Senior Security Threat Manager | ISO 27001 Lead Auditor | Java/Spring Boot Engineer

ISO/IEC 27001 & Information Security Management
Expertise in ISO/IEC 27001 compliance, ISMS design, gap analysis, risk register creation, and security audit standards including NIST CSF, OWASP Top 10, and CWE/CVE reporting. Certified PECB ISO/IEC 27001 Lead Auditor (UKAS & IAS Accredited).

Penetration Testing & Offensive Security
Comprehensive knowledge of penetration testing, ethical hacking, and red team operations across web applications, APIs, cloud environments, and blockchain platforms. Proficient with tools such as AFL++, libFuzzer, Ghidra, IDA Pro, Frida, Burp Suite, KLEE, and exploit development.

Cloud Security Architecture & EDR/XDR
Hands-on experience with cloud security architecture on AWS (primary), GCP, and Azure including IAM, Kubernetes/container hardening, and RBAC. Skilled in endpoint detection and response using CrowdStrike Falcon for cloud security, identity protection, and SIEM engineering.

Blockchain & Smart Contract Security
Security auditing of smart contracts across EVM/Solidity, Rust-based chains (Solana, ICP, Sui, NEAR, Cosmos), Move (Aptos/Sui), Cairo, and Immunefi bug hunting.

AI & LLM Security
Assessment of AI and LLM security risks including prompt injection, chatbot safety, LLM red-teaming, MCP security evaluations, and CNN and transformer architectures.

Cryptography & Cryptographic Protocol Analysis
Applied cryptography covering ECC (Schnorr), hash functions, homomorphic encryption, zk-SNARKs/STARKs, and TLS/PKI hardening.

Java/Spring Boot Backend Engineering
Backend engineering with Java SE 21 and Spring Boot 3.x, including Java 11 to 17 to 21 migration, event-driven microservice architecture design, and Apache Kafka integration for async security event pipelines.

Programming Languages
Proficiency in Java (SE 21, Spring Boot 3.x), Python, Rust, Golang, C++, Solidity, JavaScript/TypeScript, and Assembly.

Event-Driven Architecture & Databases
Design and implementation of event-driven systems using Apache Kafka (producer/consumer, topic design, consumer groups, offset management), PostgreSQL (ACID, transactions, optimistic locking, schema design), and Redis (caching, idempotency keys).

Microsoft Endpoint & Identity Management
Experience with Microsoft Intune, SCCM, Microsoft 365 Security, Azure AD/Entra ID, Conditional Access, and Microsoft Defender for Endpoint.

Security Tooling & Monitoring
Proficient with Wireshark, GDB/LLDB, AddressSanitizer, Slither, Foundry, Semgrep, Grafana, Prometheus, and STRIDE threat modeling.