threat modeling , Metasploit, Terraform, Sonarqube, AWS, Cloudformation, Nmap, Penetration Testing, Jenkins, Burp Suite, DevSecOps, Vulnerability Assessments, Owasp, Azure, SSDF, Azure Key Vault, Secure Code Reviews, GitHub Actions, Trivy, Prowler, pacu, ScoutSuite, GitLab CI, Cloud Security Assessments, nist, Infrastructure-as-Code, Checkmarx, Semgrep