lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Penetration Tester
Category: Security
Experience: 0 years | English: pre

Udemy:
Learn Python & Ethical Hacking From Scratch
Learn Ethical Hacking From Scratch
CISSP - Certified Information Systems Security Professional
The Complete Cyber Security Course : Network Security!
CISCO Linux 
CISCO CyberSecurity
CISCO Network
CISCO Python
UnderDefense Intership. 7months.
Security Operations Center.
I pass python courses.
Developed websites using django.
Developed telegrams for bots.
I wrote scripts for automate web tasks using selenium.
I know network protocols I understand TCP / IP OSI network models.
Knowledge of cybersecurity frameworks: Kill Chain and Mitre ATT&CK.
Network monitoring tools: Wireshark, Burp Suite, nmap, npcap.
Understending of HIPAA, NIST.
I have experience working with CISCO network devices.
Position: Penetration Tester
Category: Security
Experience: 0 years | English: intermediate

I have successfully passed the eJPT certification and in the future, I also plan to expand my collection of certifications.
Unfotunately I have no work experience, but I have completed several modules on the TryHackMe platform and successfully finished training in ethical hacking at Defscope. This allowed me to acquire practical skills in the field of penetration testing and learn various methods of vulnerability analysis and information system defense. I am ready to apply this knowledge and experience in practical work, contributing to the security and protection of the company.
I am ready to grow and develop myself in the field of penetration testing. I am interested in working with a company that supports my aspirations for professional growth and learning. I am willing to acquire new technologies and methodologies to enhance my skills and contribute to the security of information systems. Collaborating with a company that values the development of its employees and fosters a conducive learning environment would be an ideal partnership for me.
Position: Penetration Tester
Category: Security
Experience: 2 years | English: pre


Web Pentesting (Fuzzing, API,  OWASP TOP 10)
Mobile  Pentesting (dynamic and static analysis, Frida, Objection)
Infrastructure Pentesting (AD enumerating, attacking, etc; checking network devices configuration)
Linux, Windows (Installing and configuring server, management of users, configuring web server and etc.)
Network (subnetting, configuration of network devices)
Programming (Python, Bash, Flutter/Dart, PHP(Laravel), HTML, CSS,)
Configuration of SIEM Systems (ELK, Alienvault OSSIM)
Position: Penetration Tester
Category: Security
Experience: 4 years | English: fluent


Worked in a federal law enforcement agency doing investigations (OSINT), automating tasks in Python and training other team members in OSINT techniques for one year.

Worked as a pre-sales engineer in the the largest Israeli cyber security company (Check Point Software - CHKP) for one year and 8 months closing the first CHKP Infinity (a solutions package) deal in all of south Latin America at one of Argentina's key financial industry players and also onboarded the largest telco in Argentina as a CHKP mobile protection solutions partner.
Got promoted to regional overlay/team support specializing in Endpoint & Mobile protection solutions.

Worked briefly (3 months) for IBM as a cyber security consultant resource for a private bank in Argentina. Oversaw and advised other project managers in the bank regarding information security best practices. Trained web developers in basic web app vulnerabilities. Found a vulnerability within an application and offered advise on how to remediate it.

Got contacted by the CTO of Emi Labs (An Argentine tech startup) and afterwards hired to oversee and lead their security & compliance program in order to achieve their first SOC 2 Type 2 report to enable sales in the USA. 
Led acquisition, testing and deployment of multiple security solutions (password manager, MDM, EDR) to become compliant with SOC 2's Security common criteria. 
Wrote procedures related to IAM (onboarding/offboarding) and media disposal. 
Hardened the security posture by implementing MDM policies aligned with CIS Benchmarks (For windows and macOS) alongside a review of their office SAAS solution.
Trained and taught both devs and non-tech employees about information security best practices and contemporary risks.
Succeeded in leading and achieving the first SOC 2 Type 2 report with no control exceptions noted.

After obtaining the Practical Network Penetration Tester certification from TCM Security, I decided that I wanted to focus full time in training and teaching myself pentesting and offensive security and so I quit Emi Labs. 

Looking to work as a pentester or offensive security consultant. Yes. I am 100% willing to relocate to Ukraine provided the company sponsors me.
I super enjoy presenting, teaching, writing documentation, doing sales or meeting with clients, marketing or business development or anything similar but I want to focus on technical skills.

The max % of non-technical tasks that I could tolerate in my new job is 30%.
Position: Penetration Tester
Category: Security
Experience: 3 years | English: upper


Working as Penetration Tester:

- Web Application Penetration Testing
- Infrastructure Penetration Testing
- Vulnerability Management
- Android Mobile Penetration Testing
- Wireless Network Penetration Testing

Knowledge:
- OWASP Top 10 Vulnerabilities
- White and Black Box testing methodologies
- Software development lifecycle, DevSecOps experience and Secure Coding knowledge

Professional Certificates:
- CCNA
- OSCP
- eWPTXv2.0

Experience with tools and systems:
- Burp Suite Pro
- Metasploit
- Qualys VM
- Tenable.io
- NMAP
- Nessus Pro
- Amazon AWS
- F5 Big-Ip
- Fortify
- GOPhish
- VMware Horizon
Position: Penetration tester and Red Team
Category: Security
Experience: 9 years | English: upper

- Strong attention to detail in conducting analysis combined with an ability to accurately record full documentation in support of their work
- Strong technical ability in security related architecture design and assessment (manual approach to penetration testing)
- Demonstrated ability to work on multiple projects simultaneously and to work in a highly dynamic, rapidly changing environment
- Strong knowledge of information security frameworks and standards
- Strong technical ability in current application and infrastructure testing methodologies
- Personal development. All of our professionals receive comprehensive training covering business acumen, technical and professional skills development
Certifcated:

CRTP Certified Red Team Professional 
CRTE Certified Red Team Expert 
eCPTXv2 Certified Penetration Tester eXtreme 
eWPTXv2 Certified  WEB Penetration Tester eXtreme 
CEH   Practical Ethical Hacker
RCHSA - Redhat system Administrator


1- Perform web application, mobile application and network penetration tests

2- Develop processes and implement tools and techniques to perform ongoing security assessments of the environment

3 - Analyze security test results, draw conclusions from results and develop targeted testing as deemed necessary

4 - Providing technical consultation on Security Tools and Technical Controls

5 - Develop security standards, policies, automation scripts
6 - Perform security reviews of application designs and source code review

- Work with external vendors to perform penetration tests on network devices, operating systems,
databases, and Applications as necessary
- Create and hold workshops illustrating the state of the art of various technologies and assessment
strategies
- Work on improvements for security services, including the continuous enhancement of existing
methodology material and supporting assets
- Communicate technical vulnerabilities and remediation steps to developers and management
- Be responsible for performing manual penetration testing and communicating your findings to both
- Business and Developers
Provides assistance to system users relative to information systems security matters
Position: Penetration Tester & Application Security Analyst&Cloud Security Engineer
Category: Security
Experience: 4 years | English: upper

I have found lots of bugs and vulnerabilities in many systems, and I have some vital certificates in security:

Certificates: 
* CompTIA Security+
* AWS Certified Solutions Architect - Associate
* eLearnSecurity Junior Penetration Tester (eJPT)
* AWS Certified Cloud Practitioner Certification
* INE Certified Cloud Associate
* On the way to OSCP - - Offensive Security Certified   Professional
Penetration Testing
Perform penetration tests on different application
[-] Create written reports, detailing assessment findings and recommendations
[-] Controls on session management like Server-side session states, session termination
[-] Black, Gray, and WhiteBox tests
[-] Mobile Apps
[-] Web Sites and API's
[-] Internal Infrastructure
[-] Performing security risk assessments
[-] Preparation of Penetration Test reports for different audiences
[-] Conducting Vulnerability Assessments
[-] Cloud infrastructure providers: AWS
[-] Programming language: Python, Bash, PowerShell

[*] Experience with system and web application vulnerability scanning tools (e.g., Acunetix, Rappid7 appsec, Burpsuite Pro, Nessus, NMAP, Owasp ZAP, Vega, Nikto, Metasploit, John the Ripper. 
[*] Experience with programming at least one of the
following: PHP, HTML, javascript,CSS, Python, bash
[*] Perform penetration tests on web Applications. 
[*] İnstalling and configuring Vulnerability Scanner tool and assess systems using this tool to verify system security settings and configurations
[*] İnstalling and configuring WAF to protect a company’s web applications by inspecting and filtering traffic between each web application and the internet
[*] Perform penetration tests on API with Postman,Astra,fuzz API
[*] Performed security validation, penetration testing, and other technical tasks to identify risks
[*] Testing and analyzing assets for potential security threats and determining the best security measures. 
[*]  Experience with leveraging Open Source penetration testing tools, such as Metasploit and the Kali Linux toolset
[*]  Working knowledge in security framework models such as GDPR, ISO 27001 and NIST
[*] Frameworks: Metasploit, Powersploit Vulnerability Scanning:     Nessus, Tenable, OpenVAS,Nessus, Vega, Acunetix ,InsightVM, Rapid7 appSec, Owazp Zap, Acunetix, Burpsuite Pro etc. 
[*] Hands-on experience with DAST, SAST, and manual ethical hacking

I can :
[*] Provide Web, Infrastructure, Mobile(+ API) Penetration Tests
[*] Provide Vulnerability Management
[*] Create reports that contain recommendations for mitigations
[*] Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation.
[*] Involved in Secure Software Development Life Cycle process.
I want a job where I can improve my skills day by day.
Position: Penetration tester, Application security engineer
Category: Security
Experience: 2 years | English: upper

Bug bounty awards, jumping into IT security after working as a QA
Conducting penetration tests of Web-applications, Web-services, Infrastructure. Risk analysis, communication with the customer in order to mitigate vulnerabilities.
OWASP top10, burp pro, kali linux and its tools.
Interesting projects, senior colegues which can share their knowladge.
Position: Penetration tester / Application Security Engineer
Category: Security
Experience: 2.5 years | English: intermediate


Pentests: web application security assessment, mobile (Android/IOS), network security audit and WiFi tests. Classical tasks: OSINT, automated scanning, manual testing, risk assessment, reporting.
Most of the projects were done for banking sector include PCI DSS.

AppSec: worked on SSDLC of several projects, support for a platform of trainings on secure development, code review and use of automated scanners (SCA/SAST/DAST). Also had to perform pentests of web and mobile applications. (Rarely and by my desire)

Cloud infrastructure: often faced by pentests and development. I have basic knowledge (AWS) and am working on evolving in this domain.
Position: Penetration Tester | Application Security Engineer
Category: Security
Experience: 4 years | English: upper

Certifications:
   - eWPTX (eLearnSecurity Web application Penetration Tester eXtreme)
   - eMAPT (eLearnSecurity Mobile Application Penetration Tester)
   - eWPT (eLearnSecurity Web Application Penetration Tester)
I am an application security engineer with 4 years of experience. I have experience and expertise in Web applications, Mobile applications, APIs, and Network Pentest. I participate in Bug Bounties programs on Bugcrowd and Hackerone. During my work and research, I was able to find and help fix a lot of vulnerabilities that could give an attacker unauthorized access to computer systems at some corporations. I also perform source code reviews on several programming languages like PHP, JAVA, and Python and integrate SAST and DAST tools into the CICD environment.

- Carry out regular penetration tests on web apps, web APIs, mobile apps and report in detail.
- Static application security testing tools (SAST) implementation and responsible for monitoring, rule management, false-positive elimination, new rule testing, etc.
- Conduct awareness training, social engineering, carry out simulated phishing attacks.
- Working with third-party vendors to product pilot, implement, and apply the security best practices.
- Implementation and maintenance SSDLC/DevSecOps phases (SAST/DAST, Threat Modeling, Container, component security, code review, etc.)
- Integrate security control in CI/CD and operational pipelines
Position: Penetration Tester- Application Security Engineer
Category: Security
Experience: 4 years | English: intermediate


My name is Ilkin Javadov. My email : ilkincavadovweb666atgmail.com
I am a cyber security specialist with over 2+ years of experience with securing systems and penetration testing. I have vast experience in Penetration Testing, Application Security, Ethical Hacking, Vulnerability Assessment.

Tools and Skills which I have experience with:
Picus Security, Yara, Wazuh, ELK, IDS, IPS, Bro (Zeek), Snort, Suricata, Wireshark, The Hive
Penetration Testing and Vulnerability Assessment Nmap, Burp Suite, Metasploit, SQLMap, PowerShell, OWASP Top 10, oSINT, proxychains

Certificates Owned:
CEH Ec-Councl
MS-100 Cyber Security Engineer Microsoft
ICSI GNSS Cyber Security of UNited Kingdom

Ethically Hacked - Well-known companies and also Ministry of Defence UK ( awarded medal and thanks letter) and BUNDESWEHR ( German Armed Forces - awarded MEDAL of Honor and thank you letter.
Position: Penetration tester, Cybersecurity
Category: Security
Experience: 1 years | English: upper

Double winner of scholarships such as Erasmus+ and Stipendium Hungaricum. Obtained 19th place out of 1677 teams on NahamCon EU 2022 CTF. Finished MSc in Cybersecurity. Obtained IELTS English language test.
Conducted vulnerability assessments and penetration testing Identified and
analyzed vulnerabilities
Worked with Unix/Linux systems and demonstrated analytical and numerical
proficiency for problem-solving
Analyzed and interpreted test results to determine areas of risk and weakness
Worked with clients to develop remediation strategies and recommendations
for improving security
Position: Penetration Tester, Cyber Security Engineer
Category: Security
Experience: 1 years | English: intermediate

I reinforce my knowledge by participating in CTFs. My team took 4th place at UA30 offline Kyiv CTF and is now in 2nd place in Ukraine according to ctftime.org.
Actively solve CTF boxes and other various challenges on different platforms (hackthebox (30+ machines), portswigger, etc.)
- Penetration Tester
Manual penetration testing
Performed all phases of the penetration testing process
Experience in attacking and mitigating attacks on Active Directory

- Intern as a network engineer
Extensive training in networking
Worked with F5 products (LTM, iRules)
Position: penetration tester, cyber security specialist
Category: Security
Experience: 1.5 years | English: pre


Education: bachelor degree (information security)
Intermational certifications:  CEH(practical), eJPT- Junior Penetration Tester,
Work experience: 1.5 years on Ministry in Azerbaijan as a penetration tester\Cybersecurity specialist.

 prolens.az, sshscript.com, and ... web site build.
NOT WANTED - BLUE TEAM, Defensive SIDE
Position: Penetration Tester/Cyber Security Specialist
Category: Python
Experience: 3 years | English: upper


I started my career as a web developer in 2020, but in 2021, I shifted my career to offensive cyber security. While working in that role, I have successfully conducted security assessments on 30+ projects such as network security assessment, web/mobile application security assessment and source code review.
Position: Penetration Tester | DevSecOps | AppSec
Category: Security
Experience: 4 years | English: fluent


I am a cyber security specialist with over 2+ years of experience with securing systems and penetration testing. I have vast experience in Penetration Testing, Application Security, Ethical Hacking, SIEM/SOC solutions, Vulnerability Assessment, Threat Intelligence, Threat Hunting, Endpoint Security. Throughout my experience as a Cyber Security Specialist, I have successfully worked with different technologies, such as SIEM, AV, XDR, Next Generation Firewalls, WAF, Automated Adversary Emulation Tools, ELK, AWS, IDS, IPS. 


 *Tools and Skills which I have experience with*:
 **Blue Team**  Incident Response, SIEM, AV, XDR, Cortex XDR, FW, NGFW, WAF, Modsecurity, Picus Security, Yara, Wazuh, ELK, IDS, IPS, Bro (Zeek), Snort, Suricata, Wireshark, The Hive
 **Penetration Testing and Vulnerability Assessment**  Nmap, Burp Suite, Metasploit, SQLMap, PowerShell, OWASP Top 10, oSINT, proxychains
 **Digital Forensics and Investigation**  AutoPSY, FTK Imager, WinHex, Image Analysis, Stegonagraphy, PDF Analysis, Document Analysis (DOCX, PPTX, XLSX), Magic Bytes, PCAP Analysis, File Carving
 **Programming and Scripting**  Python, HTML, CSS, Javascript, C, RESTful APIs, Node.js, Express Framework, React Native, Git, SQL


 *Certificates Owned*:
 **C|EH Practical** (Certified Ethical Hacker Practical) | EC Council
 **eCPPTv2** (Certified Professional Penetration Tester) | eLearnSecurity
 **eJPT** (Junior Penetration Tester) | eLearnSecurity
 **CCNA** (Cisco Certified Network Associate) | Cisco


 *Industries which I have worked before*:
 **Banking**
 **Telecommunication**
 **Pharmaceutical**
 **News Media**
Position: Penetration tester / Ethical hacker / Security researcher
Category: QA Automation
Experience: 3 years | English: pre

Ph.D - information security
Penetration tester and security auditor. Interested in webhacking, malware analisys.and cybercrime incidents investigation.
Security assessment, research and development. Web Offensive Security.
Position: Penetration tester / Ethical hacker / Security researcher
Category: Security
Experience: 8 years | English: fluent


Penetration testing,  Ethical hacking, Red teaming, Web and mobile application security,  Hardware/IoT security, Backend/Full-stack development, Automation, Binary analysis, Zero-day research, Fuzzing, Python, Bash, Networking, Linux

Security assessment, research and development. CTF player. Bug bounty hunter.
Position: Penetration Tester/GRC + Project Manager
Category: Security
Experience: 0.5 years | English: fluent


I have undertaken a number of activities and initiatives in these years.
The experience I have gained in various positions has contributed significantly to my personal development and professional competence, improved my leadership qualities by learning to build strong relationships, recognized the benefits of positive motivation and have greatly improved speaking and communication skills.
Position: Penetration Tester  / Information Security Consultant
Category: Security
Experience: 3 years | English: intermediate


IN PASSIVE SEARCH.

Performed Internal/External vulnerability assessments and penetration tests. Assisted customer in understanding risk and threat level associated with vulnerability.

Infrastructure, active directory, web applications penetration tests. Azure penetration testing, config review and security approvals queue. 

eJPTv1 / eCPPTv2 / CRTP / PNPT / CARTP - certified. 
OSCP and CRTO planned. CESP-ADCS in a progress. Wannabe Red Teamer in the future.

Permitted and able to work in a both Poland and Ukraine, entire EU soon. (in 1 year)
Looking for a company that provides cybersecurity services for external clients. Anything else - rejected.
Position: Penetration tester, Offensive security
Category: Security
Experience: 7 years | English: pre


Penetration testing
Interesting project, different technologies, without meetings or minimal meetings. High skilled team.
Position: Penetration Tester (Pentester)
Category: Security
Experience: 2.5 years | English: upper

>Certificates:
    -GIAC GPEN
    -CompTIA PenTest Plus
    -eJPT
    -CSAS
    -CCNA
    -CEFR B2
    -Cisco ITC 
    -Qualys (Vulnerability Management Specialist)
    -CSAS
    -Invicti technical certifications

>Hack The Box [rank]
    -Hacker

-Web, Network (Internal & External), operating system and Wi-Fi Penetration Tests
-Black Box
-Fluent in Information Gathering Methods and tools
-SQL Injection
-Backdoor Shell code
-Discovering hidden XSS vulnerabilty
-Working professionaly with Linux, OS (Kali, Ubuntu etc.)
-Windows Buffer Overflows
-Password Cracking
-Lateral movement and privilege escalation methods 
-OWASP ZAP, BurpSuite, NMAP, in the same way Online Tools
-Metasploit, Acunetix, Nessus, SQLmap, etc
-Black, Gray, and White Box Penetration Tests
-Vulnerability Assessments
-Web, Network (Internal & External), and Wireless Penetration Tests
-Reconnaissance and Open-Source Intelligence
-Phishing and Social Engineering
-In-Depth Scanning and Initial Aaccess
-Hands-on experience with vulnerability scanning tools (e.g., Nmap (NSE), Burp Suite PRO, OWASP ZAP, Acunetix, Metasploit, Nessus, Nikto, SQLMap etc.)
-Hands-on experience in manual vulnerability exploitation (BurpSuite, Metasploit, netcat, POC's etc.)
-Post-Exploitation, Privilege Escalation
-Password Attacks (Cracking, Pass The Hash, Brute Forcing, Password Spraying)
-Leteral Movement, Command & Control (C2)
Security Risk assessments
Reporting
-Providing recommendations, scheduling, and applying fixes, security patches, and any other measures required to address security breaches
I prefer working remotely with a flexible work schedule

I Don't want to do:
- Tuning of Systems like DLP, SIEM, EDR, IPS, IDS, or any cyber defense systems.
- Participate in any Defensive roles like SIEM Admin or SOC Analyst.

Looking for a new experience
Position: Penetration Tester (Red Team)
Category: Security
Experience: 0 years | English: pre


I'm in training right now:
(THM) CompTIA Pentest+ 
----------------------------------------------------
The list will be updated as new material is reviewed ...
(THM) 12.07.2023 Jr Penetration Tester + certificate
(THM) 21.06.2023 Pre-Security Course + certificate
----------------------------------------------------
Twitter - Nocode2022
----------------------------------------------------
HTB (Modules + CTF) --- (username nocode2022)
THM (Modules + CTF) ---(username nocode2022)
----------------------------------------------------