Open to opportunities

Martin Osher

Currently: Information Security Specialist @ Bynet Data Communications

Cyber Security Engineer with 3+ years across security operations, incident response, detection engineering and security automation. Builds Cortex XSOAR and XSIAM automations that cut manual work by ~95%, and works hands-on with firewalls, NAC, SASE and cloud security.

Hadera, Israel

Martin.osher77@gmail.com

+972529534077

VIEW_GITHUB →LINKEDIN

Projects & Deployments

13 PROJECTS

01 · FEATURED

Email Quarantine Review Automation

@ PassportCard Labs

DEPLOYED

Cortex XSOAR playbooks that automate the review of emails quarantined by Cisco IronPort.

Outcome

~95% less manual handling for this process

Cortex XSOARCisco IronPortCustom Playbooks

+ Technical details

Challenge

Every quarantined email required manual review before release.

What I Built

Several playbooks that inspect the flags responsible for quarantine, invoke the relevant sub-playbooks, check for additional flags, and continue through the appropriate review and release workflow.

Outcome

Approximately 95% less manual handling for this workflow. Exceptional cases still receive manual attention.

02 · FEATURED

Automated Invoice Retrieval & Security Scanning

@ PassportCard Labs

DEPLOYED

XSOAR playbook that retrieves invoices from linked websites, scans them, and delivers them to Finance.

Outcome

~95% less manual effort for this workflow

Cortex XSOARSeleniumChromiumFireEye IVX

+ Technical details

Challenge

Finance received EML attachments linking to invoice websites; retrieving the invoices could require following further links to access-restricted AWS S3 locations. The process relied on a manually executed script.

What I Built

An XSOAR playbook using Selenium and containerized Chromium to retrieve the invoices, attach them to the Cortex War Room, scan them with FireEye IVX, and deliver them to Finance.

Outcome

Approximately 95% less manual effort for this workflow, with exceptions handled individually.

03 · FEATURED

Prisma Access SASE Deployment

@ PassportCard Labs

DEPLOYED

Co-led the proof of concept and production deployment of Prisma Access, including FWaaS migration and GenAI usage controls.

Prisma AccessSASEGlobalProtectPrisma BrowserRBI

+ Technical details

What I Built

Migrated on-premises firewall policies to FWaaS.
Configured department- and user-based security policies, security profiles, and SSL decryption.
Connected remote users through GlobalProtect and sites through Remote Networks over IPsec.
Implemented GenAI usage controls through Prisma Browser and RBI.
Deployed the Prisma Browser Extension (PBX) on endpoints to redirect users to Prisma Browser.
Automated IPAM workflows using Prisma Access APIs.

04 · FEATURED

Internet & Telecom Cost Optimization

@ PassportCard Labs

GOAL ACHIEVED

Reviewed the company's internet and telecommunications circuits to reduce recurring costs.

Outcome

~ILS 20,000 saved per month

TelecomCost Optimization

Additional Projects

9 MORE

Custom XSOAR Integrations

@ PassportCard Labs

Developed integration code connecting custom internal systems to Cortex XSOAR for use in automated playbooks.

Cortex XSOARPythonIntegrations

DEPLOYED

XSIAM Detection Engineering

@ PassportCard Labs

Developed and tuned XQL correlation rules, onboarded log sources (including via on-prem Broker VMs), and investigated activity across XSIAM and Cortex XDR.

Cortex XSIAMXQLCortex XDRBroker VM

DEPLOYED

Dedicated Wi-Fi Network Infrastructure

@ PassportCard Labs

Led deployment of separate Wi-Fi infrastructure: FortiGate firewalls in HA, internet circuit provisioning with ISP coordination, switch installation, and backbone connectivity.

FortiGate HASwitchesISP Coordination

DEPLOYED

IPAM Internal Tool

@ PassportCard Labs

IP Address Management application to streamline network documentation and IP allocation. Website and system coding, API integration to Prisma Access and REST API integration to all of the firewalls in our sites. Handed over when I left the company.

PythonAI-Assisted DevInternal Tool

HANDED OVER

Backbone Upgrade

@ PassportCard Labs

Planning and coordination of core backbone network upgrades to improve capacity and reliability. LLD document, port mapping, assembly of the Backbone switches, firmware upgrade and configuration. Handed over when I left the company.

NetworkingHP ArubaSwitches

HANDED OVER

Rapid7 InsightIDR Implementation

@ DefendSys Technologies

Deployed and configured Rapid7 InsightIDR SIEM — log source integration, detection rules, and incident response workflows.

Rapid7 InsightIDRSIEMDetection Rules

DEPLOYED

Network Upgrades & Security

@ DefendSys Technologies

Implemented NAC, restructured backbone and switching, and deployed Wi-Fi security — Captive Portal and WPA Enterprise with cloud/on-prem IdP.

NACWPA EnterpriseCaptive PortalIdP

DEPLOYED

Network Infrastructure Building

@ DefendSys Technologies

Design and deployment of switches, firewalls, and access points for enterprise environments.

SwitchesFirewallsAccess PointsL2/L3

DEPLOYED

HBM (Hot Business Manager) App

@ HOT Business

Beyond my support role, worked directly with business customers to specify and test an app for monitoring their WAN circuits (SDH/DWDM transport).

UI TestingApp SpecificationWAN MonitoringSDHDWDMMETRO

DEPLOYED

Experience

4 ROLES

Information Security Specialist

Jul 2026 – Present

Bynet Data Communications

SOC escalations and incident response, IR playbooks, Check Point and FortiGate firewalls, Portnox NAC.

Cyber Security Engineer

Jan 2025 – Apr 2026

PassportCard Labs · Netanya

Cortex XSOAR/XSIAM automation and detection engineering, Prisma Access SASE deployment, AWS posture remediation.

Information Security Specialist

Mar 2024 – Dec 2024

DefendSys Technologies · Netanya

Customer security deployments: EDR, SIEM, NAC, email security, firewalls.

Network Support Engineer

Feb 2023 – Mar 2024

HOT Business · Yakum

Tier 2/3 enterprise network support: BGP, MPLS, IP VPN, VPLS.

Tech_Stack

Security

Palo Alto XSIAM/XSOARPrisma AccessAkamai WAFEDR/XDRDLPNACSIEMIBM QRadarCheck Point Harmony EndpointCortex XDRFortiSandbox

Cloud & Infra

AWS (EC2, S3, IAM, Lambda, EKS)TerraformOrca CSPMDocker

Networking

FortiGateCheck PointCiscoMPLSBGPVPLS

Identity

Active DirectoryEntra IDSSO/SCIMPortnox NACAruba ClearPass

Development

PythonBashTerraform (IaC)Cursor / Claude Code

Languages

HebrewEnglishRussian

Education & Certs

Cyber Security Course

John Bryce · Tel Aviv

Mar 2022 – Dec 2022

Networking & TCP/IPPenetration TestingDigital ForensicsCryptographyPython ScriptingBash ScriptingSecurity Infrastructure

VIEW_CERTIFICATE →