Bar Haim
Research And Development Engineer at IBM
Sderot, South District, Israel
Summary
👤
Senior🎓
Top SchoolBar Haim is an R&D engineer with 10 years at IBM Innovation Center specializing in security-focused backend development and threat intelligence. He has deep hands-on experience translating detection rules into interoperable formats, contributing notable enhancements to the widely used Sigma rule repository and to STIX translation in the open-source stix-shifter project. His work spans implementing custom STIX objects, improving pattern logic handling, and fixing complex query translations for QRadar and Elastic ECS, reflecting both security domain expertise and pragmatic engineering. Based in Sderot, Israel, he combines a strong communications-systems engineering background with an MBA, enabling technical solutions that align with product and business needs. Early SOC and telecom infrastructure roles give him operational security perspective that complements his research-driven R&D practice. Colleagues rely on him for bridging academic rigor with production-ready security integrations that improve detection and analysis workflows.
10 years of coding experience
1 year of employment as a software developer
Physics, Computer Science, 93, Physics, Computer Science, 93 at Ironi AlephBachelor's degree, Communication Systems Engineering, 88, Bachelor's degree, Communication Systems Engineering, 88 at Ben-Gurion University of the Negev
English, Hebrew, Chinese, Arabic
Github Skills (22)
sti10
stx10
back-end-development10
python10
amazon-elasticsearch10
stig10
sigmajs10
cybersecurity10
security10
elasticsearchquery10
threat-intelligence10
aws-elasticsearch10
elasticsearch10
elasticsearch-api10
security-txt9
Programming languages (10)
Github contributions (5)
opencybersecurityalliance/stix-shifter
Jul 2020 - Nov 2021
This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:13 reviews, 14 commits, 21 PRs in 1 year 4 months
Contributions summary:Bar focused on improving the project's STIX translation capabilities, specifically for the QRadar and Elastic ECS modules. Their work involved bug fixes related to escaping values, handling the LIKE operator, and correctly translating IPv4/IPv6 addresses. Furthermore, they addressed missing features in the Elastic ECS query construction and added support for carbon black response events. The user also contributed to the project by adding and updating search fields for different ECS network fields.
repositoriesstixpythonsecurity-automationsecurity-tools
SigmaHQ/sigma
Jul 2020 - Aug 2020
Main Sigma Rule Repository
Role in this project:Backend & Security Engineer
Backend & Security EngineerContributions:3 reviews, 19 commits, 8 PRs in 1 month
Contributions summary:Bar contributed to the development of a STIX (Structured Threat Information Expression) backend for the Sigma rule repository. This involved implementing custom STIX object support, specifically "x-sigma", to handle fields missing mappings. The user also modified the STIX backend to include support for keywords without field, and modified existing backend code to better handle AND/OR/NOT logic. This work enhanced the repository's ability to translate Sigma rules into STIX patterns for security analysis.
signaturessysmonrulesecurityids
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.