vulnerability research , product security , Java, Vulnerability Management, Typescript, Application Security, Javascript, Python, LLM pipelines, AI agentic systems, Go, VEX, CVSS, EPSS, OSV, CVE, CWE, SCA, SAST, SBOM formats, purls, NVD

DAST, Security Testing, Vulnerability Assessments, Secure Code Review, Penetration Testing, AWS, Gcp, Containers, Azure, Kubernetes, software supply chains, OWASP Top 10 vulnerabilities, OAuth 2.0, SAST, JWT security, threat modelling, AI ML threat modelling, cloud-native platforms, OpenID Connect, prompt injection testing, cloud security best practices, SCA, cryptographic controls, CI CD pipelines, vulnerability remediation, Responsible AI, OIDC

Iam, Python, AWS, CrewAI, IGA, K8S, LLM Guardrails, Go, OWASP LLM Top 10, AutoGPT, LangGraph, EWS Early Warning Systems, Semantic Firewalls

Nat, Cisco Asa, Logging, Cisco Ise, Siem, network security principles, change management tools, F5 Firewall, F5 Web Application Firewall, access control rules, ITSM ticketing, IPS technologies, routing-related changes, Cisco FMC, VPN configurations, firewall policies, Cisco FTD, enterprise monitoring

product security , threat modeling , Application Security, Vulnerability Management, Software Engineering, security engineering, secure design reviews, secure SDLC practices, technical risk assessments, clear technical guidance, modern application security principles

product security , Penetration Testing, Application Security, API Security, Secure Code Reviews, Threat Modelling, Container Security, Attack Simulation, AI LLM Security, Secrets Management

Containers, Authentication, Python, MITRE ATLAS, data pipelines, observability evaluations, secrets management, Go, OWASP’s LLM Top 10, NIST AI Risk Management Framework, proxy architecture, API gateways, Infrastructure-as-Code, graceful failure handling

.NET, DAST, Java, Vulnerability Management, Typescript, Javascript, Containers, Python, Kubernetes, AWS, container scanning, SCA, SAST, secret scanning