Penetration Tester

Candidate has a strong background in Computer and Network Security, specializing in optimizing services, creating better security protocols, and implementing security orchestration. They are experienced in firewall ERP systems and security testing, including red team penetration testing for web, mobile, and API applications. In the Financial Services industry, candidate has worked on emerging services and performed penetration tests on internal and external systems. They have extensive experience with API and web application penetration testing, conducting security audits, and identifying vulnerabilities. Their responsibilities also include creating comprehensive reports post-testing cycles, outlining identified vulnerabilities and proposed remediations. Throughout their cybersecurity career, candidate has gained a deep understanding and hands-on experience with red team tactics, earning certification as a Red Team Operator. This expertise equips them with the knowledge and methodologies used by attackers to infiltrate and exploit digital infrastructures, ensuring a robust defense strategy for organizations.

Baku Higher Oil School / Bachelor's degree, Information Security

2019 - 2024

Natural Sciences Gymnasium / High School

Sep 2012 - Jun 2019

Junior Application Security and Penetration Testing Specialist

Industry: Financial Services

Apr 2023 - Present

Baku, Azerbaijan

• Performed penetration testing on applications, identifying and exploiting vulnerabilities and authored comprehensive security reports detailing these vulnerabilities, their potential impacts, and recommended mitigation strategies

• Developed and implemented comprehensive application security frameworks that adhered to industry standards and regulations

• Analyzed results from SCA, SAST, and DAST tools to identify vulnerabilities

• Tuned and optimized the rules for SAST tools to reduce false positives

• Collaborated closely with the IT and development teams, ensuring secure coding practices were followed

Junior Cyber Defense Specialist

Industry: Computer and Network Security

Jun 2022 – Mar 2023

Baku, Azerbaijan

• Performed administration, management, configuration, testing, and integration tasks related to SIEM platforms

• Created and developed correlation and detection rules to support alerting capabilities

• Automated the incident response procedures through Security Orchestration, Automation, and Response

• Participated in incident response and incident management processes, including coordinating incident communication and escalation

• Performed rule tuning to optimize the performance and accuracy of solutions

Cyber Security Intern

Industry: IT Services and IT Consulting

Sep 2021 – Nov 2021

Baku, Azerbaijan

• Constructed and maintained SIEM solution, ensured its optimal performance in analyzing and interpreting collected data

• Held the webinar aimed at enhancing cybersecurity awareness

• Integrated third-party security solutions (firewalls, XDRs, etc.) into a central logging platform

Cyber Security Intern

Industry: IT Services and IT Consulting

Aug 2021 – Sep 2021

Baku, Azerbaijan

• Built Honeypot to improve the security of the overall network

• Deployed and configured SIEM to collect and analyze log data

• Performed grey box testing of the web applications