DevSecOps, Cloud Security, Python, AI-enabled SDLC, CI CD, Application Security Posture Management

Kubernetes, Owasp Top 10, Docker, SANS Top 25

Sdlc, SPDX, NIST SSDF, CycloneDX, code-level security controls, OWASP SAMM, secure software development practices, BSIMM

, Web Testing, Security Testing, DAST, Security Architectures, Linux OS Internals, Secrets Management, Secure Coding Standards, AI Security, Security Frameworks, Infrastructure as Code, Static and Dynamic Security Analysis, SAST, SCA

Iso 27001, Owasp, Pci, Source Code Review, DevSecOps Secure CICD integration, Troubleshooting and Configuration of DevSecOps pipeline, Architecture Risk Analysis, Manual and automated scanner approaches, Application Threat Modeling, Preparing security advisories, Security Design Reviews, Fortify tool, Scanning validation and reporting of vulnerabilities, Code review false positive analysis, nist, Security Gates threshold levels, SANS

Java, Maven, Gcp, Npm, DAST, Vulnerability Management, Burp Suite, AWS, Application Security, Python, Azure, container security, Snyk, package managers, dependency scanning, Trivy, OWASP ZAP, vulnerability management tools, GitHub Dependabot, pip, Go, Kubernetes security, microservices architectures, cloud-native security, SAST, Clair, Go modules

.NET, threat modeling , Scripting, Java, Ruby, Swift, Python, Security Architecture, Go, AWS Products and Services, Command Line Tools, Security Code Review

data engineering , secure sdlc , DAST, Data Analytics, Power Bi, Vulnerability Management, PowerShell, Tableau, Application Security, API Security, Excel, Scripting, Python, SQL Databases, Data Bricks, SCA, data analysis techniques, Container Security, SAST, automation technologies, Process Automation, reporting dashboard development

Hsm, Tls, Low-level embedded programming in C, Embedded systems software development, Secure Architectures, Automotive Cybersecurity, Embedded Operating Systems, Hardware Crypto accelerators, Secure update OTA, EVITA, ISO21434, Secure on-board communication, Scripting with Python, MACsec, Embedded processors and microcontroller architectures, TrustZone, Secure bootloader

threat modeling , Java, Security Vulnerabilities, Javascript, Python, AWS, Manual source code review, Security Architecture, Security automation tools, Adversarial security analysis