I’m a results-driven Application Security Analyst (AppSec) with 5+ years of experience securing web, cloud, and API-based applications. My expertise spans: 🔒 Secure Software Development Lifecycle (SDLC)📊 Vulnerability Management (SAST, DAST, bug bounty triage)☁️ Cloud Security (AWS, IAM, S3 hardening, Zero Trust)🔍 Threat Modeling, Risk Assessments & Penetration Testing🛡️ Regulatory Compliance (ISO 27001, SOC 2, GDPR, PCI DSS)🧠 Security Awareness & Developer TrainingI hold certifications in CEH, AWS Security Specialty, and IBM QRadar, and I’ve conducted red-team simulations, secure code reviews, and CI/CD pipeline hardening. I bring a DevSecOps mindset, integrating security into agile environments and automating controls without slowing delivery. I’ve worked across GRC, vulnerability response, identity and access management (IAM), and secure architecture. Currently seeking opportunities in Application Security, Cloud Security, or Product Security, where I can drive risk reduction, build security culture, and protect customer trust at scale.