Strong understanding of IAM, RBAC, least privilege and privileged-access controls.
Knowledge of VPC, Security Groups, network segmentation, firewalls, IDS/IPS and network security.
Hands-on experience with vulnerability management and VAPT remediation.
Robust knowledge of OWASP Top 10, web application security and API security.
Experience with SAST, DAST, SCA/dependency scanning and security scanning tools.
Understanding of CI/CD pipeline security and DevSecOps practices.
Knowledge of Docker/container security and Linux security/hardening.
Understanding of encryption, TLS, key management, secrets management and data protection.
Familiarity with SIEM, security logging, monitoring and incident response.
Basic scripting capability using Python, Bash or similar scripting languages for security automation. Understanding of SBOM and software supply-chain security is preferred