Automation Tester

The candidate is a penetration tester who has been doing penetration testing of web and network applications for over 4 and a half years in commercial practice. In his current position, he analyzes the application to design the technical requirements for test execution. He makes the final report of the security test in AJ or SK language. In his work he actively uses agile methodologies especially Scrum and Kanban. He is able to communicate in English without any problems. Performs security tests on web applications, APIs and network infrastructure to identify vulnerabilities and weaknesses that could be exploited by attackers. Experienced in all phases of the security test cycle and has a strong background in quality management and test automation. He is familiar with Kali Linux, systems administration and programming, especially scripting, and has a good understanding of OWASP (Open Web Application Security Project) guidelines. Also have experience with social engineering, anti-virus circumvention and a good understanding of CTF (Capture The Flag) skills. They have experience as a software tester, technical test analyst, penetration tester and IT administrator and have also completed a degree in telecommunications and hold an OSCP (Offensive Security Certified Professional) certification. They also have a private project on vulnerability scanner for IoT devices.

Software Tester (Part-time) - 10/2016 to 07/2019 - Tested SOAP microservices and desktop applications.

Technical Test Analyst - 08/2019 to 08/2020 - Tested REST microservices and web apps. Developed test suites using SOAP UI, Groovy, Cypress, Robot Framework, and Rest Assured.

Penetration Tester - 09/2020 to 03/2022 - Conducted security testing of web apps, APIs, and infrastructure based on OWASP. Performed white-box and black-box testing. Communicated directly with customers and wrote reports.

IT Administrator - 09/2020 to 03/2022 - Managed corporate devices and Azure AD administration. Installed and supported network infrastructure and internal project servers. Implemented corporate security policies and worked with hypervisors and gateways.

Penetration Tester - 04/2022 - Conducted web app security testing (OWASP) and penetration testing for low-hanging fruit. Performed network infrastructure testing and wrote reports. Worked directly with clients for pre-sales, project reviews, and status update meetings.

Education: - P.Eng (Ing) in Telecommunications - 2019, Technical University of Košice, Slovakia.

Certifications: - Offensive Security Certified Professional (OSCP) - 04/2021.

Private Projects:

• Developed a vulnerability scanner for IoT devices (IPSCA).