Valeriy Shevchenko

DevOps Engineer

Berlin, Berlin, Germany15 yrs 1 mo experience

Most Likely To SwitchHighly Stable

Key Highlights

8 years of experience in application security and software testing.
Ranked 2nd in HackerOne German Leaderboard 2023.
Expertise in penetration testing across various industries.

Stackforce AI infers this person is a skilled Application Security Engineer with extensive experience in penetration testing and security assessments.

Contact

Skills

Core Skills

Penetration TestingSecurity AssessmentSecurity ResearchBug BountyApplication SecurityIncident ResponseQa Engineering

Other Skills

Web Application SecurityMobile Application SecurityBug Bounty ManagementSecurity AssessmentsFunctional TestingNon-Functional TestingMicrosoft SQL ServerSoftware System AnalysisManual TestingTest PlanningTest ManagementRegression TestingBug TrackingEducational LeadershipUsability Testing

About

I am a detail-oriented Application Engineer, specialised in software testing with 8 years of experience working with large German and Sweden companies in various IT-related capacities. Graduated from the faculty of Information technology University in 2011. I am a passion for penetration testing and security researching. Personal qualities: attentive to details, reliable, responsible, self-motivated, able to work self-supervised, fast learner and eager to learn, have excellent communication skills.

Experience

Semrush

Security Engineer

Feb 2023 – Present · 3 yrs 1 mo · Berlin, Germany · Hybrid

Arrival

2 roles

Senior Application Security Engineer

Promoted

Nov 2021 – Jan 2023 · 1 yr 2 mos · Berlin, Germany

Performing and managing Bug Bounty Program
Performing Internal Security Assessments and Pentests
Supporting for the internal vulnerability monitoring service (S)SDLC
Performing Products and Architecture Security Assessments
Managing Incident Response Team
Performing Security Awareness for the company employees
Performing vendor evaluation activities

Application SecurityIncident Response

Application Security Engineer

Nov 2020 – Feb 2022 · 1 yr 3 mos · Berlin, Germany

Cobalt.io

Penetration Tester

Apr 2020 – Present · 5 yrs 11 mos

I perform penetration testing as an independent contractor on the crowd sourced Cobalt platform, for a wide variety of clients and business sectors, such as Fintech, Retail, Insurence or Telecommunications.
The Penetration Testing targets and scope include web applications, Android/iOS mobile applications, operating systems and network infrastructure. Occasional projects require a special type of setup or requirements that grant access to sensitive internal infrastructure.
Cobalt is an exclusive and invite-only Pentest as a Service PtaaS platform that simplifies security and compliance needs of DevOps- driven teams, with workflow integrations and high-quality talent on demand.

Penetration TestingSecurity Assessment

Delivery hero

QA Engineer

Aug 2017 – Oct 2020 · 3 yrs 2 mos · Berlin Metropolitan Area

Transfered from 9Cookies Gmbh to Delivery Hero AG

9cookies

QA Engineer

Feb 2017 – Sep 2017 · 7 mos · Berlin Metropolitan Area

-

Independent Security Researcher | Bug Bounty Hunter

Oct 2016 – Present · 9 yrs 5 mos

Acknowledged as a security contributor by over 20 companies (Amazon, Paypal, Salesforce, Google, Redbull, Crowdstrike, F5, BestBuy, Wayfair, Zalando ... etc)
HackerOne German Leaderboard 2023 - 2nd place
HackerOne German Leaderboard 2022 - 3rd place
HackerOne German Leaderboard 2021 - 3rd place
HackerOne German Leaderboard 2020 - 4th place

Security ResearchBug Bounty

Fastdev ab

QA Engineer

Aug 2014 – Feb 2017 · 2 yrs 6 mos · Sweden

Functional and non-functional testing web and mobile applications.
Quality control.
Leading Penetration testing (Pentest).

Directum

QA Test Engineer

Jun 2012 – Sep 2014 · 2 yrs 3 mos · Izhevsk

Functional and non-functional testing web and Windows desktop applications.
Creation and maintenance of the testing environment.
Training new employees.

Ооо компания тензор

Technical Support Specialist

Feb 2011 – Jun 2012 · 1 yr 4 mos · Izhevsk

Installing the software.
Production of electronic signature. Work with CPS.
Tech support state agencies
Subscribers connected to the electronic document management system.
Working with the electronic trading system: Sberbank-AST, mechel, fabrikant, zakupki.gov.