Omer Yampel is a detection engineering leader with 11 years of hands-on DFIR, incident response, and security automation experience, currently leading Detection Engineering at Citadel in New York. He blends deep technical expertise—malware analysis, digital forensics, reverse engineering and security tooling—with a strong software background (BSc and MSc in Computer Science, near-perfect GPAs). Previously he led incident response teams at Cybereason and built security automation and Splunk apps at Sony, and as a sergeant in the Israeli Air Force’s CERT he developed DFIR tools used in operational investigations. An active open-source contributor, Omer has improved backend tooling for projects like Beagle (graph-based forensics) and Velociraptor (VQL plugins, cloud pub/sub, and TLS automation), showing an ability to bridge research, engineering and production ops. Colleagues rely on him to turn complex forensic data into scalable detection logic and reproducible incident workflows.
11 years of coding experience
3 years of employment as a software developer
Bachelor of Science, Computer Science, High Honors, 3.92 GPA, Bachelor of Science, Computer Science, High Honors, 3.92 GPA at University of Maryland
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
Role in this project:
Back-end Developer
Contributions:2 releases, 119 commits, 49 PRs in 8 months
Contributions summary:Omer primarily contributed to the back-end functionality of the Beagle project. Their work included updating the `setup.py` file to include necessary dependencies, removing debugging statements, and adding a new Graphistry backend. The user also implemented edge consolidation features and modified the existing code base to allow for more flexible API arguments. Furthermore, they added JSON and PCAP data source support.
Contributions:3 reviews, 7 commits, 8 PRs in 1 year 3 months
Contributions summary:Omer primarily focused on enhancing the Velociraptor backend by implementing a VQL plugin for uploading data to Splunk and adding a function to delete artifacts. They integrated the Google Cloud PubSub for message publishing. The user also contributed to the project's infrastructure by incorporating support for self-signed GUI and LetsEncrypt/AutoCert front ends. The changes include updates to the Go module dependencies.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial
Omer Yampel - Detection Engineering Lead at Citadel