Skills & Expertise
Technical Arsenal
A curated stack of methodologies and tooling developed over 8+ years of applied Application Security work.
Application Security
- ▹Threat Modeling (STRIDE)
- ▹Secure Code Review
- ▹API Security Testing
- ▹SAST / DAST
- ▹Vulnerability Management & Triage
- ▹Web / Mobile Penetration Testing
- ▹Thick Client Pentesting
DevSecOps
- ▹CI/CD Security Integration
- ▹Software Composition Analysis (SCA)
- ▹Secrets Scanning
- ▹Container Security
Programming
- ▹PythonAdvanced
- ▹JavaIntermediate