Pavel Supruniuk

WORK HISTORY

EDUCATION

ABOUT PAVEL SUPRUNIUK

Key technical skills:1. Highly experienced in infrastructure penetration testing, web application security, social engineering simulations and various attack-defense techniques.2. Have good knowledge of networking: TCP/IP stack, various network protocols, network security, configuration and topologies. Have 2 years of solid experience in designing, building and debugging of local and distributed networks as a network engineer/system administrator.3. Well aware of attacks against web applications and mitigation techniques. Widely using OWASP methodology. Can operate both blackbox and whitebox testing models. Familiar with specific features of applications based on microservices and cloud technologies. Wide experience in business logic testing.4. Experience in debugging applications, both script-based and OS-native (Windows x86-64).5. Experience in administration and hardening of Linux, Windows OS, Windows enterprise networks and services (Remote access, Web servers, Email, File sharing, DNS, DHCP and others).6. Some experience with configuration and debugging of network equipment: managed switches, NGFW/IPS/VPN devices, Linux based routers and firewalls, Enterprise WiFi equipment.7. Ability to deliver high quality reports to any level of personnel.8. Programming: actively using the following technologies and tools- Python 3 for generic task automation- Django/Flask, Django REST, Asyncio, Celery, Postgres/MySQL, MongoDB, Bootstrap, HTMX for full-stack web application development- C and x86-64 Assembler, usually with Windows OS API for pentest/redteam toolset development- Rarely: Go, C#/.Net, PHP, Javascript for specific tasks