lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Penetration tester
Category: Security
Experience: 4 years | English: upper


General information:
Penetration testing WEB applications with black-\grey-\white- box approach. 4+ years of experience
Manual, semi-automated checks with BurpSuite for access controls, injections, business logic abuses, OWASP10, etc. Writing scripts for multi-step exploitation with Python\Bash\BurpSuite extensions.

Source code security checks for known vulnerable patterns and dangerous functions. Detecting insecure application business logic (WhiteBox).

Penetration testing iOS\Android applications (rooting, jailbreaking, bypass root\jailbreak detection, frida tools, adb, MobSF, GrapeFruit, etc.; use of MSVS, OWASP MSTG guidelines)

Information Gathering and Reconnaissance
Vulnerability Assessment of External Networks
Vulnerability Assessment of Web Applications, iOS\Android applications.

Pivoting, Exploitation, Privilege Escalation, Post-Exploitation, and persistence with Metasploit.

Advanced Reporting skills: 

impact and difficulty definition, describing the issue and providing recommendations for the root cause. Evaluate severity according to the risk matrix and CVSS3.0.


Technical skills:

Methodologies and cheatsheets - OWASP WSTG, OWASP MSTG, MSVS, ASVS, hacktricks, portswigger.
OS - WEB, iOS, Android, Windows, *-nix
Cloud: AWS infrastructure configuration security assessment.
Tools: Burp Suite, offensive security(Kali linux\parrot OS) toolset of nmap, whatweb, wpscan, gobuster, dirb sqlmap, Metasploit, hashcat, Nessus, OpenVAS, etc. ; ScoutSuite reports, Pacu.

Grapefruit, adb, frida, frida-tools, MobSF, Android Studio, jadx (jd-gui), etc.

Soft and Management skills:
Process excellence
Process optimization researching.
Communication with clients and managers (Q&A)
Providing project status updates
taking a Project lead role responsibilities - team\self coordination during a project, time estimations.
I am open to discussing only penetration testing opportunities. 

A brilliant opportunity for me is a penetration testing position (or Security Engineer with similar requirements), which includes the scope of work as Web, API, and mobile applications. The job is in Pentest-as-a-Service.
The team that has many security-related learning benefits and knowledge sharing on leading trends such as cloud security, mobile application pen-tests, and interesting and complex real-life cases in Web applications, but not limited to them.
Position: Penetration tester
Category: Security
Experience: 2 years | English: upper

Successfully finished all my projects
Hello there, nice to e-meet you!

Let me briefly describe my experience so you will come up with a pleasant conclusion:
Experience with system administrating:
*Setting monitoring agents
*Setting mail server and other open source solutions to improve incident response time
*Resolving issues related to the operating system or peripheral hardware

Experience with penetration testing:
*Performing successful penetration testing on web applications
*Solid understanding of OWASP top 10 vulnerabilities
*Solid knowledge of NMAP/Burp Suite/Metasploit tools
*Solid knowledge of OWASP testing guide

Experience with SOC:
*Alert/incident analysis and quick response
*Investigating security incidents
*Creating dashboards based on log events in Graylog
I would like to work as a penetration tester
I would like to complete certification in Ethical hacking
Last of all, but not least - I would like to work in a place where your work and effort are valued
Position: Penetration tester
Category: Security
Experience: 0 years | English: upper


Highly motivated and technically skilled Junior Pentester with a strong passion for cybersecurity. Possessing a solid foundation in coding, exceptional communication abilities, and a comprehensive understanding of various technical concepts. Demonstrated expertise in completing numerous Capture the Flag (CTF) challenges, showcasing problem-solving and analytical thinking skills. Eager to leverage these skills to contribute to a dynamic organization and gain practical experience in the field of penetration testing.
Position: Penetration tester
Category: Security
Experience: 4 years | English: intermediate

Chief consultant on web security
Web Application Penetration testing
Hostimul LLC
Data Processing Center.
Oil Fund Azerbaijan
HostArt
AZBA LLC
National CERT Azerbaijan
Good team in the company.
Position: Penetration tester
Category: Security
Experience: 2 years | English: intermediate

Winer on Hackathon of Cyber Education Day 2021
BCSP
Hosting manager at “FireLink” (6 month)
Security Analyst at “Deloitte” (6 month)
Penetration tester at “Deloitte” (January 2021 - current)
Security Education Mentor at “Securno” (part-time).
Sociable and friendly team
Interesting tasks
Position: Penetration tester
Category: Security
Experience: 1 years | English: upper


I have 1 year of professional experience in penetration testing, backed by an OSCP certification. Along with my expertise in platforms like Hack The Box (HTB) and TryHackMe (THM), I possess strong Active Directory skills. I have hands-on experience in assessing and exploiting Active Directory environments, including tools such as BloodHound, PowerSploit, Impacket, and Mimikatz. My knowledge extends to techniques like privilege escalation, lateral movement, domain enumeration, and password cracking within Active Directory. Combined with my proficiency in network scanning, web application testing, and other penetration testing tools, I provide a comprehensive approach to identifying and securing vulnerabilities across various domains.
Position: Penetration tester
Category: Security
Experience: 2.5 years | English: upper


I have been developing myself in the Information Security field for more than 3 years. Through this, I have learned to work with many tools for penetration testing and writing report. Additionally, I have some experience with firewalls (PaloAlto), EDR/XDR systems and SIEM (qRadar). I have also gained 3 international certificates, namely CEH Practical, eJPT and CyberOps)
Position: Penetration tester
Category: Security
Experience: 6 years | English: intermediate


I serve as a Security Engineer/Pentester in one of the Processing Companies in the Azerbaijan Republic.
Daily duties are related to find exploitations and resolve security breaches.
For almost six years, I am in this field with experience in different security roles in various companies. Have good skills with different kernels and OS, experience with multi-vendor security products like endpoint security, data loss prevention, vulnerability assessment, and other defensive and offensive tools.
Position: Penetration tester
Category: Security
Experience: 5 years | English: fluent


I spent almost 4 years at two Big 4 consulting firms in cyber security teams starting from penetration testing intern to senior consultant leading web application penetration testing, red teaming and other offensive security projects. Currently working in an Agile environment of a software company, I am responsible for running web application pentests for internal developer teams and developing internal red/purple teaming capabilties from scratch.
I am looking both for interesting part-time projects and new full-time career opportunities which will let me further develop my skills in red teaming and penetration testing.
Position: Penetration tester
Category: Security
Experience: 1 years | English: pre


IT Support Users, Printers, and Troubleshooting.
Deployment and Configuring: Windows Server (DNS, DHCP, AD DC, Exchange Server) Linux Server ( Redhat, Ubuntu, Apache, nginx )
Manage and Configuring: Servers (Linux, Windows, Exchange), Security (Qradar Siem, XDR Cortex, ProofPoint, Cisco ESA), Nertwork (Fortigate, pfSense)
Penetration Testing web, and Operation systems Linux, Windows.
Position: Penetration tester
Category: Security
Experience: 0 years | English: intermediate

• Rootme - exploitation OWASP, web and network vulnerabilities;
• PortSwigger web academy - learning common vulnerabilities of OWASP top 10 and more;
• TryHackMe – passing the CTFs and learning the basic skills for the pentest;
• INE – completed courses Penetration Testing Student and Penetration Testing Basics.
Junior penetration tester with a strong interest in ethical hacking, such as web and network hacking. Currently studying and passing labs in PortSwigger and INE, where I exploiting and finding most common vulnerabilities in network and web applications.
Position: Penetration tester
Category: Security
Experience: 5 years | English: upper

I am certified as penetration tester by eLearnSecurity
Looking for a position as penetration tester.
As a part of my daily job I perform security assessment of web applications, looking for security threats and suggesting the way how they can be fixed. Validating the fixes and work closely with developers team if they need assistance in fix/concepts details
Position: Penetration tester
Category: Security
Experience: 0 years | English: pre

CERTIFICATIONS
Cisco NetAcad:
    CCNA: Introduction to Networks (2021)
    Cybersecurity Essentials (2021) 
Coursera:
    OWASP Top 10 (2023) 

PERSONAL PROJECTS 
    TaxoApp (11/2022 - 01/2023) | Server-side, Node.JS
    Cyber-hygiene (02/2023 - Paused) | React Native

TryHackMe - in the top 9%
Noncommercial university project / Back-end developer 
Kharkiv National University of Radioelectronics 
11/2022 - 01/2023, Kharkiv
Together with a classmate have created light version of mobile application for Taxi. My task was to write a server for application. Technologies: Node.js, Express.js, Mongoose, Web-Socket, Socket.io

Startup: Education application / React Native developer 
Hackathon 1991 
02/2023 - Paused,  
Project for participation in Hackathon 1991. Theoretical material on the basic principles of security on the Internet (social networks, various sites, etc.)
Technologies: React Native
Position: Penetration tester
Category: Security
Experience: 4 years | English: upper


- OWASP Top 10 Issues identifications like SQLi, CSRF, XSS, IDors etc.
- Perform penetration tests on different application
- Create written reports, detailing assessment findings and recommendations
- Controls on session management like Server-side session states, session termination

Using tools and operating systems: Burp Suite, Kali Linux, Nmap, Sqlmap, OWASP Zap, Wireshark, Metasploit  etc.
I'm interested in penetration tester position
Position: Penetration tester
Category: Security
Experience: 1 years | English: upper


Penetration tester:
Perform penetration tests on computer systems, networks and web applications
- Search vulnerabilities and weakness points which can be exploited 
- Research, evaluate, document and discuss findings with IT teams and management
- Review and provide feedback for information security fixes
- Establish improvements for existing security services, including hardware, software, policies and procedures
Position: Penetration tester
Category: Security
Experience: 3 years | English: upper


Performing manual penetration testing of web applications, APIs, mobile applications;
Processing of issues reporting; 
Application security assessment of web applications according to OWASP methodology;
Providing proof of concept of found vulnerabilities for owners and product engineers (python based exploits for self-discovered vulnerabilities, etc);
Small team management;
Familiar with SOC L1;
Position: Penetration tester
Category: Support
Experience: 1 years | English: fluent

Successfully resolved over 90% of technical issues reported to the support team within 48 hours.
    Implemented a new remote support process that reduced the need for on-site visits by 50%.
    Trained and mentored new team members on technical support best practices.
    Consistently received positive feedback from clients regarding the quality and speed of technical support provided.
    Cut downtime by 30% by coordinating with different internal teams and implementing regular system maintenance
Provided technical support for both Windows and Linux systems, resolving hardware and software issues for clients. Troubleshooted and solved network connectivity problems, assisted with system and server maintenance, provided training and guidance to end users. Utilized remote access tools to resolve issues for clients remotely. Performed hardware upgrades and replacements as needed. Maintained inventory of spare parts and equipment. Documented all troubleshooting steps and resolutions in a ticketing system. Communicated effectively with clients to understand and resolve their technical issues.
I already have some experience in technical support for sometime in an office and I think it;s better to do the job remotely where I can be able to move around without being held in one place. I also think it's better to explore in different companies and meet new people and have new experiences and learn from them.
Position: Penetration tester
Category: Security
Experience: 0 years | English: intermediate

I participated with the team as a speaker at the All-Ukrainian scientific conference with a report on information security. Even in my free time I find interesting CTFs on TryHackMe & HackTheBox on the last site I registered for the online CTF "HTB University CTF 2022"
There was no work experience in the specialty yet, but this does not prevent me from developing in the direction of penetration tests, learning new tools, passing ctf. I usually pass them on TryHackMe and on HackTheBox.
Position: Penetration tester
Category: Security
Experience: 3 years | English: fluent

- Created & managed IT infrastructure of SME company (~50 laptops, 3 servers, several routers/switches)
- Managed AWS infrastructure for mobile apps;
- reversed several android / ios apps;
- gained access to router under MikroTik OS;
- gained key for Wi-Fi net;
- obtained cookies from SquirrelMail using known vulnerability;
- Understanding PCI DSS 2.0 requirements;
- Understanding GDPR requirements & regulations;
- Deep knowledge of info sec principles;
- Extensive practice with Apps/OS/Web/Network security; 
- Experience in assessment, identification, monitoring and reporting infosec risks;
- CCNA + MCP certificates;

Linux/Windows advanced user, bash, Kali, Cubes, Tails.
Able to write quick routines using JavaScript/Java/Python.
3+ years java programming experience.
5+ years of sys admin experience.
Position: Penetration tester
Category: Security
Experience: 11 years | English: intermediate


will be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field laterwill be field later
Position: Penetration Tester
Category: Security
Experience: 2.5 years | English: upper


2-years of experience with test automation:
UI testing with Cypress (JavaScript)
API testing with Spock (Groovy)
Security API testing with PyTest (Python)
1-year experience with penetration testing (cloud, desktop)
Working with penetration testing tools (Burp, ZAP, Kali, etc.)
OWASP Top 10
Bug finding and reporting.
Creating documentation and execution of test cases.
Position: Penetration Tester
Category: Security
Experience: 4 years | English: upper

Winner of two CTF competitions. 
Maker of CTF competition for students.
Related certifications:
- eLearnSecurity Web Penetration Tester eXtreme (eWPTXv2)
- eLearnSecurity Web Penetration Tester (eWPT)
- eLearnSecurity Junior Penetration Tester (eJPT)
I am self-motivated person, who love to work in team.
4+ years experience in:
- Performing Web, Network (Internal & External), Wi-Fi Penetration Tests, 
- Performing Social Engineering Tests
- Conducting vulnerability assessments
- Performing security risk assessments
- Customer consulting and support
- Providing recommendations for threat mitigations
- Penetration test report preparation
- Project results presentation for customer

Looking for remote (or partially remote with office in Kyiv or Lviv) position for Penetration Tester.
Have in-depth knowledge in Web and Network Penetration Testing.
I would like to join big Penetration testing team (up to 15 members) to gain experience from more experienced professionals and to perform penetration test for different customers and projects.
Position: Penetration Tester
Category: Security
Experience: 3 years | English: upper

I have been working as security specialist in offensive field for the last three years. Tons of books, completed courses and labs, CTFs, bug bounty programs and extensive work experience taught me how to be professional ethical hacker.
ActiveAuditAgency has given me invaluable experience, particularly in dealing with international clients, clearly following the OWASPv4.2 methodology, client consulting and remediation. On top of that, because of them, I have understanding how to work with Nessus, Nexpose, Aqunetix and bunch of other staff.
In Smart-Holding I was responsible for vulnerability management and conducting penetration testing of the infrastructure. There is where I learned about testing cloud services.
Fo now, I am ready to move forward with new challenges
Position: Penetration Tester
Category: Security
Experience: 3 years | English: intermediate


As a Penetration Tester in the Red Team, my current role involves planning and executing targeted penetration testing engagements to assess the security of the organization's systems, networks, and applications. I conduct reconnaissance, vulnerability assessments, and exploit identified vulnerabilities to gain unauthorized access and demonstrate potential attack impact. I document findings and provide detailed reports with remediation recommendations. Collaboration, continuous learning, and staying updated with the latest security threats are essential aspects of my role. The goal is to help organizations improve their security posture and resilience against cyber threats.

Technologies Used:

Automation and Manual Tools:

*OWASP ZAP: Utilized for web application scanning, vulnerability detection, and automated security testing.
*Nessus: Employed for vulnerability scanning and assessment of network infrastructure and systems.
*Nikto: Utilized for web server scanning, identifying potential vulnerabilities, and misconfigurations.
*Burp Suite: Integrated suite of tools used for manual and automated testing of web applications, including proxying, scanning, and fuzzing capabilities.
*Metasploit: Framework used for exploiting vulnerabilities, conducting post-exploitation activities, and validating security controls.
*Nmap: Command-line tool employed for network reconnaissance, port scanning, and service enumeration.
*Wireshark: Utilized for network traffic analysis and packet inspection.
*Python scripting: Leveraged to automate repetitive tasks, customize security testing workflows, and develop proof-of-concept exploits.

Mobile Pentesting Tools:

*MobSF (Mobile Security Framework): Utilized for static and dynamic analysis of *Android and iOS applications, identifying vulnerabilities and insecure code practices.
*Burp Suite Mobile Assistant: Integrated with Burp Suite, used for testing mobile app APIs and intercepting and modifying app traffic.
*Drozer: Utilized for dynamic analysis of Android applications, including runtime manipulation, content provider analysis, and vulnerability detection.
*Frida: Employed for dynamic analysis and manipulation of mobile app behavior, allowing runtime instrumentation, hooking, and patching.
*Appium: Used for mobile application testing, automating interactions with mobile apps for security assessment.
Position: Penetration Tester
Category: Security
Experience: 4 years | English: intermediate

Cisco Certified Network Associate Routing and Switching – CISCO
IELTS – British Council
SCORE:6.0
As a Penetration Tester, I provide various types of Cybersecurity services including Web/API/Infrastructure Penetration Testing, Red Team Assessment, Source Code Analysis,

Security:
- Web application penetration testing
- Infrastructure penetration testing
 Vulnerability management
- Linux and Windows security
- Social Engineering
- OSINT
- Red Team assessments
- Performing security risk assessments









Security Operations Center Analyst 
- Monitoring and filtering of firewall log and traffic for malicious intent
- Investigation of cases detected on SIEM, such as log hunting
- Performing malware analysis on potentially dangerous files detected via mail gateway or antivirus
- Investigation of possible data leaks found on DLP
- Research on improving the efficiency of SOC
Position: Penetration Tester
Category: Security
Experience: 1.5 years | English: upper

CTFs:
HackTM CTF Quals 2023 – 74 place (team
Dynamik);
HTB CyberApocalypse CTF 2023 - 69th place (team Dynamik);
UA30CTF - 2nd place (team Ghost of Sheva);
MITIT 2023 CTF - 2nd place (team Ghost of Sheva);
Sikorsky CTF 2023 - 1st place (team Ghost of Sheva).
As of right now, I have no position anywhere. During my 1.5 years at the last workplace, I had the opportunity to immerse myself in various aspects of cybersecurity, including OSINT investigations, SIEM system integration, antivirus software management, raising cybersecurity awareness among my colleagues. 
My goal is to become top-notch Red Team Operator / Penetration Tester.
Position: Penetration Tester
Category: Security
Experience: 3 years | English: fluent

I am preparing to take either eCPPTv2 or OSCP soon.
Before starting my PhD education in Computer Science (Cyber Security) in New York, I worked as a Penetration Tester at one of the leading banks in Azerbaijan, where my main responsibility is to find security vulnerabilities in mobile/web applications, bank networks, and servers. During security tests of applications, I used tools like Burp, Nmap, Metasploit, Fuzzing tools, BloodHound, CrackMapExec, etc. in order to detect vulnerabilities like SQL injection, Remote Code Execution, Broken Authentication, and Access Control, misconfigurations, and SSRF to name a few. 
Previously I worked as a software engineer for two years at CRBN company, where I wrote API for mobile/web/IoT applications in Java/Spring. Prior to that, I was a teaching assistant at an IT course.
I prefer a flexible work schedule.
Position: Penetration Tester
Category: Security
Experience: 1 years | English: fluent

CompTIA Pentest+ , Security+
AWS Certified Cloud Practitioner  
HTB Pro Labs: Dante 
Hack The Box [rank] -  Hacker 
PEN 100 certification from Offensive Security 
Currently pursuing a  Certified Penetration Tester Specialist (CPTS) certification from Hack The Box 
Ran 100 Km, Lifted 200 kg deadlift, and pwned Hard box on HTB on the same day
-Black Box Penetration Tests
-Active & Passive reconnaissance (OSINT)
-Web, Network (Internal & External), operating system and Wi-Fi Penetration Tests
-Hands-on experience with vulnerability scanning tools (e.g., OWASP ZAP, Acunetix, Metasploit, Nessus, Goby Red Team)
-Vulnerability Assessment Hands-on experience with Metasploit  and manual vulnerability exploitation (BurpSuite PRO, POC's etc.)
-Lateral Movement and Privilege Escalation Methods (Windows and Linux)
-Windows Buffer Overflows
-Password Cracking
Position: Penetration Tester
Category: Security
Experience: 1 years | English: fluent


(B.Sc in Computer Science)
I worked on Vulnerability assessment using Burp suite, Nmap, Nessus, Wireshark, Sqlmap, and other technologies.
I used most of the tools for web penetration testing, packers analysis, database exploitation, OS detection and open ports.