Automation Tester & IT Security Consultant

Der Kandidat ist ein Penetrationstester, der seit fast zweieinhalb Jahren in dieser Position in der Praxis tätig ist. Zu seinen Hauptaufgaben gehörte das Testen von Webanwendungen, der internen Infrastruktur über Active Directory, das Testen mobiler Anwendungen, aber er ist nicht ganz zu Hause, sondern erstellt Schwachstellen- und Hardwaretests bei Kunden. Da er häufig zu Kunden reist, hat er damit Erfahrung. Er ist seit 2015 im Bereich der IT-Sicherheit tätig (davor war er Programmierer, aber das will er nicht mehr), wo er Positionen als Security Analyst und Devops Security Engineer innehatte. Bei seiner Arbeit setzt er aktiv agile Methoden ein, insbesondere Scrum und Kanban. Er kann sich problemlos auf Englisch verständigen und hat bereits in internationalen Teams gearbeitet.

Penetration Tester (November 2020 - present): Conducted penetration testing on web applications, internal and external infrastructure, and client stations. Also performed server hardening and audits of mobile applications. Identified and reported vulnerabilities in web applications through bug bounty programs.

DevOps Security Engineer (March 2019 - February 2020): Maintained a Security Incident Response Platform, including CI/CD deployment on a Kubernetes cluster. Integrated with existing logging, monitoring, and vulnerability scanning solutions. Developed internal services using Python and Bash. Conducted penetration testing of web services.

Security Analyst (July 2018 - February 2019): Analyzed platforms for vulnerabilities in Red Hat Enterprise Linux. Documented vulnerabilities and verified fixes. Communicated with upstream and contributed to open-source software. Conducted security source code audits.

Security Analyst (July 2018 - February 2019): Analyzed platforms for vulnerabilities in Red Hat Enterprise Linux. Documented vulnerabilities and verified fixes. Communicated with upstream and contributed to open-source software. Conducted security source code audits.

Security Response Specialist (July 2015 - June 2018): Monitored various resources for security-related information. Performed initial analysis of security issues and conducted security source code audits. Developed internal tooling using Python.

Software Developer (October 2014 - April 2015): Programmed computer forensic tools, including filesystem analysis software in Java and preprocessing modules in Python. Scripted remote system information extraction software in Bash.

Programmer (internship) (July 2013): Developed a client-server application for secure accounting, including client application in Java, server application in PHP, and user application for Android.

Master's Degree in Information Technology Security (2012 - 2016): Specialized in network intrusion detection based on statistical protocol identification. Completed Erasmus study at the University of Vienna, specializing in Business Informatics.

Bachelor's Degree in Computer Systems and Data Processing (2009 - 2012): Specialized in cryptographic pairing schemes.

Certifications & Trainings: Offensive Security Certified Professional (OSCP), NotSoSecure Advanced Infrastructure Hacking, Mastering BurpSuite Pro, Malware Development in Windows, Red Hat Certified Engineer (expired), Red Hat Certified System Administrator (expired), Red Hat Certified Specialist in Ansible Automation (expired).

Personal Skills: Fluent in Slovak. Proficient in English (B2 level) and basic knowledge of German (A2 level). Advanced knowledge in application security, infrastructure security, Active Directory, Linux and Windows security, and AV.