1. Expertise in JavaEE architecture
2. Exposure to in cloud-native architecture
3. Experience in Java Application Design and architecture along with up-to-date technologies like Apache Kafka, Container orchestration and microservices architecture.
4. Strong knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10).
5. Expertise in secure coding practices for Java, Spring, REST APIs, microservices.
6. knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.
7. Hands‑on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube —)
8. AWS/Azure security controls, IAM, VPC architecture, zero‑trust principles.