Lizi Natroshvili

Crafting mobile-friendly websites and transitioning legacy site to mobile-friendly platform Reviewing information and elements regularly on websites and pages for accuracy Participating in pre-project analysis and technical assessments to develop user-friendly interface and correct functionality • Developed Python-based RESTful APIs for backend services with security best practices. • Ensured compliance with OWASP and ISO/IEC 27001 principles during development. • Conducted basic vulnerability testing (XSS, CSRF, SQLi) on websites before deployment.

• Conduct penetration testing and offensive security assessments on web applications, APIs, and network infrastructure. • Simulate adversary behavior to test detection and response capabilities of client environments. • Build custom tooling in Python for automation, vulnerability discovery, and reporting. • Work closely with development teams to ensure secure code practices and threat mitigation. • Provide detailed findings with CVSS scoring and align remediation steps with ISO 27001 and NIST standards. • Assist in red team engagements and threat modeling for high-risk environments.

• Lead penetration testing and red team operations across networks and applications, uncovering critical vulnerabilities. • Simulate real-world attack scenarios to evaluate detection and response maturity. • Develop internal security tools using Python for scanning, log parsing, and automated reporting. • Collaborate with DevOps teams to secure CI/CD pipelines and implement automated testing controls. • Support secure API development by reviewing Python code and guiding developers on best practices. • Align findings with CVSS and ISO 27001/NIST standards for actionable risk reduction. • Contributed to vulnerability management by tracking issues, prioritizing remediation, and validating fixes

• Conducted manual and automated web application security testing aligned with OWASP Top 10 and PTES • Used Burp Suite, Kali Linux, and C2 frameworks to identify, validate, and document security vulnerabilities • Supported threat modeling by translating findings into attacker paths, risks, and mitigation priorities • Developed Python automation for reconnaissance, OSINT, and asset discovery to speed up enumeration workflows • Integrated custom Python tooling into red team processes to improve efficiency during recon and enumeration • Delivered security awareness sessions and practical guidance to reduce common security mistakes • Partnered with IT and engineering teams to remediate findings and strengthen security baselines • Contributed to vulnerability management by tracking issues, prioritizing remediation, and validating fixes

Organizing, Analyzing and Programming in SQL and Python. Managing and maintaining the hospital's database of patients and employees. Ensuring technical support and performing database testing to guarantee system integrity. Additionally, Facilitating communication between doctors and patients as a translator • Developed internal tools in Python to support data integrity and compliance efforts. • Contributed to access control and encryption policies aligned with ISO/IEC 27001.

• Perform web and infrastructure testing across enterprise systems, identifying over 100 security issues. • Work closely with SOC and IT to prioritize risk mitigation based on impact. • Enhance threat detection by contributing to triage and remediation processes. • Contributed to improving detection engineering and vulnerability triage processes by collaborating with the SOC.