threat modeling , Configuration management, Penetration Testing, Code Review, Infrastructure as Code, DevSecOps factory pipeline components, security governance, code commit, DevSecOps tools Chain, public and hybrid cloud environments, automated Test and Verification, API security Testing, document test, frontend and backend languages and technologies, DevSecOps Metrics, integrate QA, Protocol Fuzzing