vulnerability research , product security , Java, Vulnerability Management, Typescript, Application Security, Javascript, Python, LLM pipelines, AI agentic systems, Go, VEX, CVSS, EPSS, OSV, CVE, CWE, SCA, SAST, SBOM formats, purls, NVD

Tcp, Dns, Https, Tls, Code Review, Python, AWS, Java, Sql Injection, Sql, Jenkins, Linux, Owasp Top 10, Kubernetes, cross-site scripting, static analysis tools, penetration testing tools, REST architecture framework, non-SQL databases, code injection, cryptographic related weakness, Github actions, proxying, CI CD products, ArgoCD, CSRF

API security, Python, MITRE ATLAS, tool calling, RAG, vector DBs, OWASP LLM Top 10, LLM GenAI architectures, Agents

security tools , Security Controls, automation, Scripting, counter measures, defenses, security product deployment

Swagger, Restful Apis, Postman, Azure, Python, AWS, Application Security, HITRUST, Qualys VM, nist, FedRAMP

Identity and Access Management (IAM), threat modeling , Network Architecture, Microservices, Javascript, Application Security, Ruby, Cryptography, Python, AWS, Java, PowerShell, Bash, Web Services, Perl, Authentication, Security Testing, Enterprise IT systems, Systems security, Service-oriented architectures, Manual and automated secure code review, security research, Security design reviews, Security automation tools, Security architecture and design, Offensive security, Adversarial security analysis

product security , threat modeling , Application Security, Vulnerability Management, Software Engineering, security engineering, secure design reviews, secure SDLC practices, technical risk assessments, clear technical guidance, modern application security principles

Hsm, Networking, Bash, Windows, Pki, Linux, Restful Apis, Python, AppViewX, Venafi, Keyfactor, Certificate Lifecycle Management, AWS CloudHSM, PKCS#11