Pci Dss, DAST, Gdpr, cloud security, Incident Response, Iso 27001, Vulnerability Assessments, Owasp, SOC 2, ISO 27017, application security engineering, SAST, IAST, ISO IEC 27001, SANS frameworks, ISO 27018

Node, Mobile Security, Sonarqube, AWS API Gateway, Python, Scripting, Jwt, Burp Suite, Owasp Top 10, Cloudflare WAF, SAST tools, authorization models, GitHub Actions, OWASP ZAP, API security testing, API gateway architectures, Kong, secrets scanning, API Shield, session handling, DevSecOps practices, API security risks, Accunetix, OIDC, dependency scanning

threat modeling , Oauth2, Node.js, Jwt, Django, React, Burp Suite, Gcp, Docker, Sonarqube, Owasp Top 10, FastAPI, Azure, Kubernetes, AWS, SANS CWE Top 25, Zap, Trivy, Semgrep, OIDC

Kubernetes, Owasp Top 10, Docker, SANS Top 25

Iso 27001, Owasp, Pci, Source Code Review, DevSecOps Secure CICD integration, Troubleshooting and Configuration of DevSecOps pipeline, Architecture Risk Analysis, Manual and automated scanner approaches, Application Threat Modeling, Preparing security advisories, Security Design Reviews, Fortify tool, Scanning validation and reporting of vulnerabilities, Code review false positive analysis, nist, Security Gates threshold levels, SANS

DAST, Github, API security, Javascript, Application Security, Gitlab, Python, AWS, Java, Node.js, Jenkins, Gcp, Owasp Top 10, Azure, MITRE ATLAS, Go, artifact signing, SAST, supply chain security frameworks, Secure Software Development, WAF tuning, secrets management, container scanning tools, build integrity, SCA, CI CD pipelines

Java, DAST, Javascript, Owasp Top 10, Python, SCA, CWE, SAST

threat modeling , Application Security, Vulnerability Assessments, Owasp Top 10, Penetration Testing, secure coding principles, software risk management, security policies and procedures

.NET, threat modeling , Java, Github, applications security tools, secure coding practices, Secure Design Architecture, Copilot, Agile Development standards