AI in the engineering loop
I pioneered the adoption of AI-assisted development across the organization. From writing specs that agents turn into code to AI in everyday review and delivery, the goal is a workflow where AI is built in, not bolted on.
~/philosophy
Leading the team, owning the architecture.
I'm Yehonatan, an engineering leader at XM Cyber. I run the Full Stack Infra team - the shared components, tooling, and standards behind the company's product applications - and manage the company-wide Full Stack Guild: hiring, onboarding, and engineering standards for 20+ engineers.
Frontend is a platform, not screens
I led the shift from a monolithic frontend to independently deployed micro-apps, so each team can release on its own schedule without waiting for anyone else.
Teams over heroes
Being the go-to person doesn't scale. I invest in hiring, onboarding, and mentoring so that knowledge lives in the team - shared standards and good documentation instead of one person's memory.
Contracts, not coupling
Frontends should specify their API contracts, not absorb whatever arrives. Normalized data models, lean payloads, and deliberate FE/BE contract design keep multiple teams shipping side by side.
~/career
10+ years of building for the web, end to end.
From migrating Backbone to React at INFINIDAT to leading the frontend of XM Cyber's attack-path platform.
Full Stack Infra Team Lead · Guild Manager
XM Cyber · 5 direct reports · 20+ guild engineers- Lead the team building the reusable components and core UI infrastructure powering every XM Cyber application.
- Manage the company-wide Full Stack Guild - standards, architecture, hiring and onboarding for all web development.
- Drove flagship product delivery: a new vulnerability & risk management module, a rebuilt scenario-creation workflow, and cloud-security reporting.
- Modernized delivery with per-app CI pipelines and Sentry-based observability.
Frontend Tech Lead
XM Cyber · breach-and-attack-simulation platform- Owned attack-path visualization, reporting, and attack-simulation UIs used daily by enterprise security teams.
- Pioneered the shared React component library and data-layer patterns that became the company-wide design system.
- Acted as de-facto frontend owner: mentored and onboarded engineers, authored environment and deployment guides.
- Owned cross-module UI initiatives and FE/BE API contract design to reduce payloads and coupling.
Software Developer
INFINIDAT · InfiniBox management UI- Developed client-side features for enterprise storage management at petabyte scale.
- Modernized legacy systems, migrating features from Backbone.js to React.
Micro-frontend platform
Split a monolithic release process into independently deployed micro-apps on shared infrastructure - from one coordinated version to routine per-team deploys.
Shared components & design tokens
Built the shared component ecosystem and company-wide design system adopted by all product applications - documented in Storybook, versioned as independent packages.
Product delivery at scale
Led delivery of major product modules: data-heavy tables, filtering, and drill-down views built on the shared infrastructure.
Spec-to-code workflows
Evaluated and rolled out agent tooling, ran workshops, and made spec-to-code part of everyday delivery.
Hiring & onboarding
Shaped the hiring and onboarding path for engineers across the guild - interview process, guides, and hands-on mentoring.
Observability & CI/CD
Per-app CI pipelines, visual regression testing, and error monitoring with actionable alerting - plus ownership in incident response.
~/git
Side projects.
Designed, built, and operated end to end - live products with real users, running in production.
Dabur Reports
Production dashboards for social-media monitoring: Excel/CSV files parsed into structured reports and charts, with role-based admin, public share links, and AI-generated summaries via Cloud Functions.
Next.js 15FirebaseTypeScriptAI summaries
MILIM - מילים
Mobile-first Hebrew vocabulary PWA: word cards with TTS, a customizable quiz engine, an AI Hebrew tutor, and offline caching via a generated service-worker manifest. A native iOS/Android version is underway via Capacitor.
ReactFirebaseAI tutorPWA → Capacitor
Red7
Real-time multiplayer implementation of my favorite card game - Red7: rooms, synchronized game state over WebSockets, and the server as the single source of truth for the rules.
ReactSocket.IORecoilFramer Motion
BabyTracker
A pregnancy companion with an AI assistant grounded in curated week-by-week content and the user's own uploaded documents - Express API on Cloud Functions, conversation memory, and a fully offline dev mode.
React 19ExpressFirestoreAI assistant
~/skills
The toolbox.
Leadership
- Team management & hiring
- Onboarding & mentoring
- Agile delivery & roadmaps
- Stakeholder management
- Guild governance
AI-Assisted Development
- Claude Code · Cursor · Antigravity
- Spec-to-code workflows
- Agent loops & guardrails
- LLM product integration
Frontend
- TypeScript · React
- Micro-frontends (Module Federation)
- React Query · styled-components
- D3.js · data visualization
- Performance · a11y
Architecture & Tooling
- Design systems · Storybook
- Webpack · NX · Vite
- Jest · Vitest · Playwright · Chromatic
- GitHub Actions · Jenkins · ArgoCD
- Docker · Sentry · Lokalise
Backend & Data
- Node.js · Python
- Express · Firebase Cloud Functions
- Firestore · MongoDB · SQL · Redis
- Socket.IO · WebSockets
- REST APIs
US Patent · Granted 2023
US11575700B2
Systems and methods for displaying an attack vector available to an attacker of a networked system. Covers the attack-path visualization work I led at XM Cyber.
Education
B.Sc. Computer Science
Tel Aviv University, 2013-2017.
