Position: DevSecOps | Cyber security
Category: Security
English level: upper
Years of experience: 5


Slowly looking for new opportunities in the desired specialization - DevSecOps or more security "management" positions. 

Current role - security expert (engineer), main activities are automation of security tools in CI\CD and vulnerability management.
Previous experience - a wide range of security activities, from penetration testing (main) to security audits, cloud (Azure, GCP), and containerization development (k8s, docker).

DevSecOps - implementation and automatization of security tools in CI\CD. (Jenkins, Groovy, SAST, DAST, Docker, Kubernetes-related tools, Nessus, OWASP Zap, BurpSuite, etc)
Vulnerability management - analysis of reports and mitigation.
Management - Leading a small team and security weekly activities between teams. 
Pentesting - full cycle from initial scope definition to report presentation.
Security audits - OWASP\ISACA checklists, creating own for specific cases.
Google Cloud (GCP) - containerization development, security tools automation.
Microsoft Azure - Administration of Azure Intune (setup from scratch), security policies, onboarding and automated deployment of tools and policies, Azure Sentinel.
Despite that had experience in the pentesting, don't want to put it in the first place. And I'm not a SOC engineer :)