Resume Brief: Web App Sec

We held our first session of Resume Brief on May 20th, 2021. There were just a few of use online to kick around the concept. As with most things we try we’re willing to jump and test it out on the way down. Resume Brief is a response to members asking for help writing portions of their resume. Our response is a short, 15 to 30-minute, open Discord screenshare voice discussion of how to craft a single item on the resume. We take one question and actively talk through it together why the host types it out on a sample resume.

Question: I use Burp Suite a bit in my current role. How do I show it and web application security experience on my resume?

The answer from those who attended came in the form of the following bullets.

• Reduce application security rework by 15% equating to $56,000 developer effort by performing web application security assessments during the development lifecycle
• Strengthen client network security by conducting four public web site security reviews a month and working with their development team to remediate detected vulnerabilities
• Assessed 85% of internal corporate applications for web application vulnerabilities
• Analyze web application security (too vague)
• Completed PortSwigger Web Security Academy using Burp Suite [Community or Professional or Enterprise]
• Collaborate with the development team to ensure web application security vulnerabilities are identified and addressed prior to launch to save developer time.