Strong application security and cloud security knowledge, including threat modeling, OWASP/API security, identity and access management, encryption, secure SDLC, logging, monitoring, and resilience patterns. Embed application security and cloud security requirements into solution design, including IAM, encryption, network controls, API protection, secrets management, secure data access, logging, and monitoring.