Led DevSecOps initiatives to embed security principles into development lifecycle, including vulnerability management, code review, security framework implementation, and CI/CD pipeline integration. Partnered with developer teams and architects to design, implement, and enhance application security solutions.

Risk identification, vulnerability analysis, and implementing correct technical security control. Apply security architecture principles to ensure confidentiality, integrity, and availability requirements are met.

Configuring SAST, DAST tools like Fortify, Sonarqube, Blackduck, Qualys andstandard security proactive controls. Performed design, development of middleware application using various types of technologies like Java/J2EE, REST, Spring Boot, Open API, UML.

Managed full SDLC of one or more concurrent projects independently, including design, development, timeline, checkpoints, and cost to ensure timely and quality delivery of services to customers (internal and/or external).

Design and develop web-services for external system integration using SOAP, WLI, Struts, Axis2.

Development, Enhancement, Customization of application, and dashboard module according to SCR using Java, JSP, Servlets, EJB, Struts, Ajax.