1. Expertise in JavaEE architecture
2. Exposure to in cloud-native architecture
3. Experience in Java Application Design and architecture along with modern technologies like Apache Kafka, Container orchestration and microservices architecture.
4. Robust knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10).
5. Expertise in secure coding practices for Java, Spring, REST APIs, microservices.
6. knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.
7. Hands‑on experience with SAST, DAST, SCA, IAST, container scanning tools (e.G., Fortify, SonarQube —)
8. AWS/Azure security controls, IAM, VPC architecture, zero‑trust principles.