Position: Security Researcher
Category: Security
English level: upper
Years of experience: 1.5


With technical and managerial knowledge and experience in IT Risks and Cyber Security with banking experience:
• Preparing of reports by monitoring incidents on critical systems
• Preparing and presenting IT/Cyber ​​risk issues to the IT committee
• Providing opinions on internal bank projects, documents and regulations on IT/Cyber ​​risks
• Providing feedback on releases to databases, Cloud systems and critical software
• Preparation of reviews and proposals on IT/Cyber-oriented projects and software acquisition, implementation and working principle
• Analysis of risks in IT/Cyber ​​procedures and documents available in the bank
• Analysis and assessment of 3rd party IT/Cyber ​​risks
• Interaction with teams in the direction of IT/Cyber ​​risk on Agile
• Risk assessment on the classification and protection of information on emerging Data technologies

Internal and external penetration testing (plan, discover, attack, report).
 Web application testing (manually and with tools such as Burp, Dirbuster, Nikto, SqlMap, Beef-xss, Hydra, Patator).
 Conduct vulnerability assessment and review results. Collaborate with client's IT staff to rank vulnerabilities. Validate high risk vulnerabilities on specific targets. Develop remediation action plan.
 Performed audits by assessing web application threat, vulnerabilities and defense programming