Matan Tal

Experience working with SIEM - DataDog, Elasic, ArcSight, Qradar, Mcafee, RSA, Splunk, Azure Sentinel and more...
Gathering, analyzing, and processing alerts from many systems of cyber protection, handling cyber events in real-time (Isolate workstations, remove malicious files, block IPs, etc.), and writing event reports if necessary.
Experience with Mail investigations, File investigation (Dynamic & Static analysis), Proactive monitoring & Active threat hunting.
Hands-on experience in analyzing and investigating events by querying different Systems - Palo Alto Cortex XDR, Cynet, Microsoft - ATP, Sentinel One, Carbon Black, CrowdStrike, Red Canary and more.
Knowledge in security and monitoring products: WAF, IPS, NAC, AV, DLP, PROXY, MR, SANDBOX, HONEYPOT, FW (MCAS, Azure AD, Imperva, Vectra, Intezer Analyzer, EPO, Cisco AMP, Iron Port, Trend Micro, Varonis, Proofpoint, Darktrace, Malware Bytes, Illusive and more...)
Understanding of Windows and Linux processes.
Querying systems using KQL, AQL and SPL (Splunk).
Quickly perceives what happened and what needs to be done during cyber-Incidents in real-time.
Quick adaptation to different work environments and systems.
Working with clients in Israel, USA, Germany, India, and more…
Experience in gathering Threat Intelligence with various tools - OSINT.
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Proficient in utilizing SIEM tools to monitor and detect potential security threats.
Provided comprehensive cloud services and support across Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure, ensuring optimal performance and integration.
Delivered expert support for NETAPP cloud systems, focusing on data storage, backup, and recovery solutions to enhance infrastructure efficiency and reliability.
Provided exemplary customer service and technical support for end users in a timely manner.
Assisted with troubleshooting hardware and software issues to ensure optimal system performance.
Experience working with servers (of companies: Cisco, Microsoft, BigFix, Etc.)
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Experience working with AS400 systems (for example: Bosa Nova and more…)
Building queries using CMD and PowerShell

Experience working with SIEM - DataDog, Elasic, ArcSight, Qradar, Mcafee, RSA, Splunk, Azure Sentinel and more...
Gathering, analyzing, and processing alerts from many systems of cyber protection, handling cyber events in real-time (Isolate workstations, remove malicious files, block IPs, etc.), and writing event reports if necessary.
Experience with Mail investigations, File investigation (Dynamic & Static analysis), Proactive monitoring & Active threat hunting.
Hands-on experience in analyzing and investigating events by querying different Systems - Palo Alto Cortex XDR, Cynet, Microsoft - ATP, Sentinel One, Carbon Black, CrowdStrike, Red Canary and more.
Knowledge in security and monitoring products: WAF, IPS, NAC, AV, DLP, PROXY, MR, SANDBOX, HONEYPOT, FW (MCAS, Azure AD, Imperva, Vectra, Intezer Analyzer, EPO, Cisco AMP, Iron Port, Trend Micro, Varonis, Proofpoint, Darktrace, Malware Bytes, Illusive and more...)
Understanding of Windows and Linux processes.
Querying systems using KQL, AQL and SPL (Splunk).
Quickly perceives what happened and what needs to be done during cyber-Incidents in real-time.
Quick adaptation to different work environments and systems.
Working with clients in Israel, USA, Germany, India, and more…
Experience in gathering Threat Intelligence with various tools - OSINT.
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Proficient in utilizing SIEM tools to monitor and detect potential security threats.
Provided comprehensive cloud services and support across Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure, ensuring optimal performance and integration.
Delivered expert support for NETAPP cloud systems, focusing on data storage, backup, and recovery solutions to enhance infrastructure efficiency and reliability.
Provided exemplary customer service and technical support for end users in a timely manner.
Assisted with troubleshooting hardware and software issues to ensure optimal system performance.
Experience working with servers (of companies: Cisco, Microsoft, BigFix, Etc.)
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Experience working with AS400 systems (for example: Bosa Nova and more…)
Building queries using CMD and PowerShell

Experience working with SIEM - DataDog, Elasic, ArcSight, Qradar, Mcafee, RSA, Splunk, Azure Sentinel and more...
Gathering, analyzing, and processing alerts from many systems of cyber protection, handling cyber events in real-time (Isolate workstations, remove malicious files, block IPs, etc.), and writing event reports if necessary.
Experience with Mail investigations, File investigation (Dynamic & Static analysis), Proactive monitoring & Active threat hunting.
Hands-on experience in analyzing and investigating events by querying different Systems - Palo Alto Cortex XDR, Cynet, Microsoft - ATP, Sentinel One, Carbon Black, CrowdStrike, Red Canary and more.
Knowledge in security and monitoring products: WAF, IPS, NAC, AV, DLP, PROXY, MR, SANDBOX, HONEYPOT, FW (MCAS, Azure AD, Imperva, Vectra, Intezer Analyzer, EPO, Cisco AMP, Iron Port, Trend Micro, Varonis, Proofpoint, Darktrace, Malware Bytes, Illusive and more...)
Understanding of Windows and Linux processes.
Querying systems using KQL, AQL and SPL (Splunk).
Quickly perceives what happened and what needs to be done during cyber-Incidents in real-time.
Quick adaptation to different work environments and systems.
Working with clients in Israel, USA, Germany, India, and more…
Experience in gathering Threat Intelligence with various tools - OSINT.
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Proficient in utilizing SIEM tools to monitor and detect potential security threats.
Provided comprehensive cloud services and support across Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure, ensuring optimal performance and integration.
Delivered expert support for NETAPP cloud systems, focusing on data storage, backup, and recovery solutions to enhance infrastructure efficiency and reliability.
Provided exemplary customer service and technical support for end users in a timely manner.
Assisted with troubleshooting hardware and software issues to ensure optimal system performance.
Experience working with servers (of companies: Cisco, Microsoft, BigFix, Etc.)
Documented and tracked all support requests and resolutions accurately in a ticketing system.
Skilled in investigating security incidents, documenting findings, and recommending remediation actions.
Experience working with AS400 systems (for example: Bosa Nova and more…)
Building queries using CMD and PowerShell