Experience

AlfaStrakhovanie

• Insurance
• 200 - 300 Employee

• DevSecOps Engineer

  • Mar 2022 - Present

  Carrying out a full cycle of auditing company resources using automated and manual tools. Infrastructure audit (servers, k8s clusters), web application audit, mobile application audit. Introduced several systems for managing vulnerabilities and reduced the lifetime of a vulnerability from detection to elimination by half. Setting up security scanners. Participation in the process of building secure development, implementation and automation of security checks for code, containers, dependencies in CI / CD and Kubernetes, with aggregation in defectdojo. Developing your own security scanner in python. Show less



Digital Security

• Russian Federation
• Computer and Network Security
• 1 - 100 Employee

• Pentester

  • Jul 2021 - Mar 2022

  Penetration testing. Web applications, mobile, internal network, k8s. Burp suite, nmap, nuclei, acunetix, sqlmap Penetration testing. Web applications, mobile, internal network, k8s. Burp suite, nmap, nuclei, acunetix, sqlmap