Position: Application Security Engineer
Category: Security
English level: upper
Years of experience: 4


I have different experiences from Penetration Testing to being part of the security transformation team. I would like to further develop my career as Application Security Engineer (focus on building secure SDLC and do security testing). 

Experience as Application Security Engineer:
• Implementing security gates into pipelines including SCA, SAST, and IAST tools. 
• Working with IaC. Scanning, fixing, and applying policies for Terraform pipelines.
• Developing Threat Modeling as a service for products teams.
• Automation routine tasks using GitLab API and GitLab scheduler(monitoring statistics of integration projects with security tools, alerting in case of policy overridden, projects languages, etc). 
• Experience with Azure.
• Working with OWASP SAMM and OWASP ASVS. 
• Security assessment for different WEB applications. 
• Security assessment for infrastructure.
• Developing awareness/workshops for developers, managers, businesses, etc (Security testing, OWASP Top 10, Threat Modeling).
• Preparing security documentation( working with Jira/Confluence). 

Experience as Penetration Tester: 
• Vulnerability Assessment.
• Web Application Penetration Testing(White/Black Box).
• Infrastructure Penetration Testing(Internal/External).
• Wireless Security Penetration Testing..
• Windows/Linux exploitation.
• Bash/Python scripting.