Position: Penetration tester / Application Security Engineer
Category: Security
English level: intermediate
Years of experience: 2.5


Pentests: web application security assessment, mobile (Android/IOS), network security audit and WiFi tests. Classical tasks: OSINT, automated scanning, manual testing, risk assessment, reporting.
Most of the projects were done for banking sector include PCI DSS.

AppSec: worked on SSDLC of several projects, support for a platform of trainings on secure development, code review and use of automated scanners (SCA/SAST/DAST). Also had to perform pentests of web and mobile applications. (Rarely and by my desire)

Cloud infrastructure: often faced by pentests and development. I have basic knowledge (AWS) and am working on evolving in this domain.