Java, Typescript, Javascript, Threat Intelligence, Malware Analysis, Python, SAST tools, software supply chain security standards, Go, triaging security alerts, open source package security, understanding of package manager ecosystems, analyzing code, static and dynamic analysis tooling, YARA rules