Has ability to write secure code in three or more languages (e.g.C, C+, C#, Java, JavaScript, COBOL, SQL)
Familiar with secure coding standards (e.g.OWASP, CWE, SEI CERT) and vulnerabilities
Able to perform debugging and troubleshooting to analyze core, heap, thread dumps and remove coding errors; understands cryptography techniques and libraries to build secure communication and user authentication/authorization (e.g.OAuth1.0a, SAML, GnuTLS, OpenSSL, PKCS#11, CryptLib, JCA/JCP, JWT/JWS/JWE)
Understands and implements standard branching (e.g. Gitflow)
Has skills in test driven and behavior driven development (TDD and BDD)
Understand use cases for advanced design patterns (e.g.service-to-worker, MVC, API gateway, intercepting filter, dependency injection, lazy loading, all from gang of four)
Has skills to collaborate with team and business stakeholders to estimate requirements (e.g.story pointing) and prioritize based on business value
Has skills to understand, report, and optimize delivery metrics to continuously improve upon them.
Has skills to orchestrate release workflows and pipelines, and apply standardized pipelines via APIs to achieve CI and CD using industry standard tools (e.g.Jenkins, Bamboo, AWS/Azure pipelines, XL Release, others)
Has skills to undertake infrastructure and deployment automation using industry standard tooling (e.g. Chef, Puppet, Saltstack, Terraform, Ansible)