Position: Penetration Tester | Application Security Engineer
Category: Security
English level: upper
Years of experience: 4

Certifications:
   - eWPTX (eLearnSecurity Web application Penetration Tester eXtreme)
   - eMAPT (eLearnSecurity Mobile Application Penetration Tester)
   - eWPT (eLearnSecurity Web Application Penetration Tester)
I am an application security engineer with 4 years of experience. I have experience and expertise in Web applications, Mobile applications, APIs, and Network Pentest. I participate in Bug Bounties programs on Bugcrowd and Hackerone. During my work and research, I was able to find and help fix a lot of vulnerabilities that could give an attacker unauthorized access to computer systems at some corporations. I also perform source code reviews on several programming languages like PHP, JAVA, and Python and integrate SAST and DAST tools into the CICD environment.

- Carry out regular penetration tests on web apps, web APIs, mobile apps and report in detail.
- Static application security testing tools (SAST) implementation and responsible for monitoring, rule management, false-positive elimination, new rule testing, etc.
- Conduct awareness training, social engineering, carry out simulated phishing attacks.
- Working with third-party vendors to product pilot, implement, and apply the security best practices.
- Implementation and maintenance SSDLC/DevSecOps phases (SAST/DAST, Threat Modeling, Container, component security, code review, etc.)
- Integrate security control in CI/CD and operational pipelines