technical workshops and shape practical security designs, delivery plans and technical proposals. Embed security-by-design across applications, APIs, cloud workloads and the secure SDLC through threat modelling, CI/CD controls, SAST, SCA, DAST and container scanning. Build and integrate scalable security automation using scripting, APIs, Infrastructure as Code … other areas. Practical experience securing applications, APIs, cloud workloads or engineering pipelines, supported by sound knowledge of threat modelling, vulnerability management and secure SDLC practices. Experience with at least one major cloud platform (Azure, AWS or GCP) and cloud-native security principles, including an understanding of IaC, containers and workload ...