Security Team Application

[Jasurbek-Masimov]

Why do you want to join the security team?

1. I want to contribute positively to the community by applying the knowledge and skills that I gained through years of hard work.
2. As an Associate of ISC2 I need 5 years of work experience in cybersecurity to receive my certificate.
3. I want to work in a team of passionate IT professionals that is driven by strong open-source mission.

I think that being part of Backdrop CMS Security Team will help me achieve my goals.

Please briefly explain your experience with security

I have strong offensive security skills in infrastructure and web application pentesting.
I have also a solid understanding of designing, implementing, and managing cybersecurity programs as an Associate of ISC2.

Please link to at least 1 GitHub pull request you have filed

Not yet.

(Optional) Please link to at least 1 Backdrop project you have contributed to

Not yet.

[quicksketch]

Hi @Jasurbek-Masimov, I appreciate your volunteering. If it is not clear, security team members are not paid. Members of the security team have access to a lot of private information and trust is vital for our community. We do not accept new members unless they have a history of contribution and established trust.

Open-source contribution is an excellent way to build reputation and experience. If you're interested still, you can start by contributing in code reviews in the core issue queue. Or if you want to focus on security, you can research potential vulnerabilities and mail them to security@backdropcms.org. We credit reporters on CVEs and in our announcements when the vulnerabilities have been fixed.