threat modeling , secure sdlc , Vulnerability Management, Docker, Terraform, Cloudformation, Jenkins, CSPM, Owasp Top 10, AWS Security Hub, Kubernetes, Policy-as-Code OPA, SBOM, Containers orchestration, IaC, SLSA, GitHub Actions, Supply-chain security, Microsoft Sentinel, Secure design reviews, CloudTrail, Risk assessments, GitLab CI, CI/CD pipelines, Operational cloud security, GuardDuty, Cryptography basics