DevSecOps, Application Security, PowerShell, Bash, Coverity, Python, Azure Cloud Security, Polaris, Wiz, BlackDuck, Jfrog Xray

Waf, API security, Owasp Top 10, DDoS mitigation, identity MFA, egress DLP

DAST, Github, API security, Javascript, Application Security, Gitlab, Python, AWS, Java, Node.js, Jenkins, Gcp, Owasp Top 10, Azure, MITRE ATLAS, Go, artifact signing, SAST, supply chain security frameworks, Secure Software Development, WAF tuning, secrets management, container scanning tools, build integrity, SCA, CI CD pipelines

maturity models , Sdlc, capability assessments, code-level security controls, CycloneDX, multi-year roadmaps, BSIMM, NIST SSDF, OWASP SAMM, SPDX, CI CD pipelines, secure software development practices

Owasp Top 10, Qualys, SCA, CWE, SAST, Shodan, Offensive security, CVSS, Burp Suite Professional, Bug bounty programs

threat modeling , DAST, Penetration Testing, vulnerability assessment, Web Application Security, SCA, SAST, applied cryptography, container scanning, secure coding education, secure software development practices

Java, Maven, Gcp, Npm, DAST, Vulnerability Management, Burp Suite, AWS, Application Security, Python, Azure, container security, Snyk, package managers, dependency scanning, Trivy, OWASP ZAP, vulnerability management tools, GitHub Dependabot, pip, Go, Kubernetes security, microservices architectures, cloud-native security, SAST, Clair, Go modules

Kubernetes, Owasp Top 10, Docker, SANS Top 25