1.More than 20 years of experience in Web Application Security, Logging and Alerting, Security Design, Penetration Testing, Secure Coding, Mobile Application Security, Reverse Engineering (Low Level ), Application Security Controls and Validation, Risk Assessments, Regulatory Compliance and Secure Software Development Life Cycle (secure SDLC).2.Hands - on experience in developing threat models, security controls, threat analysis, creation of risk control matrices and risk mitigation strategies.3.Hands-on with Penetration Testing, DAST, SAST and manual ethical hacking.