Position: DevOps engineer & Information Security Expert
Category: DevOps
English level: upper
Years of experience: 5

I have some vital certificates in security and devops:

Certificates: 
* CompTIA Security+
* AWS Certified Solutions Architect - Associate
* AWS Certified Cloud Practitioner Certification
* AWS Cloud Practioner Essentials
* INE Certified Cloud Associate
* On the way to OSCP - - Offensive Security Certified   Professional
* eLearnSecurity Junior Penetration Tester (eJPT)
* eLearnSecurity Web application Penetration Tester (eWPT)
* Devsecops (Infosec)
DevOps:
- Develop and implement complex tasks related to Cloud architecture
- Infrastructure as code with Terraform/Terragrunt;
- Develop deep expertise with Kubernetes, Helm,Ingress;
- Solution migration from on-premise to cloud;
- Development of CI/CD workflow for highly scalable and resilient cloud-based applications;
- Apply AWS Well-Architected principles to production systems and operational support tooling;
- Supporting and maintaining the infrastructure;
- Ensure a high degree of observability of infrastructure 

Penetration Testing:
[]Perform penetration tests on different application
[] Create written reports, detailing assessment findings and recommendations
[] Controls on session management like Server-side session states, session termination
[] Black, Gray, and WhiteBox tests
[] Web Sites and API's
[] Internal Infrastructure
[] Performing security risk assessments
[] Preparation of Penetration Test reports for different audiences
[] Conducting Vulnerability Assessments
[] Cloud infrastructure providers: AWS
[] Programming language: Python, Bash, PowerShell
[] Experience with system and web application vulnerability scanning tools (e.g., Acunetix, Rappid7 appsec, Burpsuite Pro, Nessus, NMAP, Owasp ZAP, Vega, Nikto, Metasploit, John the Ripper,Postman sqlmap nikto,skybox,
[] Experience with programming at least one of the
following: PHP, HTML, Javascript,CSS, Python, bash
[] Perform penetration tests on web Applications. 
[] İnstalling and configuring the Vulnerability Scanner tool and assess systems using this tool to verify system security settings and configurations
[] İnstalling and configuring WAF to protect a company’s web applications by inspecting and filtering traffic between each web application and the internet
[] Perform penetration tests on API with Postman, Astra,fuzz API
[] Performed security validation, penetration testing, and other technical tasks to identify risks
[] Testing and analyzing assets for potential security threats and determining the best security measures. 
[]  Experience with leveraging Open Source penetration testing tools, such as Metasploit and the Kali Linux toolset
[]  Working knowledge in security framework models such as GDPR, ISO 27001, and NIST
[] Frameworks: Metasploit, Powersploit Vulnerability Scanning:     Nessus, Tenable, OpenVAS, Nessus, Vega, Acunetix , InsightVM, Rapid7 appSec, Owazp Zap, Acunetix, Burpsuite Pro, etc. 
[] Hands-on experience with DAST, SAST, and manual ethical hacking