Pavel Kann
Freelance
St Petersburg, St Petersburg City, Russia
Summary
👤
Senior🎓
Top SchoolPavel Kann is a seasoned application security engineer and former QA specialist with 9+ years of hands-on experience in web application assessments, PCI DSS compliance, and secure development lifecycle design. He has progressed from manual QA and black-box testing to senior appsec roles where he wrote CodeQL queries, automated DAST/CI pipelines, and built internal security knowledgebases. As a freelance consultant he triages issues, performs static/dynamic analysis, and produces training materials that translate deep technical findings into actionable developer guidance. Pavel has delivered public-facing workshops, run community channels around CodeQL, and created interactive security training—an indication he values teaching as much as technical rigor. Based in St. Petersburg, he blends practical offensive testing skills (certified ethical hacker) with process improvement and automation experience in container and CI/CD security. A lesser-known but telling detail: his GitHub interests span appsec and music, hinting at a creative streak that complements his methodical security work.
9 years of coding experience
9 years of employment as a software developer
Specialist, Information Security, Specialist, Information Security at Saint Petersburg University for Water Communications
English, Russian
Github Skills (38)
vulnerability9
supply-chain-security9
devsecops9
security9
vulnerability-scanners9
docker9
vulnerability-detection9
golang9
vulnerabilities8
zap8
sbom8
secrets8
static-analysis8
misconfiguration8
kubernetes8
Programming languages (6)
Github contributions (5)
shad0wrunner/security_tools
Aug 2017 - Jan 2021
Contributions:24 pushes, 3 branches in 3 years 5 months
shad0wrunner/Security_Lab
Apr 2017 - Feb 2019
Contributions:36 pushes, 1 branch in 1 year 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.