Technion
Cloud Security Lecturer
Teaching cloud security at the Israel Institute of Technology.
Applied Security Research — Cloud, Identity & AI
Cloud security leader and applied security researcher. I investigate emerging attack surfaces, analyze cloud and AI threat vectors, and build working defensive proofs of concept — securing identity boundaries, hardening SDLC pipelines, and embedding guardrails into enterprise cloud and LLM architectures.
research — zsh
$ threat-model --target=multi-tenant-saas
✓attack pathsmapped
✓identitytoken flows verified
✓tenant isolationenforced
✓supply chainprovenance checked
✓llm guardrailsin place
5/5 findings remediated
- Based
- Tel Aviv, IL
- Currently
- Lead, Cloud Platform & Security @ Mize
- Teaching
- Cloud security — Technion, CyberproAI
Scroll↓
Built, advised and taught at
Mize◆KPMG◆Technion◆ISACA◆CyberproAI◆OnCloud◆Union Bank of Israel◆JCC Association◆Mize◆KPMG◆Technion◆ISACA◆CyberproAI◆OnCloud◆Union Bank of Israel◆JCC Association◆
- 0+
- Years building and securing cloud platforms
- 0
- Major clouds secured in production — AWS, Azure, GCP
- 0
- Microsoft & industry certifications
- 0
- Institutions where I teach cloud security
01Capabilities
Offensive-informed research turned into defenses that ship — across identity, infrastructure, the SDLC and AI.
- 01INFRA
Cloud & Container Security
Azure, AWS and GCP hardening, Kubernetes and container security, CSPM, and infrastructure-as-code security.
- 02IAM
Identity Security
Cloud IAM and Auth0 architecture, privilege-escalation mitigation and trust-boundary evaluation for complex token and session flows.
- 03SDLC
AppSec & DevSecOps
Secure SDLC ownership, SAST/DAST, supply-chain integrity and C#/.NET code hardening.
- 04ATTACK
Research & Threat Analysis
Attack-path analysis, vulnerability research across distributed systems, threat modeling and zero-to-one defensive prototyping.
- 05LLM
AI & LLM Security
Guardrails for AI agents, LLM-powered secure code review, Azure AI Foundry security and GenAI workflow governance.
02Research & Builds
Mize
AI security code reviewer
An LLM-powered pull-request reviewer that catches logic flaws, insecure patterns and vulnerabilities before merge.
LLMsAppSecCI/CD
Mize
Identity platform on Auth0
End-to-end authentication and authorization — architected and coded — securing complex token and session flows.
Auth0IAMC#/.NET
Mize · POC
Multi-tenant embedded analytics
Security feasibility research and a working POC for customer-facing analytics with strict tenant isolation.
MS FabricPower BIIsolation
03Experience
- Jul 2026 — Present
Cloud Security & Platform Lead (CTO Office)
CurrentMize · Tel Aviv
Previously: Cloud Solution & Security Architect | Lead Engineer (Nov 2024 – Jul 2026)
- Partner with the CTO to lead applied security research — investigating ambiguous security challenges, evaluating emerging attack vectors and building defensive POCs from scratch.
- Researched and engineered an AI-powered PR security reviewer that uses LLMs to detect logic flaws, insecure patterns and vulnerabilities before merge.
- Lead cloud and application security architecture: threat modeling and refactoring legacy services to enforce strict multi-tenant isolation and secure-by-design principles.
- Architected and coded end-to-end authentication and authorization on Auth0, mitigating identity attack paths and securing complex token and session flows.
- Ran security feasibility research and built working POCs for enterprise AI integrations (Azure AI Foundry) and multi-tenant embedded analytics (MS Fabric, Power BI).
- Own the Secure SDLC and DevSecOps platform: CI/CD build integrity, automated SAST and dependency scanning, and the secure migration from TFVC to Git.
- Engineered runtime telemetry and security audit logging in C#/.NET with Datadog APM to detect anomalous behavior and accelerate incident investigation.
- Jan 2024 — Nov 2024
Senior Cloud Cyber & Security Architect
KPMG Israel · Tel Aviv
- Led offensive-informed architecture reviews, threat assessments and complex security escalations as a primary technical authority for enterprise clients.
- Investigated cloud attack paths, IAM misconfigurations and lateral-movement risks across hybrid environments, designing defensive frameworks to eliminate systemic vulnerabilities.
- Assessed software supply chain security, artifact provenance and dependency risk, guiding R&D teams through remediation of architectural gaps.
- May 2025 — Present
Cloud & Cyber Security Lecturer / Speaker
OngoingCyberproAI & Technion – Israel Institute of Technology · Global / Tel Aviv
- Research and present emerging cloud attack vectors, Kubernetes and container hardening, and Azure security strategy to engineering and security audiences, including ISACA.
- Turn vulnerability research and defensive patterns into practical workshops that train engineers to build exploit-resistant cloud systems.
- Nov 2022 — Jan 2024
Cloud Security & Infrastructure Engineer
OnCloud · Tel Aviv
- Engineered secure infrastructure across AWS, Azure and GCP, hardening cloud IAM permissions, cryptographic key management and certificate lifecycles.
- Implemented network segmentation, multi-tenant isolation controls and container security policies for distributed Kubernetes environments.
- Earlier
Specialist · JCC Association of North America · 2022
IT Specialist · Union Bank of Israel · 2022
04Teaching & Credentials
Bridging the gap between theory and real-world cloud security — for students, practitioners and enterprise teams.
CyberproAI
Cloud & Security Speaker
Courses and workshops on cloud architecture, Azure security strategy and automation.
ISACA
Guest sessions
Emerging cloud attack vectors, and Kubernetes and Docker hardening for secure deployments.
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Identity and Access Administrator Associate
Certified SAFe® DevOps Engineer
Innovation in Education Award