maturity models , Sdlc, capability assessments, code-level security controls, CycloneDX, multi-year roadmaps, BSIMM, NIST SSDF, OWASP SAMM, SPDX, CI CD pipelines, secure software development practices

Git, T-sql, Xpath, Microsoft Office 365, Confluence, Xml, Microsoft Sql Server, Jira, Xslt

threat modeling , Java, Amazon Web Services, Terraform, Ruby, Python, DAST, Apis, Ips, Static Application Security Testing, Owasp, Siem, XDR, CVSS, SCA, CWE, SAST