Auni Halili

Experience

• 

  RunCloud

  Mar 2023 - Jul 2023

  Information Security

  • Web Application Penetration TestingConduct security testing that leads to discovery of critical vulnerabilities on the product. The rigorous application of the OWASP Top 10, Web Application Security Testing Checklist, coupled with the utilization of the Burp Suite tool, facilitated the identification and analysis of these vulnerabilities during working. All finding need to be discussed and reported to developer.• Code ReviewThorough analysis of source code is conducted to identify and address quality issues, security vulnerabilities, code duplication and adherence to coding standards using SonarCloud. Need to identify and highlight potential risks and suggest improvements to developer.• Research and Education ExperiencePerformed comprehensive testing on vulnerable web applications, including DVWA, WebGoat, and a Laravel Vulnerable application. Involved in developing a security playbook, listing common vulnerabilities and suggesting mitigation strategies, along with creating proof-of-concepts (PoCs) for vulnerability. عرض أقل

• 

  Testbits Sdn Bhd

  Sept 2023 - now

  QA Engineer

  • Engaged in a V&V (Verification and Validation) government project.• Actively collaborate with clients and assist fellow testers in conducting thorough testing. • Hands-on experience in system testing, functional testing, regression testing and UAT (User Acceptance Testing), complemented by project management skills for successful project delivery.