Yarin Simchi

• Monitoring and analyzing security alerts using SIEM / Next-Gen SIEM platforms including QRadar, Azure Sentinel, Cortex XSIAM, Splunk, and CrowdStrike.
• Investigating and responding to security incidents in real time, including endpoint isolation, malware removal, blocking malicious IPs, domains, and hashes.
• Hands-on experience with EDR/XDR tools such as SentinelOne, CrowdStrike, Cortex XDR, Microsoft Defender, Trend Micro, and Cynet.
• Analyzing suspicious emails, files, and URLs using static and dynamic analysis techniques.
• Performing detection rule tuning, threat hunting, and OSINT-based threat intelligence.
• Monitoring web traffic and cloud security events, including AWS CloudTrail and environments across AWS and Azure.
• Writing clear incident reports and remediation recommendations for internal teams and clients.

Provided professional and courteous support in a consumer club for high-tech employees, handling product exchanges, order status inquiries, and customer requests.

Served as Information Security Coordinator Of Unit 8200

• Security Classification Management with senior government and military Personnel.
• Managed security processes in a dynamic environment, trained new soldiers, led projects, and handled sensitive information preservation.