Skills

Languages

Proficient in:

• PowerShell
• Python

Working knowledge:

• JavaScript
• Bash
• C#
• C++

Familiar with:

• Java

Skills

Security Architecture:

• Threat modeling
• Security standards
• Zero-trust design
• Security policy and standard authorship (including AI governance)
• AI/vendor service integration security review
• Risk assessment and data classification

Cloud Security:

• Azure/AWS security services
• Identity management
• Compliance
• Shadow IT/AI discovery and access governance

DevSecOps:

• Security automation
• CI/CD security
• IaC security scanning

Development:

• Scripting
• Automation
• Tool development

Tools

Version Control:

• Git
• Perforce

CI/CD:

• Jenkins
• Azure DevOps
• GitHub Actions

Infrastructure as Code:

• Terraform
• Ansible
• CloudFormation

Cloud:

• AWS CLI/SDK
• Azure CLI

Containers:

• Docker
• Kubernetes / AKS

Identity & Access Management:

• Single Sign-On (SSO)
• SAML
• OIDC
• Workload Identity Federation (WIF)
• Entra ID / Azure AD
• AWS IAM Identity Center
• Okta

Monitoring/Observability:

• Azure Monitor
• CloudWatch
• ELK

Secret Management:

• Azure Key Vault
• AWS Secrets Manager

Frameworks & Standards:

• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• ISO 27001
• ISO 27002
• PCI DSS
• OWASP

Security Tools:

• WAF
• CASB (including AI app visibility and control)
• EDR
• SAST
• DAST
• DLP
• Email Security
• Burp Suite
• OWASP ZAP
• Malwarebytes Forensic Timeliner
• Trivy
• tflint

Database Security:

• Transparent Data Encryption (TDE)
• Column-level encryption
• Data masking, sanitization, anonymization, and tokenization
• Database auditing and access control

Certifications

Security:

• Certified Information Systems Security Professional (May 2022)