Position: Application Security/Pentester
Category: Security
English level: intermediate
Years of experience: 2


JUNIOR SECURITY SYSTEMS ENGINEER | 01.2020 - 02.2020 | EPAM
SYSTEMS
A tool that offers a comprehensive and powerful vulnerability scanning and
vulnerability management solution
Tools: Cloud Custodian, GCP, Bash, Python
Responsibilities:
- Creating technical documentation
- Troubleshooting
- Writing scripts for automation
JUNIOR SECURITY SYSTEMS ENGINEER | 02.2020 - 04.2020 | EPAM
SYSTEMS
Introduction of security modules
Tools: Linux, Docker, Jenkins, getcarrier
Responsibilities:
- Implementation and automation of SAST/DAST tools
- Log monitoring
JUNIOR SECURITY SYSTEMS ENGINEER | 03.2021 - 06.2021 | EPAM
SYSTEMS
The main objective of Continuous Vulnerability Management is to detect and
remediate vulnerabilities in a manner close to real time.
Tools: Qualys, QRadar, Nmap, Burp Suite, UpGuard, BitSight
Responsibilities:
- Responded to cyber incidents and investigated
- Checked the vulnerabilities for false positives, created recommendations and a
mitigation plan
- Troubleshooting
- Technical support
JUNIOR SECURITY SYSTEMS ENGINEER | 07.2021 - 12.2022| EPAM
SYSTEMS
Delivery center for Company name
Tools: Azure Sentinel, DefectDojo, OpenVAS, Microsoft 365 Defender, Active
Directory
Responsibilities:
- Responding to cyber incidents, investigating and writing runbooks
- Collecting logs and creating timeline for cyber forensics activity
- Checking the vulnerabilities for false positives, creating recommendations and a
mitigation plan
- Checked and analyzed GPOs on Active Directory
- Deployment and administration of a vulnerability management platform
- Increasing security score in security center
SECURITY SYSTEMS ENGINEER | 07.2022 - TILL NOW | EPAM
SYSTEMS
Enabling and operating Secure-SDLC in BSS (RnD, IT, Services).
Tools: Git, GitLab, getcarrier, Qualys WAS, Microsoft Threat Modeling Tool, Draw.io
Responsibilities:
- Threats Library development
- Performing Security Risk Assessment
- Performing Threat Modeling.
- Introduction and administration of processes on internal projects behind SSDLC
DevOps