Hands-on experience with Checkmarx, Veracode, SonarQube, Burp Suite, Snyk, Black Duck, and JFrog Xray, integrating security controls into CI/CD pipelines across AWS, Azure, Docker, Kubernetes, and IaC environments. Strong background in secure design reviews, remediation management, security automation, cloud security, risk-based vulnerability prioritization, and stakeholder collaboration within regulated enterprise environments.