lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Application Security
Category: Security
Experience: 3 years | English: fluent


Built projects with golang, been an application security engineer at a startup, from provisioning servers with terraform, writing ci/cd workflows with shift lefting, securing and harden container's, contribution to design implementation by advising on threat implementation of some designs and more deep things on kubernetes, gitops, using vault , environment policy implementations and more.
Position: Application Security
Category: Security
Experience: 9 years | English: upper


I have experience in Application Security, Secure SDLC implementation, Penetration testing, Malware research, Security Incident management
I am looking for Application Security position
Position: Application Security Engineer
Category: Security
Experience: 4 years | English: fluent


5+ years experiance in IT
1.5+ year experience in information security
During my work as a security specialyst i've done:
Internal and external audit - search and mitigation of risks in the field of information security; 
Monitoring and control of access procedures, monitoring of security events; 
Analysis and preparation of recommendations to increase the level of information security Implements and maintains software and hardware information security complexes;
Monitoring corporate software for malicious behavior. Vulnerability analysis on pre-production and production environment;
Conducting Security Training and Awareness;
Assisting with assessment and integration of cloud vendors and SaaS from information security requirements perspective;
Collaborating closely with Security Vendors and researching the solutions that fits our needs to implement it in company;
Developing information security documentation;
Conducting an incident tracking and participating in incident response team.
Position: Application Security Engineer
Category: QA Automation
Experience: 5 years | English: intermediate


An experienced security engineer with over 5 years of experience in penetration testing.

Has worked as an application security engineer and penetration tester for Fortune 500 companies, securing applications with tens of millions of users. Starting from 2016 has trained the Cyber Police of Ukrain.

Areas of expertise include web, mobile, and onsite penetration testing, vulnerability assessment, and internal/external network security.
Position: Application Security Engineer
Category: Security
Experience: 5 years | English: upper

In the last position, I built the Security team from scratch and implement security processes into the developer's workflow. 
Built strong cooperation with IT, Legal, DevOps, and R&D departments. From the start and up to today Security team was participated in newly created features but also review a significant part of the old services which already work in production, where was identified more than 100 vulnerabilities. Also were good results that more than 50% of founded vulnerabilities were identified during Threat Model sessions, and about 20% were identified as possible issues which prevent vulnerabilities from being presented in production.
Design and implement a system for tracking all security issues across all teams in the company with additional information, which gives us visibility on the security health of our company.
Application Security Engineer for almost five years. Where the past year and a half taking a Security Manager position and build a small team at an Israeli startup from scratch. During this time integrates the Threat Model process into the SDLC and, with my team, integrate multiple security solutions to build layers of security at the company. I also have two years of experience as a developer. During my career, I've met with various lists of security solutions and directions. Mostly related to Application Security, but was also experienced with Network Security. I have had experience with Mobile reversing, pentesting, and code emulation. Developed multiple security solutions for specific needs.
I would like to find an Application Security or Security Manager position in a Product or Startup company to work closely with the R&D team in a challenging and fast-growing environment
Position: Application Security Engineer
Category: Security
Experience: 5 years | English: upper


As an Application Security engineer I am involved in the following processes

1. Vulnerability management
- Manual security code review
- Manual dynamic security testing
- Configuration of automated security testing
- Consulting development teams on the implementation of security fixes

2. Risk management
- Analysis of application's threat surface
- Assessment of risks caused by the vulnerabilities found
- Providing recommendations on vulnerability remediation priorities

3. Secure software development lifecycle
- Conducting trainings for development teams on secure coding practices
- Configuration of automated security testing
- Conducting security audits of CI/CD and cloud infrastructure

4. Incident response
- Handling security incidents on production software instances
Position: Application Security Engineer
Category: Security
Experience: 4 years | English: upper

Delivered IoT train village at Nonamecon 2019
Delivered 4 lectures about penetration testing at Ukrainian Catholic University
BAQ conference workshop
Built SAST, IAC and secret detection into CICD pipeline
Automated SAST and secret detection vulnerability management with Python
Conducted analysis of dependencies
Conducted cloud security testing
Conducted mobile penetration testing 
Conducted docker images and kubernetes vulnerability scanning 
Provided security checklist to the dev team
Planning to develop in the application security and penetration testing
Position: Application Security Engineer
Category: Security
Experience: 3 years | English: fluent


Hi, I'm an Application Security Engineer with experience in business analysis. I work in consulting company and our goal is to help our clients' developers to create safe services, and I like doing so. I'm currently responsible for CI/CD pipeline configuration and secure development lifecycle design. I'm a fast learner and highly motivated to grow in Application Security domain.
Tools&Technologies: Checkmarx, Netsparker, Nexus IQ, Aqua CA, Clair, Mobix, Maverix, Gitlab CI, Jenkins, TeamCity, Docker, Nginx, Vmware ESXi.
As for my past experience, I used to be a pre-sales engineer in a vendor (Positive Technologies) and worked there with Application Security software (SAST and WAF). This gave me customer relations experience and deep understanding of web technologies.
Before that I worked as business analyst in GlowByte Consulting, designing DWH and data marts in bank sector. Here I learned data analysis methods and business requirements collection and analysis.
Position: Application Security Engineer
Category: Security
Experience: 4 years | English: upper

I have different vision to the web application security because of my development background.
I am application security specialist with expertise in Web for 4 years. I've been participating bug bounty programs since 2019. My skills are self-taught, Having the ability to develop and think outside the box. In my previous role I’ve done web development.

My main passion is securing web applications and I love doing gray-box pentesting, security code reviews and secure coding. 

I have working experiences in many high-level programming languages like PHP, JavaScript - AngularJS, TypeScript, NodeJS,  Ruby - Ruby on Rails, MySQL, Linux & bash. Also I have security code review experience with its frameworks for example NodeJS, AngularJS, Ruby On Rails, Django and others. You can check out my technical blog at smodnix.github.io.
Position: Application Security Engineer
Category: Security
Experience: 4 years | English: upper


I have different experiences from Penetration Testing to being part of the security transformation team. I would like to further develop my career as Application Security Engineer (focus on building secure SDLC and do security testing). 

Experience as Application Security Engineer:
• Implementing security gates into pipelines including SCA, SAST, and IAST tools. 
• Working with IaC. Scanning, fixing, and applying policies for Terraform pipelines.
• Developing Threat Modeling as a service for products teams.
• Automation routine tasks using GitLab API and GitLab scheduler(monitoring statistics of integration projects with security tools, alerting in case of policy overridden, projects languages, etc). 
• Experience with Azure.
• Working with OWASP SAMM and OWASP ASVS. 
• Security assessment for different WEB applications. 
• Security assessment for infrastructure.
• Developing awareness/workshops for developers, managers, businesses, etc (Security testing, OWASP Top 10, Threat Modeling).
• Preparing security documentation( working with Jira/Confluence). 

Experience as Penetration Tester: 
• Vulnerability Assessment.
• Web Application Penetration Testing(White/Black Box).
• Infrastructure Penetration Testing(Internal/External).
• Wireless Security Penetration Testing..
• Windows/Linux exploitation.
• Bash/Python scripting.
Position: Application Security Engineer
Category: JavaScript
Experience: 3 years | English: intermediate

- Designed and built from scratch the full-stack Node.js client facing application for cryptocurrency mining service.
- Managed and mentored the small distributed team of designers, backend / frontend engineers.
JavaScript / ES7 / TypeScript
Node.js, Nest.js / Express
AWS (ECS, EC2, S3, Cloudfront, R53, SNS, SQS)
TypeORM, PostgreSQL, MongoDB
Docker, Docker Compose
Unit testing,
React.js, Redux
Angular 5
HTML, CSS / SCSS (Responsive / Adaptive)
Bootstrap​ / Material UI / Ant
BEM
I'm looking to join a dynamic, highly motivated team, where I could work on challenging projects that would make impact on the world.
Position: Application Security Engineer
Category: Security
Experience: 3 years | English: upper

Launched architecture security review practice implementation.
Projects & tasks:
- Penetration Testing
- Preparing and launching phishing campaigns
- Integration security testing in CI/CD process
- Red-team activity
- AWS audit

Role in team: engineer, pentester with benefits xD 


I want to cover Application Security Engineer tasks and also develop myself as a DevSecOps
NOT penetration testing ONLY in responsibilities
Product company
Good processes
Position: Application Security Engineer / Cybersecurity Engineer
Category: Security
Experience: 3 years | English: intermediate


Application Security Engineer 

Responsibilities:
Conducted comprehensive security assessments on web applications and API.
Collaborated with development teams to provide secure coding recommendations and remediation strategies.
Generated detailed reports outlining findings, recommendations, and suggested countermeasures.
Conducted trainings and workshops to raise awareness of application security.
Prepared and obtained AWS Certified Security - Speciality for customer needs. 

Information Security Specialist 
				
Responsibilities:
- Automated information security processes using Python, Bash, PHP, and SQL.
- Developed an access accounting and incidents registration service for effective access and incident management. Also conducted vulnerability assessments of the service.
- Designed and implemented a phishing program and conducted lectures and mailing campaigns to increase awareness.
- Monitored antivirus systems for potential threats and promptly responded to any identified issues.
- Ensured compliance by revising and updating policies, procedures, and incident response plans, working with ISO 27001 and NIST standards.
- Created and deployed telegram bots for various purposes.
- Utilized OSINT (Open Source Intelligence) techniques to gather relevant information for security purposes.
Position: Application Security Engineer / Penetration Tester
Category: Security
Experience: 3 years | English: intermediate

eWPTX, eCPPT
-  Manual and automated security testing of Web/mobile applications and API for vulnerabilities like XSS, SQL Injection, RCE, CSRF, SSRF, broken access controls, authentication bypass, misconfigurations, and others.
- OWASP Top 10, WSTG, MSTG, ASVS, PTES
- Assessments of external and internal network infrastructure
- Metasploit Framework, Burp Suite, Acunetix, Nessus, Nmap, etc.
- Python and Bash scripting
Position: Application Security Engineer / Penetration Tester
Category: Security
Experience: 3 years | English: upper

AWS Certified Solutions Architect 
AWS Certified Security
- Proficient in web and mobile application penetration testing (DAST, SAST)
- Network penetration testing
- Cloud security assessment
- Skilled in integrating security culture into SDLC
- Well-versed in AWS cloud infrastructure
- Monitoring CI/CD pipeline for new security issues
- Developing policies and standards for information security
- Practical skills with Javascript;
- Experienced in threat modelling.
Position: Application Security Engineer, Penetration Tester, Forensic Investigator, Incident Responder
Category: Security
Experience: 11 years | English: upper

Ph.D.
President Award for young scientists
Order from National Security Council
DSSZZI Medal
Etc.
Over 15 years in Cybersecurity. 5+ years in Penetration Testing. 2+ years in Application Security. 2+ years in Cloud Security.
Certifications: CISSP, CISM, CEH, Azure Security Engineer Associate, AWS Security Speciality, Security+, CCNA CyberOps, etc.
Good salary. Interesting projects. Self-education facilities.
Position: Application Security Engineer, Reverse Engineer
Category: Security
Experience: 3 years | English: fluent


Hi, I’m Vadim. A self-motivated, quick learner, a good team player and professional in reverse engineering and analysis of mobile applications.

Familiar with OWASP TOP 10, OWASP MSTG, Android Internals, iOS & OS X Internals. Experienced in anti-debugging methods, SSL unpinning, bytecode and AST diff, network traffic analysis and decryption. I am constantly learning new technologies and search new ways to improve myself. My goal is to stay on the white side and protect it 

I researched Google SafetyNet, deobfuscated JS vendors Google reCaptcha v3, hCaptcha, Shape Security, Akamai WAF, malicious vendors Inter Skimmer, etc., removed Android protectors Dexguard, Tencent Legu, WIN32 malware packers and morphers. Participated in the development of cryptographic libraries, IDA plugins, libimobiledevice tools, futurerestore, frida-uikit, wrote iOS Internals & Security Testing documentation better than OWASP MSTG. 

Tools:
 IDA Pro, x64dbg, A64dbg, JEB, apktool, frida, adb, WireShark, Fiddler.

Languages:
 I develop in Python, JS, bash, C, C++20. Bare minimum knowledge of Java.

Architectures & Debugging:
 ASM x86/x64, ARMv7/v8, Smali, obfuscated Javascript.

Development Software:
 PyCharm, CLion, Git.
Position: Application Security Expert
Category: C++
Experience: 8 years | English: upper

Lead process of SAST in company, controlling integration part with other Enterprise services and providing best usage approach (based on existing limitations).
Analyse market in order to find other solutions with better technical (or nearly the same) capabilities but with low price (or covered price). Participate in testing such solutions and driving such initiatives.
Proposal new controls in order to improve appsec posture in company.
Provide appsec requirements for other teams.

As a final University project wrote module for Apache web-server, for recognition attacks from internet and collection them as a classical honeypot would do.
• Analysing various application security testing solutions (in SAST, DAST, SCA) in terms of quality, coverage, functional features, requirements etc.;
• Communicate with various vendors\distributors (products pilots, licensing models, prices, technical issues etc.);
• Presenting for CISO and other stakeholders suggested visions in application security controls and their workflows (taking in account current company’s posture in CI\CD, DevOps);
• Developing and staging application security initiatives in prescribed documents stack (including projects justifications, application security policies and other documents describing requirements);
• Evaluating SAST, DAST and SCA scans, communicating with developers teams;
• Manual application security testing of outcomes from infrastructure vulnerabilities scans, plus manual exploring of other issue possibilities.

OSS\SCA - BlackDuck, X-Ray.
SAST - Checkmarx, Fortify.
DAST - AppScan.
1) Participate in Application security testing controls;
2) Organising and lead work for appsec team;
3) Working with devops in order to create operational DevSecOps environment;
4) Participate in application security design and threat modelling on early stage of app design.
Position: Application Security Lead
Category: Security
Experience: 6 years | English: upper

ISO27001:LI certified
AWS Security Speciality certified
Mobile Application Penetration Tester (eMAPT) certified
Presenter at OWASP Kyiv 
Set of internal tech talks about security for engineering staff and managers
Design and maintain Secure SDLC and AppSec program from scratch
Experience as SOC/AppSec team lead: team management and development
Design and maintain threat modelling activity
Define, track and verify security requirements for healthcare, banking and fintech projects
DevSecOps: integrating security tools into SDLC (such as SAST/DAST/SCA/IaC/CSPM/etc)
Manual and automated security testing, research, verification, 3rd-party pentest support
Manage WAFs from security perspective
Kubernetes, AWS, GCP infrastructure hardening
Work with SIEM and other log collection solutions (Splunk, AlienVault, ELK)
Provided log analysis & security expertise for anti-fraud and operations teams
Vulnerability management and automation
Security automation, scripting and custom integrations via APIs
Learning sessions, techtalks and meetups for spreading security mindset across different teams
Position: Application Security/ Penetration tester/
Category: Security
Experience: 5 years | English: upper


- Conducting Web-Application Security Assessments  
- Vulnerability management 
- Secure SDLC 
- SAST/SCA/DAST tools
- Integrate security tools into GitLab CI/CD pipelines
- Penetration testing
- Experience with various programming languages (php, python, javascript)
- Collaborating with other teams, such as DevOps and IT, to ensure that security is integrated throughout the development and deployment process.
- Certified AWS specialist
- Certified Azure specialist
- Certified WAPTx specialist
Position: Application Security/Pentester
Category: Security
Experience: 2 years | English: intermediate


JUNIOR SECURITY SYSTEMS ENGINEER | 01.2020 - 02.2020 | EPAM
SYSTEMS
A tool that offers a comprehensive and powerful vulnerability scanning and
vulnerability management solution
Tools: Cloud Custodian, GCP, Bash, Python
Responsibilities:
- Creating technical documentation
- Troubleshooting
- Writing scripts for automation
JUNIOR SECURITY SYSTEMS ENGINEER | 02.2020 - 04.2020 | EPAM
SYSTEMS
Introduction of security modules
Tools: Linux, Docker, Jenkins, getcarrier
Responsibilities:
- Implementation and automation of SAST/DAST tools
- Log monitoring
JUNIOR SECURITY SYSTEMS ENGINEER | 03.2021 - 06.2021 | EPAM
SYSTEMS
The main objective of Continuous Vulnerability Management is to detect and
remediate vulnerabilities in a manner close to real time.
Tools: Qualys, QRadar, Nmap, Burp Suite, UpGuard, BitSight
Responsibilities:
- Responded to cyber incidents and investigated
- Checked the vulnerabilities for false positives, created recommendations and a
mitigation plan
- Troubleshooting
- Technical support
JUNIOR SECURITY SYSTEMS ENGINEER | 07.2021 - 12.2022| EPAM
SYSTEMS
Delivery center for Company name
Tools: Azure Sentinel, DefectDojo, OpenVAS, Microsoft 365 Defender, Active
Directory
Responsibilities:
- Responding to cyber incidents, investigating and writing runbooks
- Collecting logs and creating timeline for cyber forensics activity
- Checking the vulnerabilities for false positives, creating recommendations and a
mitigation plan
- Checked and analyzed GPOs on Active Directory
- Deployment and administration of a vulnerability management platform
- Increasing security score in security center
SECURITY SYSTEMS ENGINEER | 07.2022 - TILL NOW | EPAM
SYSTEMS
Enabling and operating Secure-SDLC in BSS (RnD, IT, Services).
Tools: Git, GitLab, getcarrier, Qualys WAS, Microsoft Threat Modeling Tool, Draw.io
Responsibilities:
- Threats Library development
- Performing Security Risk Assessment
- Performing Threat Modeling.
- Introduction and administration of processes on internal projects behind SSDLC
DevOps
Position: Application Security QA Engineer
Category: QA
Experience: 5 years | English: intermediate

CTF palyer, NET mentoring experience.
ISO 27001, reverse engineering, malware analysis,
OWASP TOP 10, penetration testing, IT audit.

Software Development:
C#, python, JavaScript, bash, T-SQL, HTML, CSS, JSON, XML, OOP, AOP, SOLID, LINQ, Entity Framework, ASP.NET, MVC/MVP/MVVM, ADO.NET, WPF, TPL and multithreading, Design Patterns, IoC, Unit Testing, regular expressions.

Operation Systems and Software:
MS Windows Server, Linux (Debian-based), Visual Studio, MS Management Studio, Coded UI Tests, 
Selenium, IIS, Active Directory, Network Sniffers(Wireshark), Web Sniffers(Fiddler, ZAP)

Technologies and Concepts:
Virtualization (VMWare Workstation, Hyper-V, Virtual Box), SCV: TFS, git, ISO OSI Model and network stack protocols, SDLC
Experienced mentor and professional growth.
Position: Application Security Specialist
Category: Security
Experience: 5 years | English: upper


Participation in SSDLC process, DevSecOps, penetration testing, supporting SIEM (Elastic stack), incident handling and response.
Access management