Anastasiia

Anastasiia
Kletsko
Junior QA Engineer

SUMMARY
CONTACT ME
Juior QA Engineer with a technical background in Cybersecurity and Full-Stack
Web Development and hands-on experience testing web applications and REST
[відкрити контакти](див. вище в блоці «контактна інформація») APIs.
[відкрити контакти](див. вище в блоці «контактна інформація») Experienced in functional and exploratory testing, test case and scenario design,
positive and negative testing, API request/response validation, authentication and
[відкрити контакти](див. вище в блоці «контактна інформація») authorization, form validation, CRUD operations, bug reproduction and fix
verification.
https://github.com/nasteishyk
Familiar with Postman, HTTP/HTTPS, Browser DevTools, Swagger, Git/GitHub,
Lviv, Ukraine MongoDB and SQL. Additional experience in web application security testing
with Burp Suite, OWASP ZAP, Greenbone/OpenVAS, Trivy, OWASP
Dependency-Check and Semgrep.
Strong analytical and problem-solving skills with a good understanding of SDLC,
STLC, client-server architecture and web application behavior.
EDUCATION
TECHNICAL SKILLS
Cybersecurity, Bachelor’s degree Testing & QA: Software Testing Fundamentals, Test Design Techniques,
Lviv Polytechnic National University Functional Testing, Exploratory Testing, UI Testing, API Testing, Test Cases,
2024-2028 Test Scenarios, Regression Testing, Smoke Testing, Bug Reporting, Defect
Investigation, SDLC, STLC
API & Web: Postman, REST API, Swagger, HTTP/HTTPS, HTTP Methods &
Full-stack Developer
Status Codes, JSON, Request/Response Validation, Headers, Cookies, JWT,
IT School GoIT Browser DevTools, Network Tab, DOM, Client-Server Architecture
2025-2026
Programming: JavaScript, TypeScript, Python, C++, C#
Web Development: React.js, Next.js, Node.js, Express.js, Axios, React Query,
Zustand, Vite, HTML/CSS
Databases: MongoDB, SQL, CRUD, Data Modeling, Data Validation
Tools: Git, GitHub, Postman, Swagger, Burp Suite, OWASP ZAP, Docker,
LANGUAGES Trello, Figma
Networking & Cybersecurity: TCP/IP, OSI Model, DNS, Network Traffic
English - Upper-Intermediate Analysis, Web Application Security, Authentication & Authorization, Input
Validation, CORS, Vulnerability Assessment
Ukrainian - Native

TESTING EXPERIENCE
Full-Stack Web Development — GoIT
Developed web applications using JavaScript, TypeScript, React, Next.js,
Node.js and Express.js.
Worked with REST APIs, authentication, validation and CRUD functionality.
Worked with MongoDB and SQL fundamentals.
Used Browser DevTools for debugging and network analysis.
Used Git/GitHub for version control and Trello for task management.
Debugged frontend and backend issues across application layers.

SpeedHub — Traffic Rules Learning Platform
Tech Stack: React, Next.js, Node.js, Express.js, MongoDB, REST API, Swagger,
Postman, Git/GitHub, Browser DevTools
Performed functional and exploratory testing of web application features.
Designed and executed test scenarios for positive, negative and edge cases.
Tested REST API endpoints in Postman, including HTTP methods, status
codes and request/response validation.
Tested authentication, authorization, protected routes, forms, input
validation, CRUD operations and user states.
Used Browser DevTools Network tab to analyze requests, responses,
headers, payloads and errors.
Reproduced bugs, analyzed expected vs. actual behavior and verified fixes.
Validated data consistency between frontend, API and MongoDB.
Performed regression checks after application changes.
Tested responsive behavior and cross-browser functionality.
Used Semgrep, Trivy and OWASP Dependency-Check for source-code,
dependency and container security analysis.

University Security Testing Labs — Lviv Polytechnic National University
Tools: OWASP Juice Shop, OWASP ZAP, Greenbone/OpenVAS, Trivy, OWASP
Dependency-Check, Semgrep, Docker
Performed web application security testing and vulnerability assessment.
Tested OWASP Juice Shop using OWASP ZAP.
Performed vulnerability scanning with Greenbone/OpenVAS and Trivy.
Analyzed dependencies with OWASP Dependency-Check.
Performed source-code security analysis with Semgrep.
Worked with Docker-based security testing environments.
Analyzed HTTP/HTTPS traffic, application responses and security headers.
Tested input validation and documented identified security issues.