lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Pega Developper
Category: Other
Experience: 0.5 years | English: upper

CERTIFIED SYSTEM ARCHITECT (CSA)
CERTIFIED PEGA BUSINESS ARCHITECT (CPBA)
Knowledge of:
• Pega's principles of application design and development
• Modelling the life cycle of a case
• Capturing business objectives and business rules
• Gathering and documenting requirements and specifications
• Configuring case and case processing	behavior
• Creating data classes and properties for use in a Pega application
• Automating decision-making	throughout an application to improve process efficiency
• Designing responsive user forms for use on any platform or browser
• Designing reports to deliver key insights to business users
• Managing of application reference data to meet changing	business conditions
• Testing application design to	analyze rule behavior and identify configuration errors
• BPMN 2.0 notation.
Position: Peneteration Tester
Category: Security
Experience: 2 years | English: fluent


I am a tech-savvy professional currently pursuing a bachelor's degree in Electronics/Communications Engineering. I am well prepared to excel as a penetration tester. I am seeking an internship role to further improve myself and help pursue my passion for developing effective security strategies.
Position: Penetrating tester
Category: Security
Experience: 2 years | English: intermediate


Penetration tester freelance 2022 - 2023.
System Administrator 2019 - 2022. Assembly PC and phone firmware 2014-2017.
On an ongoing basis, to improve my experience and knowledge, I participate in CTF tasks.
Position: Penetration Test Engineer
Category: Security
Experience: 2 years | English: upper

======================

I finished the courses:
- Full Ethical Hacking & Penetration Testing Course | Ethical;
- Metasploit Framework: Penetration Testing with Metasploit;
- Intermediate Python;
- Nmap For Penetration Testing: Beginner To Advanced;
- Ethical Hacking: SQL Injection for Beginners;
- OTUS Security testing course.
- AQC Development crash course SoftServe - Java;
- JavaScript.

======================
I am experienced with a diverse skill set in the field of cybersecurity and software testing. My skills include Network Security, Automated Security Testing, SAST, DAST, RASP, Continuous Integration and Continuous Delivery (CI/CD), Web Penetration Testing, Team Leadership, Quality Management, Manual Testing, Process Flow Documentation, Test Automation, API Testing, Python, Networking, Selenium, Pytest, Cypress, Scrum, Mobile Testing, and Web Testing.

With my expertise in Network/Web Security and Automated Security Testing, I can effectively identify vulnerabilities and recommend security measures to prevent cyber attacks. My knowledge in CI/CD and Gitlab allows me to integrate security testing into the software development process, ensuring that security is considered at every stage of development.

I have experience in Penetration Testing, both in manual and automated testing. 

I have led teams in a manual testing area, providing guidance and support to identify and address all found bugs. I am well-versed in quality management and process flow documentation, ensuring that testing processes are efficient and effective.

My expertise in Test Automation, API Testing, and Python allows me to create automated tests that are reliable, accurate, and efficient. I have experience with Selenium, Pytest, and Cypress, enabling me to create and execute tests for web applications.

I am well-versed in Scrum, allowing me to work effectively in an agile development environment. I understand the importance of collaboration and communication, and I am able to lead and work effectively as part of a team.

In summary, my expertise in Network Security, Automated Security Testing, Penetration Testing, Test Automation, and Scrum make me a valuable asset to any organization. I am committed to excellence and dedicated to ensuring that software is secure and reliable.
• I want to work in a friendly team that is open to communication, whose members respect each other and take into account the views of others.

• I want to work in a team that values everyone's contribution to the cause and the idea of the company.
_______________________ 

• I do NOT want to work with unmotivated people who do not know what they should do and why they are on the project.
Position: penetration tester
Category: Security
Experience: 2.5 years | English: fluent


During my time as a penetration tester, I gained invaluable experience in identifying and mitigating security vulnerabilities within organizations' systems and networks. My role involved conducting thorough assessments and ethical hacking activities to evaluate the effectiveness of their security measures.

One of the key aspects of my work was performing vulnerability scans and penetration tests on various applications, networks, and infrastructure. I utilized a range of cutting-edge tools and techniques to simulate real-world attacks, uncover potential weaknesses, and provide actionable recommendations for enhancing security posture.

Collaboration was a vital part of my job as I worked closely with clients and internal teams to understand their unique requirements and objectives. Through effective communication and active engagement, I developed comprehensive penetration testing strategies and customized testing methodologies that aligned with their specific needs.

Throughout my tenure, I encountered diverse challenges, which honed my problem-solving skills and enabled me to think creatively when encountering complex security issues. I leveraged my technical expertise to exploit vulnerabilities, circumvent security controls, and gain unauthorized access to systems—all with the aim of strengthening overall security defenses.

Moreover, I documented my findings in detailed reports, highlighting the vulnerabilities discovered, their potential impact, and recommended remediation steps. I presented these reports to stakeholders, including senior management and technical teams, providing clear explanations and guidance to facilitate effective security enhancements.

My work experience in penetration testing has not only deepened my technical knowledge but also instilled in me a strong sense of responsibility and a commitment to maintaining the highest standards of ethical conduct within the field of cybersecurity.
Position: penetration tester
Category: Security
Experience: 1 years | English: upper


I work on a project:

OWASP TOP 10 Broken Access Control

Broken Access Control happen when a user can access a resource or 
take an action they are not allowed to; this is a weakness in the
system's access control.
Common access control vulnerabilities include:
1.violatiov of the principle of least privilege
2.modifying the URL, permitting viewing or editing someone else's account

How to prevent
1.Disable web server directory listing
2.implement deny access default function
3.Continuous assessment of application with invalid input

OWASP TOP 10 Injection Flaw

It is a type of attack where attacker supplies untrusted input to a program, 
This input gets processed by an interpreter as part of a command or query.
. The different type of injection attack:
. Command injection
.SQL injection
. Code injection

How to prevent
1.input validation
2.Use positive server-side input validation
3.escape special characters using the specific escape

OWASP TOP 10 Insecure Design

Insecure design comprises a variety of risks that arise from neglecting design and 
architectural best practices, beginning with the planning phase and 
continuing through the implementation phase.
.An insecure design cannot be fixed by a perfect implementation 
. Preventive Action
. Use threat modeling for critical authentication, access control, 
business logic, and key flows
. Limit resource consumption by user or service

OWASP TOP 10 Security Misconfiguration

1.Security misconfiguration can happen at any level of an application stack, 
including the network services, platform etc.
2.Application might be vulnerable if the application is:
. missing appropriate security hardening
. Unnecessary features are enabled or installed 
. Default accounts and their passwords are still enabled and unchanged.

3.How to prevent
. A repeatable hardening process
. minimal platform without any unnecessary features
. Segmented application architecture

And also, on my team; my current role in the Team is Red Team and I was going against the Blue Team.

what you want to improve
what I really want to improve is security, efficiency, and good application.
Position: penetration tester
Category: Security
Experience: 4 years | English: pre

More than 20 information security audits.
Penetration testing, 
web penetration testing,
information security,
usage penetration tools (nmap, nessus, acunetix, sqlmap)
Position: Penetration tester
Category: Security
Experience: 11 years | English: intermediate

- Certified in Cybersecurity (CC) by (ISC)² 
- CSAS(Continuous - Security - Auditing - Specialist)
- Offensive Security Certified Professional (OSCP)
- C|EH (Certified Ethical Hacker)
- Business Process Management / MIM-Kyiv Business School
- EF SET English Certificate 69/100 (C1 Advanced)EF SET English Certificate 69/100 (C1 Advanced)
- NSE1/NSE2 Fortinet
************** 04/2021 - present, time
Penetration tester 
- penetration testing, testing authentication and authorization mechanisms, interaction with Blue-team, security assessment of external and internal systems, analysis and vulnerability assessment, etc.

TOV "AITYLOGIKA" 04/2019 - 04/2021
Information Security Specialist
• Conducting penetration tests
• Building secure infrastructures
• Development of training materials for user training
• Correction of existing infrastructures according to information security standards

PJSC "KZ "ANALITPRIBOR" 10/2015 - 04/2019
Head of IT Department
- Planning the development of the IT infrastructure of the holding and participation in its implementation; 
- Control and accounting of licenses for software;
- Administration of servers hardware and software;
- System administration Bitrix24, development and writing of business processes, integration with third-party software (1C, Profitbase, etc); 
- Coordination of work structural unit;
- Data backup and providing disaster recovery;

10/2010 - 10/2015
Many more...
Position: Penetration tester
Category: Security
Experience: 1 years | English: upper

I have accomplished significant milestones in my journey through the world of cybersecurity:
1. I kick-started my achievements with the CISCO Introduction to Cybersecurity certificate, laying the foundation for my passion in this field.
2. To deepen my knowledge, I completed the entire Penetration Student Learning Path on INE, which included 12 courses covering all stages of penetration testing, expanding my expertise and understanding.
3. I further honed my skills by obtaining the eLearnSecurity Junior Penetration Tester (eJPT) certification, showcasing my dedication to mastering cybersecurity techniques.
4. As part of my ongoing commitment to growth, I successfully completed the Web Security Academy course from PortSwigger, consistently pushing myself to overcome new challenges. This course was a crucible of learning, where I honed my skills in identifying vulnerabilities, securing web applications, and understanding the intricacies of cybersecurity in practical scenarios.
1. Contributed to a real project by conducting enumeration and information gathering.
2. Helped prepare a platform-specific exploit to confirm a critical vulnerability in the system.
3. Created a Burp Suite project configuration for the penetration test team tailored specifically to the engagement, increasing overall team efficiency.
Anticipating my role as a penetration tester, I'm eager for the challenges that lie ahead. My foremost expectation is to uncover system vulnerabilities, thereby enhancing the digital defense of organizations. The prospect of ongoing learning is exciting, as I'll need to stay updated with evolving hacking methods and technology trends.

Collaboration is also on my radar. Engaging with fellow penetration testers will not only refine my skills but also expose me to diverse strategies and insights. Ultimately, I'm looking forward to contributing to cybersecurity by identifying weaknesses and fortifying digital landscapes.
Position: Penetration tester
Category: Security
Experience: 3 years | English: fluent


3+ years experience in Cyber Security:

• Performing security analysis and identifying possible vulnerabilities, rate the severity of the system, suggestions to mitigate any exposures and testing known vulnerabilities.
Experience in vulnerability assessment and penetration testing using various tools like Burp Suite, Dir-Buster, OWASP ZAP, NMAP, Nessus, Nikto, Hashcat, John the Ripper and experience with Kali Linux.
Experience with web security issues - SQL injection, Command injection, LFI/RFI, XSS, SSRF, SSTI, Broken Authentication (2FA Vulnerabilities), Broken Access Control, JWT Vulnerabilities
Experience with Reversing Mobile Applications, Device Rooting
Web Application and API Development. 
Python (scripting), Java SE, Spring Boot Framework

• Network and web vulnerability assessment (scanning, reporting, remediation control). Experience with vulnerability and patch assessment. Evaluate, rate and perform risk assessments on assets, prioritizing vulnerabilities discovered along with remediation timeline(s), maintain knowledge of the threat landscape, provide reporting and analysis and follow up, provide vulnerability analysis and produce reports for management. Good understanding of Windows and Linux patching.
Tools experience: Tenable Nessus, Rapid7 InsightVM, Burp Suite;

• Monitoring security events received through alerts from SIEM or other security tools. Revising alerts escalated by end users.  Carrying out triage of incoming issues. Carrying out incident response to end users for security incidents.
Experience working with SIEM systems: IBM Qradar, Wazuh

Trainings:
Cyber Security Research- TUBİTAK Cyber Security Institute, Turkey, Ankara
Computer Incidents Response Team - TR-CERT (USOM), Turkey, Ankara
Penetration tester
Vulnerability Management
Cyber Security Analyst
Incident Response 
Threat Intelligence Analyst
Threat Hunter
Cyber Security Engineer
Position: Penetration tester
Category: Security
Experience: 0 years | English: upper

Portswigger, PTS.
6 month work in sys. administrating.
Languages: C++, Python, MSSQL, MySQL, PostgreSQL, Bash.
OS: Linux (Kali, Ubuntu), Windows.
RE: IDA, Cutter, radare2, NASM, Ghidra.
Tools: BurpSuite, Metasploit, Acunetix, Nmap, Wireshark, etc.
Courses: Portswigger, PTS by INE.
Position: Penetration tester
Category: Security
Experience: 6 years | English: intermediate

Education:
Master's degree in cyber security
Certifications:
CCNA CyberOps
6 years of experience in a technical leadership role
3 years of experience in cybersecurity-related domains, with knowledge of security fundamentals, application vulnerabilities, application attack vectors, penetration testing methodologies, and tools
6 years of experience communicating with a wide range of technical & non-technical partners and senior leadership
1 year of experience in managing Application Security workflow

+ Leading, managing and developing a high-performing technical Penetration Testing ( web, mobile, cloud )
+ Leading the strategic direction and evolution of the Penetration Testing / Offensive security Team / Dept., including setting goals and establishing priorities
+ Leading effective teamwork, communication, collaboration, and commitment across multiple disparate groups with competing priorities
+ Writing and delivering high-quality documents for technical and non-technical audiences
+ Ability to exercise sound judgment, problem solve and make decisions in the face of ambiguity and imperfect knowledge
+ Sharp analytical abilities and attention to details
+ Ability to handle multiple competing priorities in a fast-paced, deadline-driven environment
+ Ability to take ownership, self-motivate, and deliver results in highly ambiguous environments
+ Experience with driving remediation/mitigation of security issues and control gaps
Position: Penetration tester
Category: Security
Experience: 0 years | English: intermediate

I obtaine Google Cybersecurity certificate and now i prepare to CompTia security + and CompTia PenTest +
As of today, I have experience in such works within the scope of obtaining a certificate and preparing for obtaining the next one CompTIA Security+.
Here are a few examples:

Implementing Network Security Measures:

Designing and configuring firewalls to protect network boundaries.
Setting up virtual private networks (VPNs) for secure remote access.
Deploying intrusion detection and prevention systems (IDS/IPS) to monitor network traffic.
Conducting Vulnerability Assessments and Penetration Testing:

Identifying potential vulnerabilities in systems and networks.
Performing security scans and vulnerability assessments using tools like Nessus or OpenVAS.
Conducting penetration testing to simulate attacks and evaluate system resilience.
Establishing Secure Authentication and Access Control:

Implementing multi-factor authentication (MFA) for user accounts.
Configuring role-based access control (RBAC) to manage user permissions.
Setting up and managing a certificate authority (CA) for secure digital certificates.
Developing an Incident Response Plan:

Creating an incident response team and defining their roles.
Establishing procedures for detecting, analyzing, and responding to security incidents.
Conducting tabletop exercises and simulations to test the effectiveness of the plan.
I want constantly challengingchands-on technical work contributing to cecurity Enhancemen for dewelop myself to maximum in this field
Position: Penetration tester
Category: Security
Experience: 1.5 years | English: intermediate


Conducting IT audits in order to identify non-conformities with the set standards
Writing reports with recommendations for correcting the risks and inconsistencies described in the report
Analysis of vulnerabilities and their classification according to standards
Penetration testing and vulnerability detection of web applications
Finding solutions to fix vulnerabilities and improve existing processes
Position: Penetration tester
Category: Security
Experience: 2 years | English: fluent


Currently working as a penetration tester. I am the first and only woman in Azerbaijan holding OSCP (Offensive Security Certified Professional). Also have eJPT and some other certificates regarding networking, programming (Python, C, and JS) I am well acquainted with OWASP Top Ten - both exploitation and prevention. At work, mostly focusing on web application pentest (mostly enjoying excessive data exposure in APIs and manipulating tokens)
Position: Penetration tester
Category: Security
Experience: 3 years | English: fluent

I possess two globally renowned cybersecurity certifications:
 - Offensive Security Certified Professional (OSCP)
 - Certified Ethical Hacker (CEH) Practical
Experienced penetration tester with nearly 3 years of work experience and certified OSCP (Offensive Security Certified Professional) and CEH Practical (Certified Ethical Hacker Practical). Expertise in identifying and exploiting vulnerabilities in computer systems, networks, and applications. Proficient in using a variety of penetration testing tools and techniques to improve security posture. Strong background in computer science and extensive knowledge of networking protocols, operating systems, and programming languages.

As an experienced Penetration Tester, my role involves the following responsibilities:

 - Conduct comprehensive penetration tests on computer systems, networks, and applications, utilizing a range of tools and techniques. My goal is not only to identify vulnerabilities but to understand how they may be exploited in real-world scenarios.

 - Regularly perform red team activities, simulating a potential adversarial attack to test the organization's defense systems. This helps to ensure the company's detection and prevention mechanisms are functioning as intended and can effectively thwart malicious activity.

 - In pursuit of innovative solutions, I continuously develop and implement new testing methodologies to identify vulnerabilities. This includes staying up-to-date with the latest techniques used by cybercriminals and using this knowledge to protect the organization.

 - After identifying vulnerabilities, I meticulously research, evaluate, document, and then communicate these findings to IT teams and management. By fostering open communication, we can work together to devise strategies to mitigate potential threats.

 - I am deeply aware of corporate considerations during testing, such as ensuring minimal downtime and loss of employee productivity. I strategically plan and execute testing procedures during non-peak hours or utilize a test environment when possible to ensure the day-to-day operations of the business are not affected.

 - Lastly, I review and provide constructive feedback on proposed information security fixes. This includes assessing their potential effectiveness and any potential impacts on the wider system or network, ensuring that the implemented solutions are robust and comprehensive.
Position: Penetration tester
Category: Security
Experience: 6 years | English: pre


• Experience in implementing and managing ESET Security Management Center antivirus protection on workstations, servers and mobile devices in a networked environment, deploy ESET solutions, manage tasks, enforce security policies, monitor system status and quickly respond to problems or threats on remote computers; • Testing and finding vulnerabilities in the system. Simulate real attackers and will attempt to penetrate defences undetected; • Detection of computer viruses in the system and their disposal, conducting investigations into cyber incidents and compiling reports. • Administration and maintenance of virtualization systems (VMware ESXi + vCenter); • Knowledge and practical experience with deployment and administration of Linux servers; • Knowledge and experience with application & infrastructure monitoring in a production environment (Prometheus, Grafana, Zabbix, etc.); • Practical scripting and programming experience (Bash, Python,); • Network administration - Switches, Routers, Linux servers. Practical experience in network equipment configuration from different vendors (Cisco/Ubiquiti/Mikrotik); • Network configuration, performance and availability monitoring, analysis and tuning. Network performance and integration.