Tagcor

project manager

Direct hands on experience developing and securing web APIs and web applications: REST, SOAP, gRPC.
Direct hands-on experience with security testing of web services and web APIs.
Solid hands-on experience with leading threat modeling exercises for applications and services.
Solid understanding of risk management, security architecture and secure SDLC practices.
Strong experience and understanding of API identity and access management controls: OAuth 2.0, OIDC, JWT
Strong experience and understanding of familiarity with cryptography controls: Data at rest, in motion and in-use.
Experience with industry standards and frameworks: NIST 800-53, NIST CSF, OWASP, SANS Top 25.
Experience with Java, JavaScript and mobile application development.
Familiarity with database architectures: Oracle, SQL and NoSQL Databases.
Information security professional certifications such as SANS GIAC, CISSP, CISM.
Experience with service-oriented architectures and web services security