Knowledge of secure software development principles, modern application architectures, and modern software architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments. Experience applying industry frameworks such as OWASP SAMM, BSIMM, NIST SSDF, NIST CSF, NIST AI RMF, ISO 27001, ISO/IEC 42001, IEC 62443, and MITRE ATT&CK or ATLAS.