Avery Example
Application Security Engineer | OWASP | Burp Suite
avery.example@example.com | +971 50 000 0000 | Amman, Jordan | linkedin.com/in/avery-example | github.com/avery-example
Summary
Application security engineer with 2 years as a software developer. Adds SAST checks to pipelines and reviews code against the OWASP Top 10. CompTIA Security+ holder.
Skills
- Web: OWASP Top 10, Burp Suite
- Code scanning: SonarQube, Snyk
- Languages: Python, JavaScript
- Pipeline: Git, Docker
Certifications
- CompTIA Security+ (2025)
Projects
Secure pipeline demo (github.com/avery-example/secure-pipeline)
- Integrated SonarQube and Snyk into a CI pipeline for 4 sample repositories and cut open high-severity findings from 31 to 9
- Wrote a pull request checklist of 10 secure coding checks based on the OWASP Top 10
- Packaged the 4 sample repositories as Docker images and scanned each image with Snyk before the build passed
PortSwigger Web Security Academy labs (github.com/avery-example/websec-notes)
- Completed 70 labs with Burp Suite, including SQL injection, XSS, access control and request smuggling
- Wrote a short note on the fix for each lab and linked it to the matching OWASP Top 10 item
Experience
Software Developer, Example Software
Mar 2023 - Present
- Built 15 API endpoints in Python and fixed 7 input validation bugs raised in code review
- Moved 20 hard-coded secrets into a vault after a Snyk scan flagged them, and reran the scan to confirm none were left
- Taught 6 developers to read a scanner report and fix the top three findings first, using a 30-minute session and a one-page guide
Education
BSc Software Engineering, Example University
2019 - 2023
Languages
Arabic, English