streamline investigations, and enriched cyber threat intelligence from sources including CERT-IL and NGOs into actionable recommendations for engineering and SecOps teams.
I conducted threat analysis in a 24/7 environment, responded to alerts from multiple security systems, and documented security incidents in English and Hebrew.
Hands-on work covered EDR, SIEM, SOAR, firewall, cloud security, IDS, proxy, NAC, mail relay, sandboxing, ticketing, and Active Directory tooling across MSSP customer environments.
Work included computer setup, system installation, hardware troubleshooting, BIOS and system support, client workstation specification, and automation scripts for system testing.
Supported computer setup, system installation, hardware installation, BIOS and system troubleshooting, and on-demand client workstation specifications.
Produced photography, videography, and editing for Magen David Adom operations and media.
File Upload Testing
Upload restriction testing utility for application security assessments.
View repositoryTLS Analysis Tool
TLS cipher and protocol review for transport security audits.
View repositoryWeb Utility
XPath-oriented extraction of visible text elements from websites.
View repositoryLocal Security Tooling
Browser-based local utility for security workflow support.
Open projectAltered Security
Current
TCM Security
2024
TCM Security
2023
HackerU
2019 - 2020
HackerU
Feb 2019 - Aug 2020
Covered networking foundations, Windows Active Directory, Linux and Bash, Python, application and infrastructure penetration testing, mobile penetration testing, and reverse engineering. Led activity on the HackerU CTF platform while completing the program.
Ness Digital Engineering
2013
Certified Advanced Computer Technician.
For application security assessments, consulting, or professional opportunities, use the contact details below.