About Mor Golan
Cybersecurity Team Lead · Red Team · Penetration Testing · OSCP
I'm Mor Golan, an OSCP certified cybersecurity team lead and vulnerability researcher at QMasters Cyber Security Services in Israel, leading penetration testing, cyber threat intelligence, DFIR, SOAR and vulnerability assessment.
I work both sides of the attack lifecycle, running offensive engagements and leading incident response, and I have published multiple CVEs through independent research.
I'm also an active bug bounty hunter on HackerOne, Bugcrowd, Intigriti and YesWeHack.
Experience
-
Team Lead: SOAR, CTI, DFIR, PT, AI & Vulnerability Assessment
I lead the team responsible for penetration testing, cyber threat intelligence, digital forensics and incident response, security automation and vulnerability management.
-
Penetration Tester, CTI, SOAR, Incident Response & Forensics
Threat research and vulnerability analysis, threat hunting, malicious code and network traffic analysis, and building security tools and processes.
-
SOC MDR Analyst
Threat hunting, incident handling and cross platform investigations across multiple EDR and SIEM platforms.
-
Founder, web development and SEO
Bug bounty and recognition
- 10 published CVEs credited to me by name. See all CVEs.
- HackerOne: Level 2 Signal Specialist, and a High severity bounty on a Tier 1 asset.
- Bugcrowd: Hall of Fame, Submission Shogun Level 2 and Bounty Bee Level 2.
- Intigriti: Bronze Finder Level 1.
- Hack The Box: completed the Penetration Tester path, a badge held by 0.07% of users.
Certifications
- Offensive Security Certified Professional (OSCP) OffSec · 2024
- Penetration Tester path Hack The Box · 2024
- Dante Pro Lab Hack The Box · 2024
- AWS Cloud Quest: Cloud Practitioner Amazon Web Services · 2025
- Attacking and Defending AWS TryHackMe · 2025
- 15 courses on Claude Code, agents, subagents, MCP and AI Fluency Anthropic · 2026
- Google Cybersecurity Certificate Google · 2024
- CS50's Introduction to Programming with Python Harvard University · 2024
- Cyber Security Specialist ITQ · 2022
AI and automation
I design AI workflows across offensive security, defensive security and software development, combining agent orchestration, iterative loops, fallback logic, reusable skills and MCP integrations to coordinate complex tasks across many tools.