1. Expertise in JavaEE architecture
2. Exposure to in cloud-native
architecture
3. Experience in
Java Application Design
and architecture along with modern technologies like Apache Kafka, Container orchestration and
microservices architecture.
4. Robust knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10).
5. Expertise in secure coding practices for Java, Spring, REST APIs, microservices.
6. knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.
7. Hands‑on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube —)
8. AWS/Azure security controls, IAM, VPC architecture, zero‑trust principles.