Professional
Technical Skills
Security Tooling & Software
Governance & Compliance
NIST 800-53
FedRAMP
OSCAL
STIGs
RMF
Compliance as Code
Cloud & Infrastructure
AWS
GCP
Kubernetes
Docker
IaC / CaC
Platform Design
Security Engineering
Threat Modeling
SIEM
DevSecOps
Security Architecture
Automation
Development
JavaScript
Go
Python
CI/CD
Computing Frameworks
Areas of Expertise
Governance, Risk & Compliance
NIST 800-53, FedRAMP, RMF, STIGs, OSCAL
Cloud Security
AWS, GCP, cloud migration strategy, containerized platform authorization
DevSecOps
CI/CD security, infrastructure as code, compliance as code
Security Architecture
Threat modeling, security design, risk management frameworks
Leadership
Cross-functional team leadership, stakeholder management, strategic planning
Speaking
