Position: Penetration tester
Category: Security
English level: fluent
Years of experience: 3


3+ years experience in Cyber Security:

• Performing security analysis and identifying possible vulnerabilities, rate the severity of the system, suggestions to mitigate any exposures and testing known vulnerabilities.
Experience in vulnerability assessment and penetration testing using various tools like Burp Suite, Dir-Buster, OWASP ZAP, NMAP, Nessus, Nikto, Hashcat, John the Ripper and experience with Kali Linux.
Experience with web security issues - SQL injection, Command injection, LFI/RFI, XSS, SSRF, SSTI, Broken Authentication (2FA Vulnerabilities), Broken Access Control, JWT Vulnerabilities
Experience with Reversing Mobile Applications, Device Rooting
Web Application and API Development. 
Python (scripting), Java SE, Spring Boot Framework

• Network and web vulnerability assessment (scanning, reporting, remediation control). Experience with vulnerability and patch assessment. Evaluate, rate and perform risk assessments on assets, prioritizing vulnerabilities discovered along with remediation timeline(s), maintain knowledge of the threat landscape, provide reporting and analysis and follow up, provide vulnerability analysis and produce reports for management. Good understanding of Windows and Linux patching.
Tools experience: Tenable Nessus, Rapid7 InsightVM, Burp Suite;

• Monitoring security events received through alerts from SIEM or other security tools. Revising alerts escalated by end users.  Carrying out triage of incoming issues. Carrying out incident response to end users for security incidents.
Experience working with SIEM systems: IBM Qradar, Wazuh

Trainings:
Cyber Security Research- TUBİTAK Cyber Security Institute, Turkey, Ankara
Computer Incidents Response Team - TR-CERT (USOM), Turkey, Ankara
Penetration tester
Vulnerability Management
Cyber Security Analyst
Incident Response 
Threat Intelligence Analyst
Threat Hunter
Cyber Security Engineer