Иван

Potapenko Ivan
Offensive Security Engineer | iOS Developer

Phone: [open contact info](look above in the "contact info" section)
E-mail: [open contact info](look above in the "contact info" section)
Telegram: dreamer_top_one
LinkedIn: https://bit.ly/3sTte5a
GitHub: https://github.com/Dreamer4ik
Location: Kryvyi Rih, Ukraine
Ready to relocate

Profile
iOS Developer with 4+ years of professional experience building and maintaining production
iOS applications, combined with hands-on training in web application security. Experienced with
Swift, Python, REST APIs, authentication flows, Keychain, WebKit, and client-server
architecture.

Hands-on experience with Burp Suite and PortSwigger Web Security Academy, including
practical work with SQL Injection, XSS, CSRF, Authentication, Access Control, IDOR, Business
Logic vulnerabilities, and DOM-based XSS. Interested in offensive security, mobile application
security, vulnerability research, security automation, and penetration testing.

Cybersecurity Skills
Web Application Security:
SQL Injection, Cross-Site Scripting (XSS), DOM-based XSS, CSRF, Authentication
vulnerabilities, Access Control, IDOR, Business Logic vulnerabilities, Path Traversal, Command
Injection, SSRF, File Upload vulnerabilities, XXE (XML External Entity), Server-Side Template
Injection (SSTI), JSON Web Token (JWT) attacks

Security Testing Methodologies:
Black-box testing, White-box testing, vulnerability assessment, penetration testing

Cryptography:
Cryptography fundamentals, symmetric and asymmetric encryption, hashing, digital signatures,
public and private keys

Security Tools & Technologies:
Burp Suite, Wireshark, Nmap, SQLMap, Postman, Docker, Microsoft Active Directory

Scripting & Automation:
Python (automation & security scripts), Bash, PowerShell, security testing scripts

Web & Networking:
HTTP/HTTPS, REST APIs, JSON, cookies, sessions, HTTP headers, request/response
manipulation, client-server architecture, TCP/IP, ports, NAT, firewalls, VPNs, proxies

Operating Systems:
Linux, Kali Linux, macOS, Windows

Mobile / iOS
Programming: Swift

iOS Frameworks:
UIKit, SwiftUI, Foundation, AVFoundation, CoreLocation, MapKit, WebKit

Networking:
URLSession, Alamofire, REST API, JSON, Codable, Async/Await

Storage:
Keychain, UserDefaults, Core Data, Realm

Architecture:
MVC, MVVM

Other:
Auto Layout, Interface Builder/XIB, Apple Human Interface Guidelines, App Store Review
Guidelines

Programming & Development
Programming Languages:
Swift, Python, Java, SQL, XML

Databases:
Firebase, Core Data, Realm, PostgreSQL

Multithreading:
GCD, Operation

Package Managers:
CocoaPods, Swift Package Manager

Version Control:
Git, GitHub, GitLab

Tools & Technologies:
Xcode, Google Maps SDK, App Store Connect, TestFlight, Device Simulator, Push Notifications,
Apple Certificates, Firebase Analytics/Crashlytics, Jira, Figma, Slack, Assembla, Dropbox,
Adjust, Pushwoosh

Professional Experience
Right&Above

iOS Developer
February 2022 – Present

Marketplace and community platform for real estate investors, connecting users with real estate
entrepreneurs and supporting property investment activities.

Responsibilities:

● Maintained and extended existing iOS application functionality
● Designed and implemented new UI screens and application features
● Implemented application business logic
● Integrated third-party SDKs and frameworks
● Worked with REST APIs and client-server communication
● Worked with application data storage and persistence
● Implemented and maintained application networking
● Fixed bugs and improved application performance
● Developed adaptive interfaces for different iPhone models
● Created UI animations
● Developed applications in accordance with Apple Human Interface Guidelines and App
Store Review Guidelines
● Published applications and updates to the App Store

Webnauts

iOS Developer
June 2021 – February 2022

Application for premium apartment rentals, including apartment search, accommodation
booking, and ordering additional services with online payment.

Responsibilities:

● Developed applications according to customer requirements

● Designed and implemented user interfaces
● Implemented application business logic
● Integrated application functionality with backend services
● Created UI animations
● Customized UI components
● Maintained and improved existing functionality
● Fixed bugs and supported existing application features

Security Training

PortSwigger Web Security Academy
Web Application Security Training — 2026

Hands-on training through practical web security labs covering:

● SQL Injection
● Cross-Site Scripting (XSS), including DOM-based XSS
● Authentication vulnerabilities
● Access Control and IDOR
● Cross-Site Request Forgery (CSRF)
● Business Logic vulnerabilities
● Path Traversal
● Command Injection
● Server-Side Request Forgery (SSRF)
● File Upload vulnerabilities
● XML External Entity (XXE)
● Server-Side Template Injection (SSTI)
● JSON Web Token (JWT) attacks
● HTTP request manipulation and security testing with Burp Suite

Hack The Box
Cybersecurity & Penetration Testing Training — 2026

Hands-on practice through cybersecurity labs and CTF-style challenges, focusing on
penetration testing fundamentals, vulnerability discovery, and exploitation techniques.

TryHackMe
Cybersecurity & Penetration Testing Training — 2026

Hands-on training covering:

● Linux fundamentals and command-line usage

● Networking fundamentals
● TCP/IP, ports, NAT, firewalls, VPNs and proxies
● Penetration testing fundamentals
● Practical security labs and CTF-style challenges

Education
iOS Academy

Course: iOS Development
2022

Academy WEBNAUTS

Course: iOS Development
2021

Java Online Projects

Course: Enterprise Java Developer
2021

EPAM

Course: Version Control with Git
2020

JavaRush

Java Courses
2020

Technology: OOP, Java Core, Java 8, Collection API, Multithreading, I/O, NIO

Kryvyi Rih National University

Master's Degree in Electrical Engineering and Electromechanics
September 2015 – December 2020

Languages

Ukrainian: Native
English: B1 (Intermediate)
Russian: Native