Pci Dss, DAST, Gdpr, cloud security, Incident Response, Iso 27001, Vulnerability Assessments, Owasp, SOC 2, ISO 27017, application security engineering, SAST, IAST, ISO IEC 27001, SANS frameworks, ISO 27018

Burp Suite, Veracode, DAST, SCA, Secure Code Scanning, OWASP ZAP, Analytical Problem-Solving, SAST, Secure Coding Practices, Application Penetration Testing

Node, Mobile Security, Sonarqube, AWS API Gateway, Python, Scripting, Jwt, Burp Suite, Owasp Top 10, Cloudflare WAF, SAST tools, authorization models, GitHub Actions, OWASP ZAP, API security testing, API gateway architectures, Kong, secrets scanning, API Shield, session handling, DevSecOps practices, API security risks, Accunetix, OIDC, dependency scanning

threat modeling , Oauth2, Node.js, Jwt, Django, React, Burp Suite, Gcp, Docker, Sonarqube, Owasp Top 10, FastAPI, Azure, Kubernetes, AWS, SANS CWE Top 25, Zap, Trivy, Semgrep, OIDC

Java, DAST, Javascript, Owasp Top 10, Python, SCA, CWE, SAST

Iso 27001, Owasp, Pci, Source Code Review, DevSecOps Secure CICD integration, Troubleshooting and Configuration of DevSecOps pipeline, Architecture Risk Analysis, Manual and automated scanner approaches, Application Threat Modeling, Preparing security advisories, Security Design Reviews, Fortify tool, Scanning validation and reporting of vulnerabilities, Code review false positive analysis, nist, Security Gates threshold levels, SANS

Owasp Top 10, Qualys, SCA, CWE, SAST, Shodan, Offensive security, CVSS, Burp Suite Professional, Bug bounty programs

DAST, Github, API security, Javascript, Application Security, Gitlab, Python, AWS, Java, Node.js, Jenkins, Gcp, Owasp Top 10, Azure, MITRE ATLAS, Go, artifact signing, SAST, supply chain security frameworks, Secure Software Development, WAF tuning, secrets management, container scanning tools, build integrity, SCA, CI CD pipelines

Kubernetes, Owasp Top 10, Docker, SANS Top 25