Position: Security Engineer, Pentester, DevSecOps
Category: Security
English level: upper
Years of experience: 1

Finished EPAM courses, internal DevOps lab and internal DevSecOps lab
Passed OWASP Juice shop
Passed Bandit level of overthewire
Lot of courses on Cloud Guru
I have 9 monthes of experience working in EPAM Systems on two MDTU projects as DevSecOps
My duties were automatization of security assessment and establishing shift-left security environment (SAST, DAST, SCA), adjusting vulnerability management system (DefectDojo) and resolving security issues that appeared after scanning (mostly by communicating with Dev team). Technologies that I used were: semgrep, dependency check, trivy, detect secrets, jenkins, defectdojo, openshift (+ helm) and other
Also I'm very interested in penetration testing and developing myself as white hacker on CTF platforms
Before I began to work as security engineer I got a lot of experience in EPAM labs as DevOps so I also have experience with docker, ansible, linux administration, jenkins, AWS, kubernetes etc
In scope of penetration testing I have practical experience of working with many tools, such as nikto, nmap, OWASP ZAP, sqlmap and other, also I'm keen on OWASP top ten vulnerabilities.
I don't like windows:)