Position: security engineer / web application penetration testing
Category: QA Automation
English level: intermediate
Years of experience: 7

HoF: _Hacker0x01, _ATT, _PrivatBank, _Evernote, intigriti.com
BS in Computer Science or related field, or equivalent work experience
7 years of experience with red teaming, vulnerability testing, and/or auditing techniques
Security and vulnerability assessment
Internal and external penetration testing
Web Application penetration testing

HoF: _Hacker0x01, _ATT, _PrivatBank, _Evernote, intigriti.com

Goog experience with:
- automating vulnerability scaners, like Nessus, Nexpose, OpenVas, Arachni
- scan instruments, like sqlmap, tplmap, nmap
- write manual instruments at python/nodejs
- tools for testing Web application: Burp, ZapProxy, CharlieProxy, mitmproxy
(once wrote addon for mitmproxy at python, when application encrypted POST parameters themself)
- knowledge and full understanding web-based attack (OWASP top 10, SQLi, XSS, SSTI, SSRF, XXE, etc)
- reverse engineering Android application
- analyze not only http based traffic, using Wireshark
- network penetration testing: tools (nmap, Metasploit, Cain & Abel, Intercepter-NG) and attack (ARP/DHCP spoofing)
- web development (Django)
- С+/python/nodejs/  programming


Minor experience with:
- binary code analysis
- exploit development for binary application