Cybersecurity Engineer

Cryptography Fundamentals

Why: You can pick the right primitive for a design review, such as hashing versus encryption for stored passwords, and spot weak key handling before it ships.

Security Frameworks (NIST/ISO 27001)

Why: You can map a gap found in an audit to a NIST CSF or ISO 27001 control and justify the fix to a manager in the language the framework already uses.

OWASP Top 10

Why: You go beyond spotting flaws and decide how a team fixes a whole class of them, for example parameterised queries after a recurring injection finding.

Patch Management Strategy

Why: You can decide which patch goes out this week and which waits for a window, weighing exploit activity against rollback risk when a critical CVE lands.

Authentication Protocols (OAuth2/OIDC/SAML)

Why: You can choose the right OAuth2 flow or SAML setup when integrating a new app with the identity provider, and catch redirect or token-handling mistakes.

Access Control Models (RBAC/ABAC)

Why: You can design roles or attribute rules for a new system so access matches job function, and fix the permission creep found in a quarterly access review.

SIEM Operations (Splunk/Sentinel)

Why: You can onboard a new log source into the SIEM and tune a noisy correlation rule so analysts stop ignoring alerts that matter.

Log Analysis & Correlation

Why: You can rebuild a timeline across firewall, endpoint and authentication logs to show how a suspicious login moved through the environment.

Secure SDLC Integration

Why: You can add SAST, SCA or DAST gates to a CI/CD pipeline and set thresholds that block real risk without freezing releases for every minor finding.

Container Security

Why: You can review a Dockerfile and Kubernetes manifest, flag a root container or baked-in secret, and require image scanning before a workload reaches the cluster.