secure sdlc , API security, Microservices, change management, Owasp Top 10, app access controls, CERT-IN regulations, cloud-hosted applications, security observations, network basics, product-level ITGCs, mobile web application security, app-layer encryption, version release governance, OWASP MASVS, backup restore checks, RBI digital banking security guidelines, Audit Documentation, vulnerability management workflows