Automation Tester & IT Security Consultant

The candidate is a penetration tester who has been in this position for almost 2 and a half years in commercial practice. His main roles have included testing web applications, internal infrastructure through Active directory, mobile application testing, but he's not quite at home there, creating vulnerability tests and hardware tests at client sites. He traveled frequently to see clients, so he has experience with this. He has been in the IT Security field since 2015 (before that he was a programmer. but doesn't want to do that anymore) where he held positions as a Security Analyst and Devops Security Engineer. He actively uses agile methodologies in his work, especially Scrum and Kanban. He can communicate in English without problems and has worked in international teams.

Penetration Tester (November 2020 - present): Conducted penetration testing on web applications, internal and external infrastructure, and client stations. Also performed server hardening and audits of mobile applications. Identified and reported vulnerabilities in web applications through bug bounty programs.

DevOps Security Engineer (March 2019 - February 2020): Maintained a Security Incident Response Platform, including CI/CD deployment on a Kubernetes cluster. Integrated with existing logging, monitoring, and vulnerability scanning solutions. Developed internal services using Python and Bash. Conducted penetration testing of web services.

Security Analyst (July 2018 - February 2019): Analyzed platforms for vulnerabilities in Red Hat Enterprise Linux. Documented vulnerabilities and verified fixes. Communicated with upstream and contributed to open-source software. Conducted security source code audits.

Security Analyst (July 2018 - February 2019): Analyzed platforms for vulnerabilities in Red Hat Enterprise Linux. Documented vulnerabilities and verified fixes. Communicated with upstream and contributed to open-source software. Conducted security source code audits.

Security Response Specialist (July 2015 - June 2018): Monitored various resources for security-related information. Performed initial analysis of security issues and conducted security source code audits. Developed internal tooling using Python.

Software Developer (October 2014 - April 2015): Programmed computer forensic tools, including filesystem analysis software in Java and preprocessing modules in Python. Scripted remote system information extraction software in Bash.

Programmer (internship) (July 2013): Developed a client-server application for secure accounting, including client application in Java, server application in PHP, and user application for Android.

Master's Degree in Information Technology Security (2012 - 2016): Specialized in network intrusion detection based on statistical protocol identification. Completed Erasmus study at the University of Vienna, specializing in Business Informatics.

Bachelor's Degree in Computer Systems and Data Processing (2009 - 2012): Specialized in cryptographic pairing schemes.

Certifications & Trainings: Offensive Security Certified Professional (OSCP), NotSoSecure Advanced Infrastructure Hacking, Mastering BurpSuite Pro, Malware Development in Windows, Red Hat Certified Engineer (expired), Red Hat Certified System Administrator (expired), Red Hat Certified Specialist in Ansible Automation (expired).

Personal Skills: Fluent in Slovak. Proficient in English (B2 level) and basic knowledge of German (A2 level). Advanced knowledge in application security, infrastructure security, Active Directory, Linux and Windows security, and AV.